Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5BYsE7JeR5UoCpBlgK9LkINr-I0.roa
File: 5BYsE7JeR5UoCpBlgK9LkINr-I0.roa (raw, json)
Hash identifier: yBwvpliwdWlwm8s2MK/VWwTPdHTZTctIOhUKnlun5Nw=
Subject key identifier: E4:16:2C:13:B2:5E:47:95:28:0A:90:65:80:AF:4B:90:83:6B:F8:8D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748605BCAABE8FB908099C85376309F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5BYsE7JeR5UoCpBlgK9LkINr-I0.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51826
IP address blocks: 192.165.158.0/23 maxlen: 23
192.165.164.0/23 maxlen: 23
193.180.196.0/23 maxlen: 23
193.180.198.0/24 maxlen: 24
193.180.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:60:5b:ca:ab:e8:fb:90:80:99:c8:53:76:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4162c13b25e4795280a906580af4b90836bf88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:cd:b0:76:c0:ab:27:2d:f9:8e:aa:2d:d4:
ff:0a:6a:f0:5c:6d:9d:55:58:f4:3c:3f:46:f1:d1:
58:68:c8:dd:db:d3:d8:90:ab:d0:42:00:f2:b1:30:
02:d0:d9:33:91:a7:51:20:40:a1:c9:1c:20:db:a8:
9e:29:0c:72:99:12:bb:1d:60:42:f3:a6:92:b2:da:
50:dd:7c:70:c4:cf:42:3f:c2:f9:15:b9:9b:fa:33:
8f:59:5d:96:b3:7d:56:21:96:c1:56:5f:f0:7b:98:
d4:0a:24:f3:f0:ae:b8:01:01:e9:28:1a:3e:fb:ac:
f5:d7:c6:0a:a8:e2:f0:f7:63:33:fc:78:99:b4:20:
ee:45:95:9d:a6:35:b4:ea:8d:41:02:19:c9:8f:c2:
e4:89:c2:69:8d:02:08:ed:e3:5f:83:f1:ac:d1:62:
f3:7c:32:c1:d2:84:29:c5:38:ff:29:72:81:9b:b5:
50:ec:07:64:e0:de:9d:97:50:18:09:b2:31:31:03:
45:a2:e4:35:cc:5c:81:e7:85:38:e1:bb:b3:8e:14:
e1:aa:2c:df:f7:6a:23:ed:43:c4:e2:c0:f3:96:5d:
27:b5:f5:c6:87:f7:40:f0:d3:6b:27:2a:2b:8a:f2:
37:6c:28:ef:53:ba:01:d7:57:67:5e:0c:c7:fe:88:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:16:2C:13:B2:5E:47:95:28:0A:90:65:80:AF:4B:90:83:6B:F8:8D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/5BYsE7JeR5UoCpBlgK9LkINr-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.158.0/23
192.165.164.0/23
193.180.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ed:a6:d4:e8:e2:ae:c3:b6:12:44:d2:72:e5:7c:01:fd:aa:
63:fa:43:ab:ec:ca:33:0a:8d:75:a6:eb:b7:ca:45:cd:75:91:
50:0c:2d:40:72:c0:70:23:b2:9c:98:41:9f:34:29:f8:6d:6d:
42:c0:d0:09:fb:3b:c4:3b:5d:1c:8a:94:1f:74:44:1b:dc:50:
15:e9:cd:3e:d2:35:71:37:89:b0:aa:b9:ce:5c:6c:13:1f:46:
a4:b9:21:bd:34:9c:76:f5:8d:81:d8:c9:38:d1:0d:03:2a:2c:
39:0b:d3:3a:ea:56:f9:cd:ed:ef:fc:fe:89:78:3b:d2:60:11:
b1:90:dc:e3:73:99:5f:a2:ad:72:79:65:f1:6b:f4:c6:00:08:
7d:c6:35:f2:d9:ae:98:b6:a9:6e:c3:be:f2:13:c0:f7:31:04:
a9:d0:65:7e:0a:ec:45:38:17:84:1d:12:06:0b:36:08:3c:b1:
37:87:33:a2:2a:f6:55:af:91:2e:30:87:23:39:e5:75:1c:73:
59:c6:f9:53:17:2a:63:b0:87:8e:ab:b8:31:62:07:cb:0e:ea:
87:d0:ec:47:90:05:95:05:00:37:46:3a:0d:43:b3:d8:67:f0:
80:5e:6c:e1:8c:2c:f8:7b:cc:dc:6f:cf:2b:31:e9:7b:2b:2f:
5e:f9:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:27 2025 by rpki-client