Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Icj0RL2OpflB6dc8j_8l-jmTexg.roa
File: Icj0RL2OpflB6dc8j_8l-jmTexg.roa (raw, json)
Hash identifier: iQvbRTy0mcrBv08B4LbggCMdwe5caviZG4YSvmG1UhU=
Subject key identifier: 21:C8:F4:44:BD:8E:A5:F9:41:E9:D7:3C:8F:FF:25:FA:39:93:7B:18
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0666E1182C745CB222BD4CD79627
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Icj0RL2OpflB6dc8j_8l-jmTexg.roa
Signing time: Sun 01 Jan 2023 10:05:22 +0000
ROA not before: Sun 01 Jan 2023 10:05:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203426
IP address blocks: 193.235.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:06:66:e1:18:2c:74:5c:b2:22:bd:4c:d7:96:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21c8f444bd8ea5f941e9d73c8fff25fa39937b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:8b:f1:ce:73:b5:44:94:ef:48:68:89:f4:
04:f8:85:50:c8:87:50:20:cf:5c:0b:94:9c:e3:27:
c9:c3:8b:fe:66:61:aa:4b:68:6d:c9:07:c9:f7:58:
7e:cc:0d:11:bc:02:39:d3:9b:94:22:09:f8:7b:de:
2b:eb:4a:02:67:b7:d7:ed:71:fc:41:81:c1:41:6b:
f7:bd:fa:ae:40:aa:81:bb:92:1f:0e:6a:a6:90:be:
85:bc:8b:b9:3b:bf:0a:1f:9a:2f:63:9a:2e:f6:90:
0f:66:3c:b0:78:6c:49:c8:a4:2c:40:e2:2b:c3:ae:
46:d5:2c:16:11:90:dd:8d:c4:dd:18:55:3b:23:03:
eb:f4:48:c7:3e:48:91:cd:03:e3:33:e7:be:e7:98:
8f:4d:4c:37:9b:27:e5:b2:95:98:d3:e1:be:80:da:
47:1f:b3:90:47:9f:fa:49:01:33:aa:3a:ba:aa:8a:
13:af:fa:b1:e1:55:44:63:aa:50:38:f3:de:9b:41:
86:f1:a6:67:78:b3:e7:bf:cd:4d:00:af:b0:22:e1:
f3:95:4a:28:5a:c2:e0:2e:92:66:49:44:5e:08:e5:
3f:a3:15:13:07:99:b9:11:a3:7f:98:5f:8d:90:1f:
99:d6:f4:2a:3f:7c:b6:82:35:c4:20:cd:7d:eb:45:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:F4:44:BD:8E:A5:F9:41:E9:D7:3C:8F:FF:25:FA:39:93:7B:18
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Icj0RL2OpflB6dc8j_8l-jmTexg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e1:2f:ce:bc:e0:e8:06:d6:3e:2d:00:30:11:0b:71:50:b3:
74:b0:1a:4d:f7:40:84:30:3b:c9:5d:3c:6d:9e:dd:d2:33:35:
0f:da:7a:8e:2c:35:0e:0d:1d:29:a7:4b:9f:20:b1:c8:0d:7c:
81:73:03:b6:2a:bc:fd:d9:df:55:d4:5c:01:c5:12:38:5e:64:
f4:30:7b:9a:63:8f:eb:de:14:cb:43:b8:3a:0e:82:ef:56:b3:
e0:1c:09:dc:eb:08:f8:0d:b4:47:e0:70:13:ea:7f:01:4b:05:
82:fe:c8:6e:c8:dc:ea:ab:7c:16:ff:dd:54:a2:26:93:8f:fe:
db:b5:51:a0:f8:64:2f:83:8a:9c:63:a1:38:b7:ef:c7:41:b9:
1d:4c:92:17:2a:af:7a:5a:0b:35:57:d2:97:48:c2:d9:1d:38:
25:77:f7:68:f0:17:9b:29:d2:8d:ef:11:97:d4:a0:d9:2b:d2:
ba:6f:59:86:c4:0f:cf:e5:e1:3c:98:39:02:48:71:0f:37:71:
2e:3d:eb:fb:13:0e:21:c9:07:81:c0:8a:f9:50:eb:a6:e5:ec:
6a:28:e7:96:eb:57:ce:a1:40:5b:58:9a:ee:01:a2:25:97:49:
d8:e7:9a:4e:55:2f:80:75:9e:d1:1a:0f:ed:c1:2d:87:0c:ac:
20:2b:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:27 2025 by rpki-client