Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Um9suJLjJ3sBHvNIAR--v3c8O3k.roa
File: Um9suJLjJ3sBHvNIAR--v3c8O3k.roa (raw, json)
Hash identifier: 06/hkAoZ9KoIwhxluHagFQproH8DPPFEWJJQIuO9Sgw=
Subject key identifier: 52:6F:6C:B8:92:E3:27:7B:01:1E:F3:48:01:1F:BE:BF:77:3C:3B:79
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483DD5C21CE21279481DC84BE7326B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Um9suJLjJ3sBHvNIAR--v3c8O3k.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.183.185.0/24 maxlen: 24
193.235.44.0/24 maxlen: 24
193.235.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3d:d5:c2:1c:e2:12:79:48:1d:c8:4b:e7:32:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=526f6cb892e3277b011ef348011fbebf773c3b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:84:2a:ec:21:0e:80:2d:d6:18:50:8b:3e:
99:a2:33:28:02:36:ec:29:d2:3e:4f:81:ae:56:61:
62:da:c2:f5:92:b0:c0:90:66:b9:19:de:ca:8e:9b:
00:17:29:d2:69:3b:41:3b:da:57:d8:21:4a:69:a2:
38:57:cb:78:46:a3:43:28:73:31:1c:37:ff:3c:ad:
01:9b:ee:ff:45:fd:d7:85:e1:7e:38:27:c2:d6:82:
eb:e4:bf:f3:fd:d0:0d:d7:49:b9:58:a2:1b:8c:77:
6e:10:67:0f:66:f1:ac:e5:20:b1:b5:33:23:e0:7f:
94:35:9f:a3:fb:d8:a4:e5:e9:a0:8b:b1:b4:ff:3f:
be:5e:07:71:38:ac:3b:cb:24:85:23:80:25:45:0a:
6b:23:c3:92:4b:04:79:72:23:43:c0:ca:86:d1:87:
3d:c7:25:26:90:75:30:af:cf:4f:5c:f5:33:15:61:
ce:1a:98:73:7c:ac:1b:11:ce:a1:dd:01:b2:24:cf:
e7:e1:38:60:8f:4c:a9:1e:29:bc:4c:e7:a8:49:c7:
0a:46:31:12:e5:4c:78:65:09:90:df:6d:51:83:a2:
7a:7d:8c:88:2e:39:5b:17:48:0c:76:bf:fe:21:1e:
35:50:a4:5e:b3:30:ff:42:c0:3b:28:08:75:79:1c:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:6C:B8:92:E3:27:7B:01:1E:F3:48:01:1F:BE:BF:77:3C:3B:79
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Um9suJLjJ3sBHvNIAR--v3c8O3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.185.0/24
193.235.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:5a:9f:f0:60:1c:f3:1a:7f:b6:e0:dc:ba:89:8f:33:4e:bb:
34:d6:b3:49:0a:17:7e:a9:f8:78:aa:cc:d8:de:01:d0:62:4b:
0c:d3:5a:64:5b:08:4e:cb:b5:7b:73:52:92:ba:9a:8e:f5:0f:
4c:4c:da:8a:ab:d6:78:99:44:ea:81:34:4c:19:d6:ae:eb:d0:
8b:3a:47:bb:d9:f3:ad:27:d1:56:92:53:d1:f2:b6:ac:c2:3c:
0a:d5:dc:23:81:c8:0d:00:b9:e1:89:41:03:b9:72:48:dd:97:
d1:9a:d0:b8:d9:e1:d6:47:a2:51:2f:11:f6:f6:10:06:f5:3f:
9b:34:1e:63:4a:75:3a:80:14:a1:77:3b:99:c5:e1:20:58:bf:
e8:44:a6:9d:7f:81:33:7f:28:18:c4:64:eb:88:80:a2:e8:41:
bc:4f:d1:4c:c1:3f:0d:94:ff:ec:f6:ea:cb:7f:61:cb:dc:14:
77:7d:85:2e:4f:a5:02:b8:23:f3:e1:9e:63:c2:18:8c:9c:a8:
eb:f0:25:7d:47:53:e6:52:54:e4:23:f0:6b:c8:3f:c8:b0:a9:
c7:83:05:b8:9e:76:08:42:90:e5:6d:93:26:70:c2:c1:35:59:
cc:46:e2:31:f1:0f:c6:99:d4:b2:a1:f8:a8:1e:a7:aa:17:04:
44:2c:f3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:41 2025 by rpki-client