Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RNICvX4hXWhrgJO_WeD0auMf69s.roa
File: RNICvX4hXWhrgJO_WeD0auMf69s.roa (raw, json)
Hash identifier: UlPS1s11mqDVkuxRWf2iaRG778G+s107s2cI++eZoV4=
Subject key identifier: 44:D2:02:BD:7E:21:5D:68:6B:80:93:BF:59:E0:F4:6A:E3:1F:EB:DB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A93CE353D12A9F00151D029ACAADE1CFC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RNICvX4hXWhrgJO_WeD0auMf69s.roa
Signing time: Thu 14 Sep 2023 13:07:59 +0000
ROA not before: Thu 14 Sep 2023 13:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201604
IP address blocks: 193.183.114.0/24 maxlen: 24
193.183.113.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:ce:35:3d:12:a9:f0:01:51:d0:29:ac:aa:de:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 14 13:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44d202bd7e215d686b8093bf59e0f46ae31febdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:6c:02:ea:62:25:f6:90:71:fc:19:eb:db:
28:73:76:3b:8b:64:a8:1c:4f:15:ac:13:06:15:5f:
54:60:11:8e:1b:e4:15:1a:e6:a5:e9:30:8a:c8:ef:
29:8c:62:49:70:87:c5:c5:64:fb:91:ee:53:49:ff:
5a:a0:f1:43:f1:64:28:18:c8:17:b6:7c:44:08:e7:
ab:0d:30:44:c6:dc:42:be:ab:19:e9:38:4d:4d:56:
ff:c4:cb:6d:32:66:2c:64:48:b6:ef:c2:00:b1:e9:
7a:4a:1a:74:50:04:10:9e:25:b5:06:f8:3e:86:ce:
de:ca:1d:0b:2e:9a:c4:dd:4e:96:d4:3a:b5:08:83:
ef:b9:91:63:17:e2:77:e6:ff:c4:17:89:1b:0f:cf:
fc:e2:43:d0:ed:47:d2:47:17:25:7a:08:1e:0b:ce:
29:a7:b0:2c:c9:c4:cd:f0:e1:86:9d:cb:a3:d0:ca:
75:6e:62:8b:b6:40:07:63:b1:68:62:d9:52:4c:d2:
a8:7e:4d:8b:40:0d:ea:a4:74:a7:51:dd:01:0d:67:
e2:9b:75:3f:6d:27:54:7b:de:23:1f:7e:56:c6:30:
88:31:c8:be:6d:ca:43:fe:34:89:4a:79:ce:e5:a8:
9d:e5:e5:84:ef:45:a1:47:03:f7:27:e0:96:09:20:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:02:BD:7E:21:5D:68:6B:80:93:BF:59:E0:F4:6A:E3:1F:EB:DB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RNICvX4hXWhrgJO_WeD0auMf69s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
67:00:2e:2a:f8:ad:e0:7f:25:da:72:22:c8:60:fc:a5:bb:6f:
36:88:85:a8:13:d0:58:a4:2e:21:d5:4c:ae:66:3c:67:9d:75:
36:73:2f:cd:8a:87:b9:12:2e:d8:29:5e:19:8a:94:2c:75:f6:
5f:bf:47:e8:ba:a1:ca:f5:f7:11:01:4a:ed:de:fc:81:7e:ef:
0d:76:a3:2d:b0:37:fa:5d:b8:96:e5:26:d6:0e:ba:6e:e3:b6:
f4:0e:c2:5b:d9:29:90:fa:7a:37:a0:b0:ed:af:8f:ae:fc:1f:
01:c3:44:d2:37:5e:13:03:26:7b:a5:d9:ac:05:d4:00:ae:94:
9d:a9:7a:71:28:ab:d1:d0:21:c5:5e:5c:01:44:0b:a9:cb:52:
28:ee:73:23:07:75:d9:f1:01:c2:d1:5e:f8:69:15:ad:6a:a9:
9a:01:95:cc:97:b1:e4:0b:8e:b0:84:62:07:8f:48:52:bd:7c:
c5:03:f3:70:34:4a:20:83:e7:83:eb:02:1d:93:2a:1b:1c:68:
c4:95:ab:91:34:77:0a:e0:db:ba:9a:be:f5:e0:88:69:89:c2:
38:2b:52:cf:9c:57:a1:99:90:53:45:53:b2:82:40:dc:46:a1:
f8:8a:17:cc:3b:1d:3f:d3:e5:0f:ca:43:79:0d:95:0b:75:fa:
86:79:80:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:18 2025 by rpki-client