Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uz-pOF1gmivs8sWHQWxim9DvvEQ.roa
File: Uz-pOF1gmivs8sWHQWxim9DvvEQ.roa (raw, json)
Hash identifier: SSYa+7OU6VxfRU3xdYlef/IlmJm24iOonhNdn7EHySU=
Subject key identifier: 53:3F:A9:38:5D:60:9A:2B:EC:F2:C5:87:41:6C:62:9B:D0:EF:BC:44
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483824A0B91E39BF33C7F1A71BE19C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uz-pOF1gmivs8sWHQWxim9DvvEQ.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1882
IP address blocks: 192.36.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:38:24:a0:b9:1e:39:bf:33:c7:f1:a7:1b:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=533fa9385d609a2becf2c587416c629bd0efbc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:78:e7:53:4f:ec:70:83:5a:1e:7d:a4:a4:
1a:8a:94:2b:06:7c:ac:72:82:15:52:6c:e9:ea:ff:
af:4e:79:aa:89:04:96:3d:21:11:ba:6d:0d:7a:52:
e2:38:7b:c7:ed:23:7a:8e:a4:c8:98:3e:f7:0e:82:
0d:60:bd:45:b2:7a:1f:b0:4a:bc:94:11:b9:56:ef:
e1:0c:d9:1f:f9:67:57:db:94:5c:30:a6:38:b0:64:
37:47:2c:a0:8e:82:1d:ee:67:86:dc:69:e6:c2:b7:
23:57:69:06:ac:08:b8:f3:67:4f:7e:0b:14:16:f1:
ce:1b:97:5d:ec:61:a6:95:88:65:07:3b:bc:bd:87:
e2:97:da:33:8a:a9:c4:1f:b4:dd:ed:00:50:02:10:
fb:76:33:2e:30:58:ed:04:2b:2b:3c:d2:0a:00:7d:
5b:e8:b0:6c:ba:f9:8d:a0:e4:70:1a:25:a5:3d:6c:
9c:fd:42:bc:95:5f:0b:11:3d:60:75:be:88:5d:25:
e2:6b:36:ba:97:47:86:ad:13:7a:ac:53:49:e6:54:
82:dd:cd:ad:80:f1:3c:0d:9e:db:60:50:26:5b:1f:
18:ac:12:85:93:a7:b2:7c:dc:3a:fd:2c:ee:7c:fb:
d8:d6:c8:6b:36:01:20:ad:fb:af:c1:16:0d:ae:0c:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3F:A9:38:5D:60:9A:2B:EC:F2:C5:87:41:6C:62:9B:D0:EF:BC:44
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uz-pOF1gmivs8sWHQWxim9DvvEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.42.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ea:1e:7b:ef:97:b8:9b:47:45:79:61:86:89:c1:47:d1:67:
4b:26:f9:0e:94:f8:e1:c2:b7:a8:4a:f8:84:ed:63:ba:a9:03:
a7:c8:6b:aa:b2:0a:1c:40:51:1b:81:99:34:cb:4d:e1:a5:e4:
db:ca:7f:7e:6a:fc:10:83:08:5a:52:4d:6e:a2:ec:9d:36:48:
07:ae:50:a2:19:3c:52:dc:6d:ce:f8:3a:74:ff:25:36:0a:51:
77:45:a3:c0:b7:f0:1c:d9:e8:99:14:3b:c3:69:b3:45:98:a3:
90:f7:ec:18:85:c9:ff:b7:d3:a2:9d:8a:ff:2d:55:bd:6e:e6:
83:12:73:33:a6:80:b0:cf:d6:3e:29:56:db:bd:b4:1f:af:c6:
1e:b3:cc:75:32:6a:89:f8:b5:d9:35:81:c1:f1:e4:f7:74:1e:
77:69:d2:e5:76:2e:64:e1:bf:30:62:bb:21:eb:d8:67:bf:a5:
8d:dc:a1:3d:9f:2d:15:ef:fe:16:7e:88:23:8b:ce:fe:e1:95:
a2:4c:91:24:88:37:b1:a7:1a:99:7e:29:c3:ae:78:f9:81:d2:
0c:b2:31:98:3e:85:3b:a9:9f:27:29:0c:40:80:d7:98:de:46:
68:92:84:36:b1:db:03:fa:e3:30:c6:90:e8:13:80:a5:9d:ce:
3a:8c:29:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:38 2025 by rpki-client