Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AdUlSVTaPPN3QEQ8CtLixxYETD4.roa
File: AdUlSVTaPPN3QEQ8CtLixxYETD4.roa (raw, json)
Hash identifier: HmkUQSvHfMNl9t9Gcfs82ApJRmQ3ViA1UAx1TGbzghQ=
Subject key identifier: 01:D5:25:49:54:DA:3C:F3:77:40:44:3C:0A:D2:E2:C7:16:04:4C:3E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487A389F59A846BBB174C7DA4C4E8F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AdUlSVTaPPN3QEQ8CtLixxYETD4.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208453
IP address blocks: 193.181.23.0/24 maxlen: 24
193.181.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7a:38:9f:59:a8:46:bb:b1:74:c7:da:4c:4e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d5254954da3cf37740443c0ad2e2c716044c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:50:22:90:6c:1a:0f:e8:a8:ea:d6:48:6b:
44:65:b1:1d:19:9f:72:ed:56:76:96:10:5f:c0:ec:
49:29:fc:b1:52:5f:c0:ed:dd:4b:33:8c:fe:a6:5c:
0f:26:94:20:d1:5b:7e:67:ee:33:d5:4b:65:6a:14:
35:3e:9d:44:f8:ad:63:3e:63:a3:fc:82:e2:da:3e:
4b:e0:d4:05:09:db:37:69:ee:32:e9:a6:08:0b:33:
31:48:58:a4:1a:b7:13:94:b3:12:26:1d:43:47:b9:
ea:5d:02:4f:d9:4e:89:1d:2b:43:6c:c8:6a:6d:c4:
de:cc:3f:72:bd:6d:d2:5d:97:8f:29:94:80:d3:e4:
72:76:ee:0e:64:4b:b7:58:52:4b:65:76:7d:34:8d:
24:1d:57:aa:26:0f:3d:d4:78:26:36:b8:0f:9e:a5:
af:97:6c:2f:7d:62:77:4b:d2:3d:64:5e:51:4f:fd:
44:23:7b:69:d2:97:b1:2c:69:68:8e:5a:a2:2f:f2:
9a:13:af:f9:59:76:2f:ee:85:cd:1c:f0:3f:3e:74:
1b:c4:4c:d5:bc:f0:c9:87:cf:c0:4f:0b:9c:d2:e5:
3c:6f:49:7f:46:56:e1:08:3c:47:1c:57:dc:0b:ff:
26:c1:b6:41:3e:8c:5d:4f:b4:9a:62:9f:c9:1c:bb:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:25:49:54:DA:3C:F3:77:40:44:3C:0A:D2:E2:C7:16:04:4C:3E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AdUlSVTaPPN3QEQ8CtLixxYETD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.23.0/24
193.181.29.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d3:3f:41:40:63:fa:71:64:9e:ce:fa:bc:17:4e:3b:55:1c:
c1:5f:97:5d:4b:a4:3d:63:8c:55:37:f2:bc:2c:92:74:ce:a7:
88:9e:09:c8:5c:f9:4d:31:6d:dd:ed:42:6d:59:92:0c:b0:97:
7e:f4:76:93:02:6d:ed:98:f6:43:0c:ec:c8:42:f9:e3:f3:26:
b2:0f:40:c2:0a:7b:08:c3:40:e6:34:18:ee:16:d1:62:7a:d6:
fc:2c:be:e9:9e:a1:23:36:d0:62:93:37:88:3d:87:0d:1f:30:
95:f7:a8:02:9f:a4:a2:4c:0c:d8:7d:23:65:80:1a:6d:33:9c:
90:34:78:4a:fd:6a:0f:34:4d:e2:cd:25:c8:68:ba:ff:f3:b9:
89:71:95:ed:28:b8:aa:aa:9f:a9:8e:6d:d0:26:74:2e:ef:a8:
d1:f9:96:75:cc:9d:29:70:4a:dc:85:97:d7:6e:71:c8:a2:55:
c8:ff:13:4a:e8:7f:d4:cc:8b:77:d3:ea:f4:6c:5b:e4:89:92:
2d:c7:01:d5:07:32:06:90:58:3b:6f:87:64:a2:c8:4b:0b:ff:
2a:ba:55:06:af:a9:b7:1b:bb:bf:ed:17:8d:a1:d4:49:ca:c4:
a3:ce:7a:22:88:9f:2d:d3:6d:50:3d:cd:13:21:e0:0f:6f:1a:
30:ce:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:18 2025 by rpki-client