Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_9FgHRSL7pBT33vaP1l0UGMYe_I.roa
File: _9FgHRSL7pBT33vaP1l0UGMYe_I.roa (raw, json)
Hash identifier: phcS1qUymoxo5SGcILkCtueMsWk/6dkXPMEcSlxPpnY=
Subject key identifier: FF:D1:60:1D:14:8B:EE:90:53:DF:7B:DA:3F:59:74:50:63:18:7B:F2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487EDE892A43C506129FB96C6770ED
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_9FgHRSL7pBT33vaP1l0UGMYe_I.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210140
IP address blocks: 193.235.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:de:89:2a:43:c5:06:12:9f:b9:6c:67:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffd1601d148bee9053df7bda3f59745063187bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:08:bf:54:3d:9f:af:ed:d9:46:6f:0c:c8:
c3:96:d5:d0:f3:a7:55:0e:ce:db:f3:da:ee:b3:10:
5f:e3:91:8a:75:5b:88:59:34:d2:b3:29:54:1a:1e:
88:bc:e7:e1:80:03:e5:3e:ef:2c:e6:6c:ca:c5:6f:
28:84:62:22:eb:60:cd:30:2c:10:98:84:e8:d3:04:
fe:a1:4c:fa:f8:fd:40:08:b9:18:d6:f5:12:75:46:
8a:03:d3:08:45:ad:96:56:6b:10:e8:6c:f9:5f:63:
e3:10:5f:06:57:6d:08:49:64:80:d2:fe:90:36:73:
f9:36:4d:a0:3d:0f:69:6f:2d:c8:e7:48:09:87:10:
37:6e:a2:02:f3:37:04:a0:19:32:3d:26:9d:47:df:
45:00:97:95:b4:78:c1:6f:39:dd:64:ef:46:f7:3b:
d9:61:5a:8a:6e:33:73:40:07:33:87:67:a7:36:57:
48:ed:ca:99:f0:fb:8a:53:01:e5:2b:16:11:3e:33:
bb:29:a1:38:51:06:61:3e:bd:f5:67:2f:e8:04:64:
db:59:2f:7e:37:77:40:35:64:e6:bb:b8:bd:60:fe:
42:ba:59:1d:23:38:da:57:c8:38:68:7b:b7:75:ac:
5b:76:cd:e2:aa:87:13:87:9c:11:82:91:6d:93:c3:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:60:1D:14:8B:EE:90:53:DF:7B:DA:3F:59:74:50:63:18:7B:F2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_9FgHRSL7pBT33vaP1l0UGMYe_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.160.0/19
Signature Algorithm: sha256WithRSAEncryption
87:3b:65:fa:0f:e5:1a:b5:98:19:51:fc:23:02:4b:f4:eb:90:
2d:ea:25:4f:df:ea:2d:fa:c1:65:e6:a7:52:1a:73:7d:bc:0d:
85:b9:61:5e:b7:58:13:6a:40:fe:92:74:49:dd:e8:80:34:8b:
e1:e3:c5:b6:f8:d8:6a:4b:42:e7:1a:7b:b6:1a:0c:03:e4:d3:
3c:89:cc:59:87:b6:bf:85:50:32:9a:de:63:37:37:ac:b7:67:
cd:8f:28:60:10:64:f8:74:41:69:8e:a4:a3:ea:11:65:7f:43:
19:b2:2d:6d:5e:39:5e:a2:10:aa:53:6d:e1:f4:f9:36:89:a4:
d3:0a:fa:7f:81:e4:37:65:1d:a3:6a:03:c0:d9:92:dd:c5:06:
1d:39:f6:df:61:42:99:f6:b2:12:3e:4f:73:5c:ca:5f:d9:67:
d1:55:a0:0c:a1:85:85:0c:3b:00:96:83:c2:f6:b2:42:27:39:
26:74:99:f0:ae:74:78:14:f9:54:76:52:c5:a3:60:2d:27:a0:
eb:3e:32:6a:36:52:13:bc:d6:2a:86:57:39:9f:54:30:d4:61:
07:ef:c7:78:b7:ce:07:33:70:7f:7a:1a:cb:94:54:cd:81:9d:
7b:c5:17:a2:bf:7f:a4:eb:72:c7:d5:4b:5d:18:51:6f:06:c2:
02:81:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:01 2025 by rpki-client