Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T39QLD2GEUV68hKfDgGU_BW6qK8.roa
File: T39QLD2GEUV68hKfDgGU_BW6qK8.roa (raw, json)
Hash identifier: gPiWeGq0zlAETnF2vS7pF6l+CQhvmWiaAq0K6eASBlI=
Subject key identifier: 4F:7F:50:2C:3D:86:11:45:7A:F2:12:9F:0E:01:94:FC:15:BA:A8:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4353A4FB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T39QLD2GEUV68hKfDgGU_BW6qK8.roa
Signing time: Wed 16 Mar 2022 08:57:42 +0000
ROA not before: Wed 16 Mar 2022 08:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62313
IP address blocks: 192.165.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129555195 (0x4353a4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 16 08:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f7f502c3d8611457af2129f0e0194fc15baa8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:dc:c6:6d:76:de:fb:95:87:5a:a6:10:cf:
87:8c:8f:b2:16:b5:ee:fe:a0:f2:2e:39:8e:61:ab:
66:4a:ee:2c:6a:a0:14:7f:9a:3d:74:8f:b7:69:a9:
30:23:69:97:96:d2:a5:91:3f:db:7b:8d:5f:51:2f:
cd:d4:59:48:26:8f:d9:66:bd:7a:62:5e:24:fe:f1:
48:d6:50:dc:69:ec:fe:49:4f:fe:39:8b:3f:7a:b1:
f9:ad:b5:d7:c7:15:fb:42:9c:75:d3:2c:77:3c:9d:
6b:58:de:6f:ec:05:d6:c1:61:05:0c:92:32:33:cd:
31:db:ea:20:94:09:f5:31:74:53:fa:05:50:c1:cb:
7e:52:53:e1:0a:0e:99:a0:c5:00:65:30:0b:f8:fc:
8d:b5:39:c7:8b:c3:e5:89:56:9e:a5:1d:6a:32:04:
89:6a:fb:0d:8f:c4:f0:16:3b:59:1c:2c:c1:f5:12:
0a:33:ac:f7:fd:9d:ce:61:a1:9d:f3:d5:6a:cf:b4:
09:b2:b0:27:3b:ef:2a:c6:aa:7c:55:7c:0b:72:0c:
f2:22:85:5d:e8:6e:ab:6d:17:d9:91:13:33:91:c6:
e1:b4:03:54:d9:e4:04:c4:53:aa:f9:23:c4:f6:89:
38:bd:bc:d5:bc:cb:62:ef:f3:e8:17:5f:04:71:23:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:50:2C:3D:86:11:45:7A:F2:12:9F:0E:01:94:FC:15:BA:A8:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T39QLD2GEUV68hKfDgGU_BW6qK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.83.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:63:80:f2:df:81:ba:0d:90:4e:84:24:b8:08:03:ac:b4:01:
0d:bd:cb:1a:28:c6:b1:0a:a7:4f:f7:d4:38:9d:c5:4b:69:20:
d8:b9:a1:e0:70:b4:cf:81:ee:84:04:09:33:8f:96:86:ea:60:
af:d7:84:12:22:20:58:2a:24:0f:2b:b5:9d:de:94:76:96:e2:
8a:e3:c3:bd:41:8c:b7:2e:ea:f9:83:8a:f0:df:45:35:ef:4d:
23:ba:0a:2d:7b:fd:a7:c8:5f:88:01:89:e3:4b:b4:2b:e9:cb:
b1:23:00:33:c6:46:42:09:14:9e:e6:af:6f:69:d6:c2:c7:90:
e2:07:39:51:93:1b:28:20:5e:73:34:61:b0:f8:86:ec:92:6f:
49:5d:22:64:eb:e4:bd:05:26:25:8b:80:70:ee:aa:4d:34:7e:
c3:b0:55:cf:69:be:96:cd:02:e0:04:02:6b:29:63:a0:1f:f6:
e7:69:ff:89:b7:f0:2e:d6:a5:be:d2:49:35:b3:ac:5c:27:41:
cb:9e:da:c1:3f:0d:fc:37:55:f9:ce:79:67:03:c0:91:59:08:
43:78:62:c0:58:51:20:6d:16:49:54:fa:56:43:25:f2:8d:74:
85:5b:59:6b:97:33:b4:4c:03:5b:d3:03:17:dd:2f:cc:09:af:
52:3c:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:29 2025 by rpki-client