Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/THDjN7tfMAQG5XwOFQ8UIsuoPow.roa
File: THDjN7tfMAQG5XwOFQ8UIsuoPow.roa (raw, json)
Hash identifier: ZMkZJRTJQH/+5mrhcDvCdPTnxQ0RkE4iciRcmgkXFYs=
Subject key identifier: 4C:70:E3:37:BB:5F:30:04:06:E5:7C:0E:15:0F:14:22:CB:A8:3E:8C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483D36B52203AC9CDC093B530330F0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/THDjN7tfMAQG5XwOFQ8UIsuoPow.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 192.71.211.0/24 maxlen: 24
194.71.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:36:b5:22:03:ac:9c:dc:09:3b:53:03:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c70e337bb5f300406e57c0e150f1422cba83e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:31:f7:34:98:a2:c4:3b:0b:dc:0d:5d:fd:
26:cd:85:17:a2:79:2c:62:aa:3d:7c:60:04:a4:c9:
fa:a2:8d:56:92:a3:11:dc:ae:2a:57:4f:12:fc:30:
56:ef:5c:74:8b:d2:f0:79:20:49:77:20:f4:83:4d:
8e:e3:60:c4:3e:5a:4b:35:da:7f:a7:cb:48:b7:ed:
da:24:14:b4:9c:56:c9:5f:9e:d0:33:96:18:a0:dd:
04:3c:18:09:4c:7e:d5:1c:d1:96:97:e3:3c:d4:cf:
cf:d5:76:f2:dd:e1:ab:ea:7f:a1:e5:b6:b2:65:f7:
1d:8a:f6:bb:13:72:a3:be:05:ef:00:18:d1:d9:12:
71:76:2d:58:88:cd:38:79:f8:55:2e:1c:95:0d:2c:
93:dc:14:36:7f:c5:d1:af:8d:b6:a8:bb:b1:9e:b2:
1b:62:a5:13:9c:90:59:21:6e:83:42:ef:9b:fb:75:
1d:ce:5a:eb:59:ef:02:c2:63:5a:62:3d:82:11:8e:
5a:80:59:3e:0b:dc:97:cd:09:5a:ed:d2:ff:3b:ea:
b1:77:b8:ca:3a:94:64:c6:87:fd:e4:1f:04:40:88:
41:0b:6d:a5:c4:38:55:95:5f:f4:f9:c8:51:54:74:
aa:15:9c:da:15:89:ec:ed:11:9a:b1:fc:70:26:8a:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:E3:37:BB:5F:30:04:06:E5:7C:0E:15:0F:14:22:CB:A8:3E:8C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/THDjN7tfMAQG5XwOFQ8UIsuoPow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.211.0/24
194.71.130.0/24
Signature Algorithm: sha256WithRSAEncryption
45:78:72:3a:96:10:fd:f2:07:af:30:ee:20:ef:ca:29:c2:63:
cc:72:5b:e4:e7:ec:ce:3f:76:0e:2c:6d:10:f1:40:bf:75:eb:
c5:d8:af:eb:4b:5f:1f:1d:c4:32:08:0f:4c:3c:21:1c:72:27:
55:bd:aa:3f:ca:54:5d:5a:1c:f2:b0:12:c5:77:eb:d2:60:cc:
93:33:f1:c3:e5:61:19:cf:29:b6:49:7b:b3:d8:16:25:72:bd:
8f:7c:a4:6d:76:ef:84:7b:51:4f:16:6a:37:8e:90:c7:68:63:
c9:28:21:72:8c:c0:a8:4f:24:02:d6:90:6b:50:19:d8:57:99:
0a:2e:cf:a7:c7:7a:65:36:ca:24:10:06:d1:5c:18:9b:db:36:
39:0f:55:6f:dc:b4:ea:d6:56:eb:32:51:02:e1:be:6e:c6:02:
fe:06:a2:80:22:0a:ad:1a:f4:4f:2c:aa:83:e1:fc:ad:c7:ca:
53:e2:b7:20:3a:e4:e3:00:06:2b:f0:33:66:f3:d2:ca:b2:f5:
eb:f3:1d:dc:ae:13:bd:39:4f:07:79:f7:ae:01:50:d7:29:3d:
2e:70:98:e9:ce:7d:93:b5:24:0f:cd:f3:1a:a2:79:7a:23:3d:
bd:a7:2a:1f:24:15:1d:da:d5:93:a8:7f:5c:1d:82:51:63:a3:
88:c7:08:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:11 2025 by rpki-client