Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9iXMVCso1R4s73n_x5gFlFIbO5U.roa
File: 9iXMVCso1R4s73n_x5gFlFIbO5U.roa (raw, json)
Hash identifier: Nh/cvJrM8W0WxAWFAAqlMfi2Shlkjg/yQn7M35nPDgc=
Subject key identifier: F6:25:CC:54:2B:28:D5:1E:2C:EF:79:FF:C7:98:05:94:52:1B:3B:95
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB024EBBF9F119C7844340A9959763
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9iXMVCso1R4s73n_x5gFlFIbO5U.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200018
IP address blocks: 194.103.112.0/24 maxlen: 24
194.103.118.0/24 maxlen: 24
194.103.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:02:4e:bb:f9:f1:19:c7:84:43:40:a9:95:97:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f625cc542b28d51e2cef79ffc7980594521b3b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:62:e2:d6:43:02:1c:74:38:e1:e7:83:a5:
25:fe:48:26:05:ee:1b:20:89:c9:02:7b:b7:f7:0a:
de:a5:3b:f4:d4:ce:5e:7d:b1:ba:97:98:5b:f2:f4:
db:d9:98:ae:c7:ce:98:46:13:a8:f9:24:52:3e:f7:
67:1a:c4:ac:ad:3c:09:1c:60:a1:94:33:0e:b2:04:
b6:c6:41:f7:79:9d:7b:28:69:5e:35:6e:e9:95:1b:
82:36:a8:fb:2d:3a:dd:0b:63:08:72:56:92:2c:67:
3d:30:90:de:89:75:b6:36:a1:1d:56:65:4c:bc:ff:
af:80:c4:25:c2:75:93:5a:11:08:5c:3c:30:a1:49:
ab:7f:e2:74:2f:65:db:a3:b5:6e:08:18:3c:3f:e4:
45:13:c4:78:66:58:58:ef:7a:2b:72:4a:1b:64:49:
77:16:07:b3:84:d7:75:69:d9:04:db:f2:04:f8:e6:
d6:cd:f0:5f:bf:a7:bf:22:78:a2:65:88:cf:8b:8c:
b0:5d:af:c4:01:db:5b:d0:0b:2a:26:c5:96:7c:eb:
a5:82:b7:13:c2:d7:f9:4f:85:7a:97:61:a7:d8:cb:
65:64:e7:78:06:fa:fc:bd:cb:94:eb:3f:46:ff:d9:
a8:25:0d:1a:8a:2d:43:bb:dc:69:41:43:f6:02:b1:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:CC:54:2B:28:D5:1E:2C:EF:79:FF:C7:98:05:94:52:1B:3B:95
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9iXMVCso1R4s73n_x5gFlFIbO5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.112.0/24
194.103.118.0/23
Signature Algorithm: sha256WithRSAEncryption
74:a7:12:60:69:91:2b:b3:f1:63:f2:59:f4:69:89:82:dd:59:
84:30:bc:ec:3e:4d:7d:bd:8a:4b:68:9e:c7:ba:52:78:df:76:
90:db:a9:49:e9:8c:09:86:86:42:45:44:cf:59:b7:95:31:75:
7a:4e:fa:dd:e8:d7:6b:c7:4b:9a:30:7e:23:35:b9:3a:66:83:
a9:18:11:8f:37:a7:be:9b:d1:bd:1d:c2:03:2e:ad:3f:7e:ee:
b1:bd:68:fa:52:2e:28:bd:09:b4:25:2e:3a:da:c2:a6:ab:6d:
f5:9c:32:7a:da:2f:f6:40:0b:9b:15:04:7b:aa:c2:02:ba:0f:
ec:24:34:0a:41:7b:06:d5:f8:3d:0c:e0:b2:af:bb:55:bf:76:
a6:98:49:c4:a9:d6:82:31:c0:fe:45:2c:c0:0f:6b:dd:0f:de:
9f:1d:cd:48:b0:4c:7d:0b:da:ff:43:9f:61:eb:1b:d0:28:56:
cb:f7:be:78:a5:97:6e:2b:49:45:8e:77:c1:5e:f3:e8:c1:e9:
a5:63:a4:3e:15:27:93:62:d8:27:03:53:a5:0b:04:b0:25:f8:
e2:73:f4:db:b4:59:18:d5:6e:40:66:fc:f5:e9:11:13:05:4e:
de:f7:17:d2:9f:eb:01:79:43:b7:63:ab:9b:c0:39:69:55:20:
37:f4:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:18 2025 by rpki-client