Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4emtttVOUy7BkZwREASbkV-QE5c.roa
File: 4emtttVOUy7BkZwREASbkV-QE5c.roa (raw, json)
Hash identifier: lgSSP8FbHFoIK4qXEIs88z2of85JF1FcClMwL03mg+Q=
Subject key identifier: E1:E9:AD:B6:D5:4E:53:2E:C1:91:9C:11:10:04:9B:91:5F:90:13:97
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019034E5D0AE9B7B4AD1131A16B9F542C874
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4emtttVOUy7BkZwREASbkV-QE5c.roa
Signing time: Thu 20 Jun 2024 09:06:34 +0000
ROA not before: Thu 20 Jun 2024 09:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.5.0/24 maxlen: 24
192.71.40.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.168.0/24 maxlen: 24
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:e5:d0:ae:9b:7b:4a:d1:13:1a:16:b9:f5:42:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 20 09:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e9adb6d54e532ec1919c1110049b915f901397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:a8:af:1f:3e:98:b5:7f:96:3f:86:ef:37:
99:54:08:2f:db:f0:37:0a:15:d3:03:6a:b0:54:51:
d9:56:a3:31:96:00:fa:bb:82:2d:5d:ac:09:0b:4f:
30:25:ba:3f:53:fc:26:5c:15:f6:82:a1:46:d9:98:
0e:81:3b:25:50:c2:78:ec:d8:66:c5:97:bc:4b:ae:
d4:07:10:40:8e:74:2e:c5:47:a2:ac:9a:34:47:be:
50:ad:09:3a:22:7d:92:dd:2d:b4:10:b6:8c:34:bb:
7f:66:c3:f2:af:8e:b4:3a:e5:ad:f5:02:2d:9b:b9:
95:d1:63:bc:af:c4:6a:5e:94:fa:4e:0d:86:b2:22:
54:3c:b5:74:69:7a:f3:4f:6b:74:99:c2:66:68:cd:
f8:41:ce:61:03:cf:f7:a1:f2:6b:2b:d6:72:ba:77:
b2:11:d0:51:af:86:7c:45:6d:ba:8d:18:83:df:5b:
16:fc:ec:83:aa:f0:07:7f:21:f9:b5:19:75:2e:0e:
31:3e:0f:5d:99:3c:35:13:3f:30:7c:6c:dd:36:47:
e9:30:61:f3:fb:a1:3c:d4:00:ba:31:7e:b6:fb:55:
00:21:7e:9a:17:00:60:f9:dd:c1:11:28:52:9d:e9:
ef:f8:92:98:e6:8a:74:7d:d2:0e:de:a0:6e:c1:61:
e5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:AD:B6:D5:4E:53:2E:C1:91:9C:11:10:04:9B:91:5F:90:13:97
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4emtttVOUy7BkZwREASbkV-QE5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.5.0/24
192.71.40.0/24
192.71.97.0/24
192.71.158.0/24
192.121.101.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.168.0/24
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:30:e0:8d:66:92:32:97:6b:24:51:a6:62:8a:7a:03:96:24:
0d:4f:20:24:5f:f8:2a:36:04:8f:27:3e:99:8c:32:14:50:e7:
99:dd:43:1d:21:ac:2d:7c:d0:0c:cd:a6:cf:ce:6f:46:e1:1e:
b1:31:90:54:f5:47:da:c6:67:7a:b3:5d:df:0c:2a:b9:cb:09:
8d:4f:a9:c8:29:28:83:07:87:65:d7:6d:d1:dc:43:4a:9b:a7:
04:24:4a:67:6e:10:78:e2:52:58:98:82:ad:d7:67:b4:04:c5:
37:37:c0:24:af:68:b1:60:fb:8a:5d:53:72:c1:ec:31:cf:c7:
5d:1e:8f:e1:1d:7d:b1:41:39:ba:6c:73:0b:99:df:12:a2:69:
4c:56:08:b4:44:53:c6:92:12:d4:15:50:84:ea:db:64:bd:51:
d2:0f:c0:88:0b:c4:94:13:cb:42:82:bb:74:39:a4:bd:39:99:
1e:da:b6:5d:94:df:c6:d3:00:68:5e:08:4d:96:9e:6e:44:09:
92:fe:c2:74:d8:5e:a0:04:bf:54:4f:98:8a:ca:44:dd:8b:a4:
2e:d6:70:e6:6d:b8:f5:b8:36:d9:bb:9e:d2:d1:ef:e0:55:22:
06:6e:1f:1a:4f:e1:47:02:ee:b1:a8:fc:f2:00:7d:d9:9d:c9:
fe:48:8a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:59 2025 by rpki-client