Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CkXtlksmudO6B8u32mSTCZUrswU.roa
File: CkXtlksmudO6B8u32mSTCZUrswU.roa (raw, json)
Hash identifier: d50SqnDL4Ps8l0yuDGtAedmbHGUH4ihXxzToxqZoxfY=
Subject key identifier: 0A:45:ED:96:4B:26:B9:D3:BA:07:CB:B7:DA:64:93:09:95:2B:B3:05
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4298DA54
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CkXtlksmudO6B8u32mSTCZUrswU.roa
Signing time: Sat 01 Jan 2022 14:03:33 +0000
ROA not before: Sat 01 Jan 2022 14:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 192.121.247.0/24 maxlen: 24
192.121.82.0/24 maxlen: 24
193.234.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117313620 (0x4298da54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a45ed964b26b9d3ba07cbb7da649309952bb305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:c1:09:db:fc:6a:53:81:d0:12:f6:ca:b3:
66:08:79:09:60:9f:98:e6:8c:83:f7:3c:88:39:31:
a5:62:3f:74:b6:e0:3f:74:2c:a0:d5:86:e1:29:d8:
d3:84:43:56:cc:a7:2a:18:21:bd:c9:a8:2b:5d:ad:
e6:ab:61:bb:da:cb:f4:31:73:92:cb:9b:75:d4:1d:
64:82:83:38:51:b0:77:e1:58:ce:ae:c5:62:bb:ad:
51:9d:04:72:98:36:55:8f:f1:22:2c:48:4d:37:36:
70:f2:e7:79:bf:f3:eb:88:f0:28:4b:d7:44:ea:c8:
97:87:63:8b:4c:49:09:a2:54:d9:0a:c6:54:b4:ec:
6a:64:12:ea:b9:22:f9:47:37:b0:53:d9:7c:26:9f:
12:36:82:db:78:36:9c:6d:b5:e6:03:57:79:f7:60:
01:88:2e:c2:02:c7:29:aa:77:ac:ee:be:d9:49:89:
f1:00:0b:33:2c:4c:7f:1a:8a:94:d1:b1:1f:99:f2:
ff:ca:09:15:a2:33:c0:55:2c:af:c9:89:31:41:ee:
e1:3a:c1:f6:0f:15:3f:04:5b:d1:0a:81:9d:c4:12:
07:7d:8d:6b:2b:10:f9:16:15:48:43:84:0e:d4:12:
e7:18:2d:fd:7b:12:55:7a:94:4f:42:9e:d5:20:46:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:45:ED:96:4B:26:B9:D3:BA:07:CB:B7:DA:64:93:09:95:2B:B3:05
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/CkXtlksmudO6B8u32mSTCZUrswU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.82.0/24
192.121.247.0/24
193.234.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e5:55:15:d6:01:c3:97:52:60:a6:3e:f7:c9:ea:63:6d:79:
cd:1c:05:be:56:42:e9:1e:4c:89:99:76:ee:ff:55:a7:39:e3:
4d:60:0e:ed:5a:b9:b4:50:91:f7:65:2d:71:78:91:d1:b8:91:
66:61:38:06:1f:2d:03:07:22:44:10:4d:d5:c6:2b:7f:ef:56:
b5:e5:af:6c:4b:2e:0b:d6:d0:e9:4c:b6:51:da:37:a6:72:99:
c9:44:cd:99:c1:ba:cf:09:67:28:7c:04:ae:b4:c7:d4:02:ec:
b2:9b:c9:ba:71:5f:1c:b7:73:5d:14:45:fa:b0:20:7e:3e:6d:
cc:83:1b:5b:9a:9e:5c:04:7e:a0:da:63:d0:84:bb:7c:b9:2f:
c7:cb:e5:2f:37:01:ba:25:d1:28:2c:55:76:3e:68:14:36:60:
a6:1a:22:fc:c6:55:a9:21:29:2b:61:ed:78:3c:8d:32:55:85:
1e:ef:ff:21:56:4d:a2:21:c4:b5:ff:a0:1e:da:a9:8b:65:45:
d0:f8:e8:e2:7d:b0:a9:d8:22:42:a6:61:93:e1:a1:70:4f:8d:
46:d8:31:04:9e:91:ed:0a:e5:4b:08:e2:a7:37:3b:ca:cd:ae:
6c:7f:9d:7e:da:bf:72:e7:38:1e:02:b5:2a:1e:c9:39:7a:b3:
70:dc:3e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:25 2025 by rpki-client