Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HI4O2un0ZMSyTz5fDzZlJPT5AzQ.roa
File: HI4O2un0ZMSyTz5fDzZlJPT5AzQ.roa (raw, json)
Hash identifier: OTtVEImML1U4Gr2ejwJ4WywIT9EcwSyABqfK/rCY9Xs=
Subject key identifier: 1C:8E:0E:DA:E9:F4:64:C4:B2:4F:3E:5F:0F:36:65:24:F4:F9:03:34
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484DC72534AB6CCDBB534ED694312F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HI4O2un0ZMSyTz5fDzZlJPT5AzQ.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34628
IP address blocks: 193.183.70.0/24 maxlen: 24
193.183.75.0/24 maxlen: 24
2a01:280:328::/48 maxlen: 48
2a01:280:329::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4d:c7:25:34:ab:6c:cd:bb:53:4e:d6:94:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c8e0edae9f464c4b24f3e5f0f366524f4f90334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:7c:eb:7c:3d:0c:d2:8d:da:75:2d:a8:65:
2a:94:75:ee:e6:bc:5e:c6:ad:50:e7:db:18:27:90:
7f:9a:1e:9d:b4:78:10:fb:92:7c:f4:d0:73:7a:0f:
31:6d:89:0f:b0:5d:7a:09:7a:2a:75:6d:98:c6:b4:
65:d0:dc:9e:38:15:31:ec:d8:01:ed:70:5a:9b:9e:
ed:24:56:e8:38:3e:5f:35:e9:a6:a8:51:45:59:a3:
e0:9d:86:06:6d:9a:c8:2d:fd:3d:39:6f:a1:37:c0:
2c:ba:e0:71:5c:6c:0b:a8:b2:b5:36:09:41:29:87:
80:57:f6:be:91:c2:cb:08:4f:81:f3:03:01:ec:f9:
55:21:3f:31:6c:4d:48:c6:f2:b2:44:ae:f4:3b:a6:
9e:9f:c1:e3:f7:68:08:15:32:f2:59:95:8f:a8:37:
9d:71:a9:b9:4a:d3:44:5d:76:86:c5:1f:27:1a:de:
8e:50:38:fa:a0:ad:aa:c6:21:97:7f:54:a9:1e:0c:
fb:4b:f7:ec:cb:ad:c5:9b:35:05:15:38:61:d1:28:
a2:84:96:50:c9:9c:e6:7c:22:3a:9b:94:5c:21:15:
77:6b:67:aa:a4:e7:b7:9f:ca:12:cb:3a:1f:93:f7:
83:bc:bb:56:8f:a4:66:23:62:56:90:74:50:db:b2:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8E:0E:DA:E9:F4:64:C4:B2:4F:3E:5F:0F:36:65:24:F4:F9:03:34
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HI4O2un0ZMSyTz5fDzZlJPT5AzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.70.0/24
193.183.75.0/24
IPv6:
2a01:280:328::/47
Signature Algorithm: sha256WithRSAEncryption
6e:dd:29:d9:a1:11:56:77:cf:d8:f7:42:2d:b8:d6:1b:a2:2d:
c4:09:bf:f9:3b:c6:6b:d4:58:1b:84:fe:14:d5:1b:94:07:42:
0e:61:c7:f6:cd:34:21:45:59:21:1c:38:2e:d8:5f:15:1b:4a:
9c:65:32:f5:0a:53:dd:60:6b:85:d8:12:38:4a:d9:7e:a4:be:
2b:8c:7c:7f:93:79:3f:de:f2:21:c7:0d:7d:63:0c:91:05:2c:
ce:80:e1:64:34:96:75:66:f2:4a:54:21:7a:3b:a6:ba:ec:16:
23:5c:96:2e:67:1b:6d:d1:f1:ce:a4:ea:c7:c3:84:66:c2:ad:
66:e8:6f:67:1f:24:22:a6:18:68:5c:67:ab:29:dc:4e:04:40:
03:b0:8d:6d:61:9d:ae:19:be:3c:a0:0a:e0:e8:60:cb:58:46:
dc:7f:4f:b6:85:9a:e7:29:8e:47:18:0d:20:68:b1:c7:89:6d:
c9:db:c8:96:1c:08:0a:19:cc:c3:2f:07:e7:61:e1:b5:76:d7:
db:3e:59:21:a3:41:d7:f1:b2:f8:1b:c1:f4:6f:b3:d1:89:85:
a0:52:ef:7f:38:2f:ef:07:30:8d:84:32:77:a4:23:36:82:13:
1e:04:6c:bd:22:54:10:34:3f:4e:4c:94:3a:c8:53:da:ce:63:
b7:cc:bb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:50 2025 by rpki-client