Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ICUfcyXi4NEIzw9cyvEU1gCMql8.roa
File: ICUfcyXi4NEIzw9cyvEU1gCMql8.roa (raw, json)
Hash identifier: z7okUQxDTdoIq0hE9GpHYphSKFdHhrTRhm4xGEyA+J4=
Subject key identifier: 20:25:1F:73:25:E2:E0:D1:08:CF:0F:5C:CA:F1:14:D6:00:8C:AA:5F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE6706480AB5EA959A00021D77655
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ICUfcyXi4NEIzw9cyvEU1gCMql8.roa
Signing time: Sun 01 Jan 2023 10:05:14 +0000
ROA not before: Sun 01 Jan 2023 10:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39870
IP address blocks: 192.36.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e6:70:64:80:ab:5e:a9:59:a0:00:21:d7:76:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20251f7325e2e0d108cf0f5ccaf114d6008caa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:ec:5a:2b:ba:f2:20:64:b6:8e:fb:09:66:
e7:9e:e9:be:0e:fb:9c:dc:0f:8c:97:f3:5c:b2:26:
44:03:03:1c:f3:16:71:44:1d:a3:ee:d9:cf:68:29:
01:93:d4:dc:9f:21:cd:72:ca:5c:0d:bb:67:21:75:
f9:81:41:71:89:3f:59:b3:17:e7:b4:ac:ff:80:9e:
c1:77:aa:04:62:7c:d1:19:2f:ce:56:63:4f:77:87:
27:13:13:91:c1:ec:74:b0:25:9c:5b:82:d1:5d:f3:
70:f1:0f:33:5c:29:97:48:79:08:18:60:ad:87:e8:
69:f0:b5:00:23:fb:0f:dc:ad:e0:d6:86:2f:54:3c:
69:17:83:10:54:b9:ed:bd:d2:21:b7:68:78:c2:ff:
22:a5:f9:26:27:79:0b:9d:72:e8:ef:e2:5b:af:4f:
d2:07:04:95:6a:c1:56:37:ff:84:71:1c:40:8e:98:
95:4b:27:0d:34:4e:b6:73:56:02:e4:29:6c:66:d4:
31:23:c7:f3:04:5d:02:fe:f3:7b:76:bd:79:86:81:
1d:4e:50:b0:3a:42:5a:40:5d:90:9e:32:bd:50:3c:
9a:9b:e6:7e:59:d5:6f:6b:40:43:4f:83:09:bf:11:
5b:f3:4a:db:da:62:de:52:c8:ea:2a:ec:48:ef:a3:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:1F:73:25:E2:E0:D1:08:CF:0F:5C:CA:F1:14:D6:00:8C:AA:5F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ICUfcyXi4NEIzw9cyvEU1gCMql8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.134.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0b:0f:0e:04:31:45:cc:ca:c2:b6:68:4c:7c:68:83:de:9f:
4d:44:4c:6b:99:9c:e8:66:43:6e:15:c4:6a:97:1f:23:5b:48:
6c:37:eb:69:d7:8d:94:45:c8:d9:5b:f4:e4:34:ca:cc:69:62:
6c:7d:27:a3:41:86:bf:1c:84:73:9a:46:d6:4a:b0:0f:c5:e7:
3c:41:37:e2:82:10:f9:01:ec:fb:1b:08:fc:04:fa:0a:66:59:
b0:1f:5f:d7:2a:16:f6:47:9e:17:05:41:e2:6b:28:e1:f0:a1:
f1:88:1d:9f:ed:1a:c6:81:7b:3a:c5:e3:03:5a:d9:7d:39:71:
9b:8a:0a:56:2b:75:5e:92:87:8f:e0:d2:ac:e0:07:b2:13:5e:
0c:79:f4:a1:9f:d8:dc:fa:55:85:68:ab:1b:db:82:1d:01:61:
6f:e1:ec:cd:41:2a:d1:d4:c9:e4:62:e3:89:0a:e4:9a:2b:c4:
fd:51:e6:db:8a:62:73:b6:e0:3f:4e:e0:ca:be:48:90:41:fc:
3a:db:8e:6c:a1:6d:66:24:5e:3e:7f:6c:c4:63:5b:b4:a8:83:
84:d0:b7:ea:25:ea:1c:a3:27:27:95:d0:f9:ea:7e:53:3d:45:
7a:84:0f:d6:ed:a4:35:06:f6:34:98:45:e8:38:10:cd:45:71:
4c:95:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:21 2025 by rpki-client