Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UxA8bM1YgZlDCFmfA_PLoJ-8grI.roa
File: UxA8bM1YgZlDCFmfA_PLoJ-8grI.roa (raw, json)
Hash identifier: qB+FDyTJhxI2Cb7NAwpyFmwv+9IlyDbI5eJMaFh7FOo=
Subject key identifier: 53:10:3C:6C:CD:58:81:99:43:08:59:9F:03:F3:CB:A0:9F:BC:82:B2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0193D3ADCF579D89FF9392D48A8A192E890F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UxA8bM1YgZlDCFmfA_PLoJ-8grI.roa
Signing time: Tue 17 Dec 2024 08:13:23 +0000
ROA not before: Tue 17 Dec 2024 08:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28726
IP address blocks: 192.121.79.0/24 maxlen: 24
192.165.117.0/24 maxlen: 24
192.165.118.0/24 maxlen: 24
193.181.64.0/24 maxlen: 24
194.14.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:ad:cf:57:9d:89:ff:93:92:d4:8a:8a:19:2e:89:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Dec 17 08:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53103c6ccd5881994308599f03f3cba09fbc82b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:2c:e5:8e:a9:5e:8c:a8:34:2f:7d:f1:2a:
1d:ec:1d:cc:17:47:55:8b:23:55:77:49:fe:30:15:
7a:fa:4e:c5:94:fd:d4:dc:ce:36:02:b9:11:f9:2d:
78:91:16:53:7e:85:1b:15:91:ca:66:9a:02:f6:d2:
39:9c:b2:da:21:0e:d7:15:b0:23:73:79:17:c4:7b:
4f:6c:4c:98:d7:03:48:47:6a:4e:78:0a:b6:b1:49:
1c:99:50:b9:aa:82:ad:9a:a6:5d:56:51:70:ce:4a:
84:1f:34:95:1b:9b:09:a6:2b:32:33:05:2c:79:31:
09:1d:22:eb:42:ad:6d:bf:52:04:24:b1:ad:ea:5e:
ee:5c:ff:af:62:a4:e6:bb:f3:21:54:59:2e:f6:c5:
41:c6:0b:b6:3c:71:41:23:9e:7a:33:cd:a1:45:c3:
16:c4:65:89:0f:ee:8e:dd:16:c5:65:0e:b6:74:0f:
f3:24:3b:70:6f:fd:92:13:02:1f:b5:4c:78:39:93:
b5:9b:95:f9:68:f0:12:ac:20:80:69:a4:56:43:6c:
62:44:17:90:15:c9:6b:b9:be:2f:9a:fa:42:9c:0d:
a9:c2:ce:40:f8:44:04:a4:ba:9e:8c:12:65:4c:a8:
19:a1:85:ac:48:15:e3:0e:67:45:18:9c:94:7b:99:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:3C:6C:CD:58:81:99:43:08:59:9F:03:F3:CB:A0:9F:BC:82:B2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UxA8bM1YgZlDCFmfA_PLoJ-8grI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.79.0/24
192.165.117.0-192.165.118.255
193.181.64.0/24
194.14.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b1:3f:bb:3c:18:92:ea:50:4a:30:51:e4:a7:d3:fd:af:fb:
27:7b:50:12:01:db:11:2d:4d:be:cd:1b:4d:aa:c3:0a:e5:01:
48:43:df:53:4f:1d:ef:5e:a3:60:de:36:f1:ea:f2:ef:20:22:
52:57:92:c3:2a:41:bc:25:b2:4e:55:54:8c:09:da:fa:0c:ce:
81:a6:df:02:94:c0:b5:c2:ff:59:50:06:3d:f4:3c:e1:19:2f:
72:9c:3c:cc:20:7c:93:a7:fb:f2:56:a0:2b:c5:4a:7c:70:0c:
c1:24:d3:e8:ca:b6:b0:fe:9e:91:ec:97:cd:b0:92:5d:ff:5a:
9e:0b:c2:82:93:16:dc:6f:04:fb:f7:0d:3a:6a:f6:1b:44:a6:
d3:84:48:ca:31:b8:93:75:48:84:ba:03:3c:9b:a2:b0:97:98:
a2:a0:66:99:3f:5c:58:93:04:07:da:a9:db:12:19:cc:e1:c9:
eb:5d:a9:b0:70:76:12:a9:14:c3:68:b4:7d:15:04:81:71:71:
87:2c:e8:1e:b8:06:a7:c3:f4:bd:ed:3c:11:4a:c7:31:d9:db:
ca:78:71:bd:e5:bd:10:77:83:21:e2:7a:dd:b6:71:62:9d:b8:
42:8e:8c:03:69:34:8a:09:d7:78:da:97:14:cc:5b:72:66:be:
8a:45:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:40 2025 by rpki-client