Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HCcs4J1D_TCstgvJkgr_u2rrN10.roa
File: HCcs4J1D_TCstgvJkgr_u2rrN10.roa (raw, json)
Hash identifier: H8tOgjqvA7wMKkin1ZXXzboZzI+jPSkZ1oobp7/jl/U=
Subject key identifier: 1C:27:2C:E0:9D:43:FD:30:AC:B6:0B:C9:92:0A:FF:BB:6A:EB:37:5D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486EA1BD1A5149FB0651C36CF459DE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HCcs4J1D_TCstgvJkgr_u2rrN10.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201604
IP address blocks: 193.183.113.0/24 maxlen: 24
193.183.114.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6e:a1:bd:1a:51:49:fb:06:51:c3:6c:f4:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c272ce09d43fd30acb60bc9920affbb6aeb375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:a0:6e:81:fc:84:24:94:eb:70:7a:e1:2f:
cd:5d:1a:3e:51:37:a9:b1:dd:24:ae:fb:27:0f:f8:
8f:d9:2d:0f:60:c9:c7:c6:38:4f:b5:86:fc:90:34:
0d:dc:17:c6:3d:24:e1:fb:0a:60:04:3f:1c:27:79:
82:b5:58:1b:ee:0a:24:27:8e:fb:6a:56:07:3e:79:
28:57:c7:9c:15:03:b5:96:09:dd:6e:0c:4f:e0:28:
e5:78:08:86:86:4f:9c:cb:ed:98:be:cc:aa:b4:94:
c7:c3:f3:cf:d3:35:62:4c:30:1b:d0:7d:d5:88:46:
25:9c:54:39:98:48:72:74:d7:47:ff:2f:62:f0:79:
08:90:eb:47:5e:10:00:a4:68:50:d4:cd:d9:23:a1:
24:a5:2f:5a:77:86:6b:3c:f9:fe:78:ca:fd:ac:46:
b1:92:f3:ae:c8:83:e8:b8:fb:4c:30:7c:b8:73:df:
8d:b8:71:78:27:60:e0:c4:47:f6:45:90:53:e0:c9:
a3:c6:b7:01:72:02:28:ef:5f:a1:26:13:47:f2:85:
e4:9c:f2:ad:bc:88:15:20:fb:94:c9:2f:30:f8:a8:
48:5f:aa:a4:21:d1:71:79:96:d1:aa:08:29:ae:09:
32:a2:fd:93:4d:1f:ed:ea:7f:83:fd:36:66:31:84:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:2C:E0:9D:43:FD:30:AC:B6:0B:C9:92:0A:FF:BB:6A:EB:37:5D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HCcs4J1D_TCstgvJkgr_u2rrN10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ed:96:b5:2b:b8:ff:6d:69:b3:99:3e:cd:0b:cd:d7:8a:4a:
8c:57:c9:eb:75:f6:da:7d:a8:93:cd:a9:0c:d2:fd:ff:a4:89:
d7:d6:f0:e9:79:36:8e:a6:12:f2:a7:1e:b3:dd:a1:ce:b9:86:
55:11:47:c1:29:9e:df:9c:1b:8b:88:ef:d4:9d:68:20:9c:6e:
01:3a:a4:85:ea:02:5c:92:2c:8c:d4:b6:a2:49:3e:18:dd:ce:
73:16:3d:f1:d4:10:83:90:98:d0:30:4e:66:e3:63:8d:42:a0:
cc:2c:be:3b:2a:bd:3c:2e:74:db:85:91:e1:c4:14:d5:8b:cb:
63:7a:0a:b5:7f:77:58:2e:cf:7e:8f:54:65:da:78:da:87:ca:
dd:b6:6e:4e:26:a2:7f:e1:1d:54:21:f3:da:99:55:c2:31:a1:
05:ce:b2:70:77:77:9f:61:4d:d1:51:03:c5:b9:89:08:19:77:
13:c6:f5:dd:88:2e:8e:49:e2:f6:a5:21:59:e4:0f:59:c6:80:
5e:8a:c0:75:67:f8:c8:07:96:99:f2:00:c8:13:8e:04:61:99:
bd:41:57:8d:76:ef:c5:a1:a3:7d:22:fb:0a:9f:53:b9:e0:26:
72:9f:67:6c:d1:45:d7:68:90:a6:7d:23:7b:2c:08:88:ec:cf:
fd:ad:c1:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:50 2025 by rpki-client