Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9O4r0rk_QWfOMeXR3-3JK8z_V2g.roa
File: 9O4r0rk_QWfOMeXR3-3JK8z_V2g.roa (raw, json)
Hash identifier: i+RrHfGQeWHIs7/zZ/B4bjf71xw+ViVcn05LVpbiE9E=
Subject key identifier: F4:EE:2B:D2:B9:3F:41:67:CE:31:E5:D1:DF:ED:C9:2B:CC:FF:57:68
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018B380754E43DB782053933B0B79C7D1F13
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9O4r0rk_QWfOMeXR3-3JK8z_V2g.roa
Signing time: Mon 16 Oct 2023 10:28:06 +0000
ROA not before: Mon 16 Oct 2023 10:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51826
IP address blocks: 193.180.199.0/24 maxlen: 24
193.180.196.0/23 maxlen: 23
193.180.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:07:54:e4:3d:b7:82:05:39:33:b0:b7:9c:7d:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Oct 16 10:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ee2bd2b93f4167ce31e5d1dfedc92bccff5768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:b8:d2:17:01:ae:f4:7e:5f:23:03:ca:79:
08:1e:15:e7:64:e7:ab:ea:f2:28:e6:a7:9d:d7:02:
de:66:15:79:47:f3:b3:c7:21:ea:01:3f:28:ab:52:
5a:21:85:18:06:e7:9a:3a:ae:12:d3:55:b8:b3:db:
2c:86:c0:29:a9:53:35:40:f5:37:d6:c8:81:54:99:
34:0c:bb:9c:6f:c0:cd:5f:c8:3b:7f:98:46:a4:0d:
99:94:31:36:9b:ff:0c:22:6c:ab:a2:a6:f6:7f:e6:
86:fc:20:58:c4:7e:b1:2b:fb:b1:79:00:35:52:07:
f0:7f:db:5f:0f:73:40:99:e2:b3:ac:8c:82:79:c7:
52:20:cd:7e:ae:46:ab:3e:1c:0d:e9:4a:fc:32:4f:
39:7c:3b:46:04:ba:5d:c8:5e:44:9f:e1:f2:5d:0a:
47:86:04:02:9f:e9:72:76:c3:5b:93:45:0b:b2:ab:
23:09:d2:f5:d1:78:db:9a:10:36:38:98:7d:d4:37:
b1:39:e4:37:7c:b8:eb:1a:21:6e:44:99:03:98:f8:
78:40:6a:8a:94:10:ca:4a:c6:cb:4f:67:f9:8c:1b:
5e:47:5a:a8:a6:53:64:06:fb:be:56:76:9b:94:b7:
8d:34:a8:1e:9a:3b:4d:41:6c:e6:1b:73:86:1f:ff:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:2B:D2:B9:3F:41:67:CE:31:E5:D1:DF:ED:C9:2B:CC:FF:57:68
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9O4r0rk_QWfOMeXR3-3JK8z_V2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.196.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:7a:f0:8d:dd:15:4a:71:bf:72:24:ca:bd:01:18:50:d5:c4:
9e:6a:58:5b:59:ae:19:b0:c1:4f:11:74:22:a7:b9:77:6e:14:
3c:b3:68:57:50:6f:e2:97:c1:fc:6d:0f:0c:93:44:68:6b:5c:
96:7e:45:13:6f:17:21:b9:7f:8e:ee:5c:25:57:a4:bf:04:bd:
8b:1f:5b:e4:f8:a7:0d:ac:f3:16:5d:aa:d0:1a:63:ca:51:6c:
dd:82:aa:59:ab:db:6a:18:65:e3:11:db:e8:9f:1f:69:b7:6f:
bf:67:4c:2b:e0:23:e5:bc:02:90:a6:ce:87:c6:19:c0:ff:0e:
6a:76:6c:a6:ee:ba:24:21:20:16:8c:68:db:cd:7d:58:2b:fd:
7f:1d:40:44:b3:ca:4f:be:1f:bc:ee:68:4a:93:89:dc:b2:7a:
28:ef:b5:bf:0e:f6:9a:58:41:6e:5a:eb:4a:00:b1:fc:ff:d2:
ff:21:a0:76:8c:e3:0a:b1:15:76:8d:fa:59:7e:95:40:69:f6:
55:50:67:72:c6:c4:13:65:d4:03:71:d7:8d:06:83:d9:3f:96:
af:13:3d:a6:fe:d1:9a:d8:6a:12:fe:59:14:3f:86:a1:22:2b:
f7:d9:92:41:c5:46:a5:5b:99:5a:0e:42:87:1f:29:71:6c:d5:
df:85:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:23 2025 by rpki-client