Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VmhrtIiHjXpTUQEqtyrniQdL3ik.roa
File: VmhrtIiHjXpTUQEqtyrniQdL3ik.roa (raw, json)
Hash identifier: CRQpU0tFHjkKwHyNDK0jaGYSyV07iJVxPf0MZA8Y9jc=
Subject key identifier: 56:68:6B:B4:88:87:8D:7A:53:51:01:2A:B7:2A:E7:89:07:4B:DE:29
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0181F67E727CC834A011AB54EC40476F7900
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VmhrtIiHjXpTUQEqtyrniQdL3ik.roa
Signing time: Wed 13 Jul 2022 07:38:10 +0000
ROA not before: Wed 13 Jul 2022 07:38:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49862
IP address blocks: 194.103.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f6:7e:72:7c:c8:34:a0:11:ab:54:ec:40:47:6f:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 13 07:38:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56686bb488878d7a5351012ab72ae789074bde29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:a7:c0:f9:9f:b5:14:7b:1a:7e:32:de:dd:
30:16:ec:f7:cc:aa:ff:cf:61:31:4e:e3:ce:73:86:
b2:3e:2d:b2:a6:c0:2f:d2:13:b1:11:0d:92:6c:6e:
bb:c0:b6:12:a5:8b:05:ab:97:d8:13:17:de:db:80:
b4:6e:91:bd:71:5c:20:bd:16:b2:a1:45:ce:1f:8b:
7a:ae:3f:44:7a:c9:ec:20:80:0c:5e:4e:f2:41:81:
ef:db:46:80:05:f5:b6:8d:7b:4c:a8:3b:16:4b:ef:
05:f0:bf:15:b8:41:2a:a6:f5:12:7e:ab:b7:88:bf:
50:e5:2e:f3:dd:c8:b3:a4:2e:25:7d:19:16:76:0f:
7c:2b:2c:c1:c6:c5:54:42:5a:c9:3c:a1:1d:fc:99:
f7:9c:f9:23:6f:6d:bb:17:af:33:d6:76:b2:6a:a7:
d5:7f:45:55:27:24:e9:66:c8:7d:ef:e2:13:da:85:
4e:ec:ff:10:3c:be:c8:78:a8:f9:b7:9a:96:94:bc:
d8:b1:30:16:b3:26:91:c1:8f:95:2c:d9:9d:18:d0:
ec:79:22:75:91:3e:95:38:d0:79:3f:6c:ae:3a:e6:
f7:7f:8b:1f:19:24:b8:ea:2b:14:75:59:fd:cc:a4:
41:92:5b:76:2d:2e:ed:00:ef:04:46:66:4d:5e:51:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:68:6B:B4:88:87:8D:7A:53:51:01:2A:B7:2A:E7:89:07:4B:DE:29
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/VmhrtIiHjXpTUQEqtyrniQdL3ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.21.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cd:3c:d4:ee:e9:e1:57:1d:d1:9c:51:0b:0e:10:d9:45:ae:
c4:a3:5f:a8:e3:ab:d1:9e:f3:64:26:98:92:09:58:48:02:ea:
cd:cb:08:6a:09:10:ad:c9:68:d6:45:d5:e7:c8:f2:8c:f4:7a:
15:e3:62:f2:59:6e:5c:b8:ff:93:31:e7:50:8e:1a:96:9b:d4:
d2:8d:39:4f:2c:62:ae:e7:17:be:5e:ca:9c:a3:41:25:19:e4:
d6:40:44:bb:eb:cf:fd:77:85:b3:b7:03:cb:15:f1:b0:6c:7b:
9f:5f:c7:41:fd:16:28:cc:d8:a8:5b:45:fe:91:34:7d:56:3e:
e4:45:f5:c7:98:25:62:94:a4:26:4e:d0:72:d2:89:5c:4f:e6:
86:86:56:05:35:a9:64:32:b6:a2:5f:e9:45:ff:d3:cc:6a:c6:
6e:9e:42:f8:b4:43:92:1f:75:17:43:3f:43:61:80:e6:32:c9:
a0:9f:89:ea:60:2a:7d:23:01:b0:24:d2:56:c7:75:d2:f9:1c:
98:d0:a1:26:a2:1c:6e:59:57:f4:06:03:38:7a:73:07:81:2c:
b7:d3:58:3d:88:9d:88:90:4a:d7:90:54:3e:16:84:dc:81:02:
22:d7:8b:7f:94:8b:41:81:67:fe:e8:ce:a2:65:78:b1:0c:b4:
65:a7:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:04 2025 by rpki-client