Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7tJ9iTdrubL8ZyYDlvESNBSWQNI.roa
File: 7tJ9iTdrubL8ZyYDlvESNBSWQNI.roa (raw, json)
Hash identifier: rH6L7ngSN3yRXIPx9bpJFKoHZ3pI+d1YEcXVRCywgWI=
Subject key identifier: EE:D2:7D:89:37:6B:B9:B2:FC:67:26:03:96:F1:12:34:14:96:40:D2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0188DD467C417D338F377E916901B2E16BA4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7tJ9iTdrubL8ZyYDlvESNBSWQNI.roa
Signing time: Wed 21 Jun 2023 09:26:04 +0000
ROA not before: Wed 21 Jun 2023 09:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202671
IP address blocks: 194.68.64.0/24 maxlen: 24
193.235.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:46:7c:41:7d:33:8f:37:7e:91:69:01:b2:e1:6b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 21 09:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eed27d89376bb9b2fc67260396f11234149640d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:d0:5c:12:ed:4e:40:16:c9:2b:de:43:51:
11:6f:d6:d1:0f:42:13:0c:7b:5d:45:ab:4d:da:9d:
a4:69:0f:95:57:06:e5:27:db:99:8c:20:74:79:fd:
8e:01:ee:c2:19:ff:50:0c:09:14:f9:30:b9:25:ee:
52:72:0c:d7:ea:86:63:f4:82:70:32:5f:a4:b5:0e:
53:be:b9:39:41:78:36:37:5f:3a:ac:0c:82:64:ec:
be:7e:60:52:aa:de:81:07:a0:e3:65:c4:fa:de:4b:
4a:a0:79:b6:15:45:f8:65:e1:22:28:cb:ae:16:4c:
9b:ee:72:b7:36:e7:e6:c8:05:ac:ad:9b:b3:0f:58:
ac:94:73:89:65:04:1f:fa:66:11:39:45:31:80:00:
3b:a4:f7:1b:3e:de:fa:ae:4f:87:e0:f3:11:61:40:
50:94:bf:c1:a0:ce:99:9a:e9:45:7e:3b:87:df:21:
0a:2f:59:c4:95:11:d9:fe:ca:d8:4e:f0:53:c1:11:
f0:4e:35:aa:a2:9c:39:f6:71:5d:28:c0:63:80:c7:
03:c8:ef:0f:13:d7:6f:a6:5b:6c:44:74:85:80:ea:
30:f4:b5:b0:49:e2:6f:b8:e0:9a:38:74:91:37:8d:
e6:df:4f:eb:43:6c:30:e0:f4:7d:a3:45:f6:36:97:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:7D:89:37:6B:B9:B2:FC:67:26:03:96:F1:12:34:14:96:40:D2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7tJ9iTdrubL8ZyYDlvESNBSWQNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.128.0/24
194.68.64.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bf:9c:c1:d1:ce:6a:8a:af:b1:1e:67:df:68:90:6b:47:bc:
c0:f3:3b:28:a4:08:7d:97:ac:96:21:25:f8:af:eb:eb:b2:f9:
ac:82:98:80:f6:14:ad:ba:a8:c7:ac:d8:d8:78:83:86:eb:f9:
ff:72:25:27:8d:61:a2:ed:f9:58:53:f1:d1:0b:7c:35:18:5a:
b8:6b:aa:30:51:e6:18:1c:4a:ce:e0:d7:10:96:53:94:1f:3d:
94:60:a9:89:94:11:02:55:6b:44:23:53:1b:ad:ac:e5:8c:26:
8e:78:6a:3d:43:d6:de:68:3e:e2:74:63:59:58:7e:4b:5e:fe:
ca:20:fe:1b:3e:75:2b:95:a5:2c:8c:07:88:34:62:29:12:4b:
9c:23:46:93:24:14:8e:a1:c5:4f:07:9a:ae:29:39:75:68:63:
1a:69:94:06:de:3b:48:64:26:e5:53:75:ac:31:16:b8:3e:e9:
c2:81:b7:3e:ff:87:73:1f:9a:ad:2d:83:4e:82:8b:79:02:72:
55:8b:c4:61:e0:94:61:07:08:d2:40:88:2a:02:f1:0c:38:f4:
e9:8c:f2:b9:e7:5a:9b:6f:36:8d:ff:e6:e8:ea:ce:9c:80:12:
80:06:49:63:c3:72:96:db:a1:0e:ef:32:89:d9:17:f9:e4:40:
62:a6:3d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:57 2025 by rpki-client