Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/71svwWODP14mQGgMUqkkLsOVKQc.roa
File: 71svwWODP14mQGgMUqkkLsOVKQc.roa (raw, json)
Hash identifier: TYTXBIhClizJM9EPsoC70QsSi/faRnVRau36syYDqY4=
Subject key identifier: EF:5B:2F:C1:63:83:3F:5E:26:40:68:0C:52:A9:24:2E:C3:95:29:07
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE1D87B83A825EF0CCB64BE3EFEF4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/71svwWODP14mQGgMUqkkLsOVKQc.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34385
IP address blocks: 193.183.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e1:d8:7b:83:a8:25:ef:0c:cb:64:be:3e:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef5b2fc163833f5e2640680c52a9242ec3952907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:c4:4f:fc:2e:f7:bc:72:bb:5b:98:60:ee:
a6:5d:42:a3:88:3d:80:52:58:62:e1:c7:fb:40:3a:
35:34:95:0d:7b:ce:60:1e:bc:fd:90:2a:59:a9:e6:
77:30:20:25:41:7d:8c:6d:b7:37:d7:10:54:6b:7e:
01:f8:e5:8c:43:ba:30:21:23:91:3b:a2:4d:ce:3f:
d8:25:fa:0d:15:f4:e5:c1:51:a0:81:40:ee:86:f6:
d5:f5:fa:83:7d:31:b9:94:85:4b:94:7c:a0:31:e2:
e6:d9:b2:7f:4e:a6:d3:27:26:65:23:98:65:f3:9c:
5a:d7:ca:07:a7:97:95:10:0b:7d:1f:3c:61:7f:37:
25:fd:7d:63:81:77:45:c1:07:82:fa:fa:cf:48:6b:
ec:16:0a:bd:a1:58:28:16:01:72:a8:0f:79:7b:22:
31:28:98:c3:e6:fa:97:bc:fc:04:37:35:e3:59:b6:
62:42:8c:17:53:cc:51:e1:af:ad:85:4d:9b:7f:cd:
17:ab:aa:20:59:46:6a:68:54:b9:00:ee:52:c4:7c:
1a:41:d4:0d:e9:c5:d1:c3:dc:b7:94:78:0f:f3:68:
15:fb:f4:93:e3:32:53:5e:42:ab:78:01:3c:f2:c1:
54:4f:bd:41:76:63:8e:43:99:ad:35:54:28:0d:fa:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5B:2F:C1:63:83:3F:5E:26:40:68:0C:52:A9:24:2E:C3:95:29:07
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/71svwWODP14mQGgMUqkkLsOVKQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:84:20:01:4a:d0:72:97:c0:24:48:28:76:67:6f:4d:94:cb:
94:a5:11:c3:b5:03:69:22:d4:27:93:02:7a:36:c5:dc:5f:f7:
1d:49:1e:67:59:d7:13:99:ed:15:b3:54:61:51:b1:0f:d9:63:
47:40:72:4f:63:d7:a6:42:6d:7b:e0:de:22:f8:f0:76:17:08:
0a:c0:d0:20:2b:63:01:42:57:69:70:98:36:09:cf:29:ff:69:
58:dc:a6:50:73:6b:41:54:b1:0e:1b:a4:38:88:e5:0d:65:2f:
36:b6:fd:75:40:bf:f7:5e:69:c2:e3:ae:93:18:54:85:b9:ab:
b4:74:41:96:02:9c:4a:64:98:aa:37:0a:58:17:0b:49:91:eb:
f2:1f:d5:d2:d8:a1:ce:c7:66:1a:9b:fc:0d:3b:97:a7:aa:8a:
c5:60:71:e1:4f:e8:91:35:bc:e3:66:32:58:07:d1:78:0c:b7:
4e:ca:99:fd:fc:63:fd:d0:e0:9d:55:b6:d6:6d:6b:c4:95:17:
1a:62:7b:f8:83:60:97:99:b1:c1:01:a7:a0:bd:0a:44:63:d6:
3d:08:54:a5:e5:38:73:39:e0:8d:db:5c:35:3e:f1:d6:e6:6a:
9d:14:2d:f8:cd:61:ee:75:24:0a:bd:95:91:39:57:9b:6e:4e:
16:61:b1:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyuHYe4OoJe8My2S+Pv70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjViMmZjMTYzODMzZjVlMjY0MDY4MGM1MmE5MjQyZWMzOTUyOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrrET/wu97xyu1uYYO6mXUKjiD2A
Ulhi4cf7QDo1NJUNe85gHrz9kCpZqeZ3MCAlQX2Mbbc31xBUa34B+OWMQ7owISOR
O6JNzj/YJfoNFfTlwVGggUDuhvbV9fqDfTG5lIVLlHygMeLm2bJ/TqbTJyZlI5hl
85xa18oHp5eVEAt9Hzxhfzcl/X1jgXdFwQeC+vrPSGvsFgq9oVgoFgFyqA95eyIx
KJjD5vqXvPwENzXjWbZiQowXU8xR4a+thU2bf80Xq6ogWUZqaFS5AO5SxHwaQdQN
6cXRw9y3lHgP82gV+/ST4zJTXkKreAE88sFUT71BdmOOQ5mtNVQoDfr6LQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9bL8Fjgz9eJkBoDFKpJC7DlSkHMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvNzFzdndXT0RQMTRtUUdnTVVxa2tMc09WS1FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbd3MA0G
CSqGSIb3DQEBCwUAA4IBAQBvhCABStByl8AkSCh2Z29NlMuUpRHDtQNpItQnkwJ6
NsXcX/cdSR5nWdcTme0Vs1RhUbEP2WNHQHJPY9emQm174N4i+PB2FwgKwNAgK2MB
QldpcJg2Cc8p/2lY3KZQc2tBVLEOG6Q4iOUNZS82tv11QL/3XmnC466TGFSFuau0
dEGWApxKZJiqNwpYFwtJkevyH9XS2KHOx2Yam/wNO5enqorFYHHhT+iRNbzjZjJY
B9F4DLdOypn9/GP90OCdVbbWbWvElRcaYnv4g2CXmbHBAaegvQpEY9Y9CFSl5Thz
OeCN21w1PvHW5mqdFC34zWHudSQKvZWROVebbk4WYbFm
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:12 2025 by rpki-client