Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4qAtrtbhtlLzm6JoeghUTGzb6fQ.roa
File: 4qAtrtbhtlLzm6JoeghUTGzb6fQ.roa (raw, json)
Hash identifier: huc7rxkZO5OUEbWrpu1+tkMgc0g+dz4RpbLLkdJOpuY=
Subject key identifier: E2:A0:2D:AE:D6:E1:B6:52:F3:9B:A2:68:7A:08:54:4C:6C:DB:E9:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487DFFCDE4E95BA933B8A4B749523E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4qAtrtbhtlLzm6JoeghUTGzb6fQ.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209578
IP address blocks: 193.180.64.0/21 maxlen: 32
193.182.96.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7d:ff:cd:e4:e9:5b:a9:33:b8:a4:b7:49:52:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a02daed6e1b652f39ba2687a08544c6cdbe9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e1:2e:5c:67:33:10:13:1b:b7:4b:22:d0:35:
9b:ce:93:60:3e:0f:86:31:97:19:44:2e:b7:f3:be:
ad:36:b4:a1:28:49:da:cd:1e:39:f0:33:28:dd:62:
35:e6:4b:c0:d2:56:6b:63:0d:13:e0:54:8a:c0:79:
00:69:cd:8d:62:57:ed:c2:43:9b:8a:86:64:9c:29:
61:35:40:10:39:be:96:b6:27:df:5f:dc:a9:45:28:
80:5f:6b:7b:ea:22:b1:2b:96:45:1a:5f:02:3d:b6:
55:50:93:75:27:4f:33:ff:82:80:92:58:1b:d0:a1:
8c:57:a9:1a:03:4d:37:56:5e:a6:5c:2b:09:31:fd:
5e:ba:d8:d1:d3:d7:90:68:f7:21:73:ee:ce:e9:5e:
72:a3:cf:92:4f:48:d3:a9:19:83:db:01:eb:33:45:
1a:fd:40:e6:2a:38:77:7d:96:19:21:eb:85:c7:99:
6e:34:56:9e:6d:26:57:c7:4b:bd:06:df:3b:b2:76:
80:d8:14:e9:3a:12:aa:e0:93:ec:f6:4b:b3:42:9c:
5c:65:06:ca:e5:65:55:64:4e:b0:20:e9:d2:38:b4:
68:e6:51:f8:e6:d3:ef:79:1c:5e:35:b2:e3:30:2a:
a2:85:83:c7:42:0f:f1:b3:b9:65:1c:36:0e:34:1a:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:2D:AE:D6:E1:B6:52:F3:9B:A2:68:7A:08:54:4C:6C:DB:E9:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4qAtrtbhtlLzm6JoeghUTGzb6fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.64.0/21
193.182.96.0/21
Signature Algorithm: sha256WithRSAEncryption
36:77:83:25:cd:66:a9:f1:4d:8c:9c:4e:9a:ab:3e:fd:5e:7d:
47:3e:2b:0f:26:a5:44:47:df:b3:d6:4b:aa:09:3f:9a:bd:28:
5f:ec:1c:f4:cb:4a:1d:2d:7a:0f:df:ee:5f:ec:42:f6:60:8d:
52:6b:2e:ce:a8:96:b8:f8:da:c7:26:b7:76:b6:bc:2c:43:1d:
79:e6:2b:4c:b8:ec:3b:d9:73:12:36:9b:01:65:be:4b:62:26:
48:f1:f3:67:65:12:eb:d8:06:d0:eb:29:db:01:a3:dc:e5:29:
5f:09:76:b9:d7:8f:1d:9f:80:5b:ea:b4:a4:2c:a1:20:83:18:
bf:91:34:4f:83:58:d6:de:f1:46:e4:19:d9:4f:ff:96:cd:bd:
08:88:aa:e6:d1:ee:d0:82:c0:41:78:22:f0:82:41:80:c4:40:
db:00:c8:08:6c:f8:2c:ba:75:d2:73:fa:8b:f8:fa:2a:05:ea:
8a:b1:cc:a5:51:b0:32:06:47:dc:57:1b:28:0a:9d:0e:50:52:
b9:49:51:7a:c3:a1:2b:d7:61:f9:e9:72:cd:91:d1:fc:d4:da:
d4:c6:e2:32:63:a9:bb:f6:30:34:27:52:ec:38:00:57:e8:d1:
e8:0b:0d:d4:d2:3d:1d:a5:ce:99:d6:00:c8:1f:5b:21:61:ed:
3b:e5:5a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:51 2025 by rpki-client