Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aBg4PDpDGFG1pAUNowjL7DYnuO0.roa
File: aBg4PDpDGFG1pAUNowjL7DYnuO0.roa (raw, json)
Hash identifier: v4dmOsOa0aq05tDzKzRfAmT+PNG2UbPD+i7Q1iw1UAY=
Subject key identifier: 68:18:38:3C:3A:43:18:51:B5:A4:05:0D:A3:08:CB:EC:36:27:B8:ED
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487B0DC0CD09952D8E903E457FF72A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aBg4PDpDGFG1pAUNowjL7DYnuO0.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208610
IP address blocks: 192.36.247.0/24 maxlen: 24
193.234.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7b:0d:c0:cd:09:95:2d:8e:90:3e:45:7f:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6818383c3a431851b5a4050da308cbec3627b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:44:ad:2b:d4:b3:c6:3e:ea:47:88:05:dd:fe:
49:20:81:88:f1:ee:45:79:ef:a8:5d:fb:74:1b:d9:
6f:ee:c3:a7:ad:da:35:a6:b6:eb:87:d1:a4:2a:0d:
ec:f9:d1:78:26:e5:e9:46:07:68:d1:03:c2:ea:f0:
cd:ee:2d:dd:fe:c1:35:84:6a:34:8b:1d:60:07:be:
6f:42:ac:22:7e:2d:09:99:fd:64:2b:4d:c3:e7:c3:
8a:13:f8:4d:ac:14:f8:77:e9:1d:e1:05:2e:b6:c3:
3b:8c:4f:10:0f:ad:ca:f6:f0:4d:88:ae:e8:3c:39:
cf:20:19:5d:89:0b:f1:f7:6a:b4:58:ab:f1:57:1b:
c6:64:a4:84:2c:81:99:f6:09:d2:86:8d:93:be:d2:
9b:e5:ae:c3:31:9f:80:56:f8:9c:63:c7:0f:79:43:
92:7f:e5:8f:e3:b9:2d:14:27:d1:06:04:7b:c4:fa:
7f:ae:7c:f1:79:25:7e:38:46:72:0c:f1:f0:72:55:
54:eb:80:6c:b8:ac:37:76:84:06:59:0f:98:64:64:
0a:cd:38:04:66:d8:22:46:33:a4:f1:c2:9b:6c:09:
d7:50:a2:2d:d6:12:87:b4:bb:e1:11:f6:c3:e1:51:
b3:12:1b:97:bb:1f:50:7c:bb:32:92:82:8f:22:1d:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:38:3C:3A:43:18:51:B5:A4:05:0D:A3:08:CB:EC:36:27:B8:ED
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/aBg4PDpDGFG1pAUNowjL7DYnuO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.247.0/24
193.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
52:0e:fa:a1:6c:c0:bc:0b:1b:db:d8:70:ed:03:48:17:14:1b:
b7:8a:47:ff:39:94:4c:e9:67:45:a8:39:47:97:b6:d6:1a:9a:
73:66:2a:55:05:d3:d9:16:a6:66:3d:ca:a9:4e:b1:d0:5b:a8:
b3:7a:5b:c3:dd:af:73:c8:39:83:35:3e:c6:6a:f1:e2:cb:c1:
1d:73:bf:27:ef:9e:d7:14:ed:33:c9:b6:e1:d4:b9:ba:42:34:
a9:c6:ef:cb:78:4b:c6:a2:d5:ab:37:fc:c8:2a:21:75:45:88:
bf:1c:f4:c0:3d:19:e9:0e:57:ba:43:a5:07:02:71:80:3d:7f:
71:17:4c:30:7e:6f:b2:db:6e:c9:06:76:4b:60:0b:63:ff:95:
b7:2b:22:cd:77:a8:82:b7:18:74:0a:e0:b9:a9:ad:ed:b2:f1:
c3:eb:6e:4c:ab:85:4a:e8:db:5f:de:ec:69:90:05:60:14:38:
96:6f:52:6f:d7:58:75:01:bd:cb:9a:e4:35:99:c0:0a:cd:7b:
69:6b:03:e3:40:1e:1e:09:f1:d9:28:26:5f:63:27:d5:9d:89:
dd:26:77:fc:55:89:00:57:bd:72:9b:72:51:c7:64:9d:45:7c:
e6:f2:90:3e:42:d5:07:34:8b:78:11:27:e6:da:2f:4b:fb:13:
e4:06:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:09 2025 by rpki-client