Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X_OzEwVL8l_ybbPVGeloVNs4eQk.roa
File: X_OzEwVL8l_ybbPVGeloVNs4eQk.roa (raw, json)
Hash identifier: K7kZqOVPGbuQjqnBzKyNzrgBdxQREMunxOoLgfOCqBo=
Subject key identifier: 5F:F3:B3:13:05:4B:F2:5F:F2:6D:B3:D5:19:E9:68:54:DB:38:79:09
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01903A8A84B385893D509D715DAAB52BF119
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X_OzEwVL8l_ybbPVGeloVNs4eQk.roa
Signing time: Fri 21 Jun 2024 11:24:34 +0000
ROA not before: Fri 21 Jun 2024 11:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214686
IP address blocks: 193.181.126.0/24 maxlen: 24
193.181.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:8a:84:b3:85:89:3d:50:9d:71:5d:aa:b5:2b:f1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 21 11:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ff3b313054bf25ff26db3d519e96854db387909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a1:6a:62:f0:5f:5d:1f:f0:4c:d4:9c:b0:39:
78:95:a2:63:35:e3:f6:b9:89:cb:3b:79:59:c3:d1:
c1:9a:db:67:24:c1:dd:48:74:ba:0d:b5:6d:5c:37:
9f:8b:87:05:8c:28:c7:8e:46:cb:d4:e3:a1:06:44:
44:ff:a0:8a:c2:1a:26:09:fe:a2:d3:3e:1e:04:05:
08:fd:b3:ec:10:82:16:00:da:54:32:9b:ba:20:4f:
33:65:0d:23:74:5c:2a:24:2d:f5:cd:2b:38:17:21:
e4:91:ea:34:63:b4:ee:5b:a4:ec:d8:e5:26:12:fa:
5b:f1:23:39:c2:48:68:c0:c8:c7:d9:84:11:0c:78:
63:ff:76:33:3e:77:2e:69:52:67:d5:53:79:7a:65:
82:46:2d:2f:5a:33:dc:ba:2e:f6:d7:aa:be:f6:dc:
a2:42:6a:6c:f2:0b:48:62:df:5c:08:31:c7:37:99:
8b:e1:d5:4a:fd:59:e4:7d:68:d4:56:32:ac:c0:c2:
51:d8:14:fe:94:c0:dd:c0:37:4e:b4:74:34:57:d6:
04:b1:f3:6a:1c:1f:0c:b2:72:61:a6:78:c6:86:40:
d9:a6:60:b2:dd:4a:19:f8:ac:7f:de:8a:3f:47:94:
32:c5:f5:74:e9:25:c8:55:f8:d5:d2:17:30:39:e6:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:B3:13:05:4B:F2:5F:F2:6D:B3:D5:19:E9:68:54:DB:38:79:09
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/X_OzEwVL8l_ybbPVGeloVNs4eQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.126.0/23
Signature Algorithm: sha256WithRSAEncryption
88:b8:21:8e:8a:65:fe:48:29:58:8b:c1:9d:96:25:1c:f0:5e:
8b:9e:11:c6:ea:17:9f:82:24:80:7f:fa:cb:b4:7d:5e:40:aa:
05:d1:93:d3:37:43:38:e3:22:0e:b8:57:40:4f:c8:d8:84:7f:
d1:bf:8f:80:02:a6:c1:e5:29:fa:de:5e:71:28:cf:10:53:b9:
fe:93:24:08:79:e7:7a:19:b9:64:f5:66:91:6c:9e:06:e6:c6:
b1:ee:45:7c:5f:25:d2:d5:60:f7:f8:b4:11:20:c3:31:a2:1b:
90:db:d1:eb:c2:e8:cc:3d:1f:6f:6b:d6:7d:2d:42:b8:4b:e1:
30:69:5d:65:b9:62:a3:43:82:5f:5a:16:db:77:0e:69:94:5f:
5b:48:d1:92:76:b6:ca:25:74:81:a5:72:b0:dc:06:90:65:de:
b4:38:34:20:22:f0:58:1b:fe:47:f1:61:df:5c:6c:b9:53:19:
cf:97:94:bd:dc:be:9d:b5:f2:b1:c7:cd:12:fd:25:11:70:f5:
66:70:35:d0:4e:cc:24:c6:c1:2f:07:73:ca:43:aa:3e:c8:85:
77:a5:7f:d2:c4:59:86:1f:9c:c8:5b:6c:55:42:b6:bc:9f:3b:
2c:c8:3b:d7:1b:8a:d7:87:f0:c9:9f:ce:02:71:2f:3c:cf:85:
1f:f3:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:46 2025 by rpki-client