Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z22BGeNR8sL4g6i6c4GXykJi1ho.roa
File: Z22BGeNR8sL4g6i6c4GXykJi1ho.roa (raw, json)
Hash identifier: qAWrjB4khNow5kYVDi+5ZtHnNQCjbyhzI1GLgGThjyE=
Subject key identifier: 67:6D:81:19:E3:51:F2:C2:F8:83:A8:BA:73:81:97:CA:42:62:D6:1A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426695AF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z22BGeNR8sL4g6i6c4GXykJi1ho.roa
Signing time: Sat 01 Jan 2022 14:03:08 +0000
ROA not before: Sat 01 Jan 2022 14:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39840
IP address blocks: 192.36.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114019247 (0x426695af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=676d8119e351f2c2f883a8ba738197ca4262d61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:81:00:11:05:60:b7:7c:c4:07:99:00:f8:
27:b4:14:79:f9:e6:f3:19:17:7f:1d:be:e1:3e:3a:
f4:5b:d2:6d:b6:a7:82:e4:7d:f4:ad:89:18:8c:ee:
6c:31:d3:b1:dd:39:a3:41:1e:58:54:27:57:31:92:
5c:be:d8:b4:df:74:91:b8:29:37:f8:dd:52:6a:df:
24:27:e5:7a:4e:c9:dc:5a:5c:f8:4a:cb:fb:1c:67:
70:0d:00:91:b0:db:05:50:21:5c:96:69:7d:00:a9:
4e:4e:46:53:2f:9a:65:b8:cb:ec:a2:d2:09:b6:48:
31:be:f8:5d:6c:83:7b:ad:2d:21:4b:d9:7c:57:26:
77:96:37:1e:3e:f2:99:e4:7b:9f:36:1a:5c:52:28:
2f:8c:e8:31:1b:a5:b9:da:08:c1:a0:16:1a:c1:47:
36:e1:cb:95:fc:c6:48:6e:0b:4d:83:d6:8f:1a:be:
b6:ce:9a:f8:de:a3:5f:4c:ed:b3:8c:f2:d0:c2:63:
45:0e:60:20:7e:23:f4:ed:b9:94:7e:d8:49:45:a1:
08:67:2f:ad:63:b6:08:29:32:c2:67:df:9b:b2:56:
e1:78:17:9e:f2:c1:d7:0a:cc:12:30:f6:9d:fa:86:
79:4e:3d:84:a4:8b:26:23:26:fa:0f:88:ee:45:f9:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:81:19:E3:51:F2:C2:F8:83:A8:BA:73:81:97:CA:42:62:D6:1A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Z22BGeNR8sL4g6i6c4GXykJi1ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.135.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2a:07:b8:ba:c6:76:fc:08:bb:1c:6d:86:fd:3c:a7:ec:57:
2e:ed:14:e6:44:62:12:47:a9:07:1a:29:80:38:d2:2f:dc:8f:
f3:f9:5e:31:1e:6d:ee:7a:20:8d:5d:bf:dc:91:ec:c3:0d:cd:
e6:1a:17:f9:1e:30:ca:53:fc:e2:15:dd:a5:90:21:aa:b3:77:
00:ee:fc:bd:52:cb:8a:26:c2:a4:4a:bc:df:b1:00:2d:11:c1:
08:b1:6c:d1:53:fa:51:27:ad:5b:dd:56:40:9d:b8:9b:12:24:
07:8d:ee:41:cd:78:fe:13:9c:20:d8:d6:e4:0f:f7:48:b9:80:
27:c4:03:eb:c6:4d:51:db:54:cc:fc:96:55:19:94:a7:15:c2:
0f:4a:e3:ca:84:51:b1:7c:1c:2b:0d:00:48:f5:f8:e2:79:79:
30:83:b4:83:2e:fd:d2:69:26:c8:22:00:f7:d6:a5:b5:a5:61:
b6:fa:90:91:14:c3:bd:8c:e4:ca:1c:8b:f9:e7:0c:32:2c:68:
54:7d:76:b7:13:6c:17:6a:4a:fc:60:2d:60:7a:00:67:50:9b:
3e:9f:b5:23:2a:a3:ac:4e:06:2c:e2:e1:8c:93:a9:99:76:16:
14:54:15:8e:db:fd:fc:b4:a3:b6:2d:96:b1:c4:52:18:11:f1:
8a:4f:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:13 2025 by rpki-client