Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/af6Ob-7ZZY60XuzlAynywk1up7M.roa
File: af6Ob-7ZZY60XuzlAynywk1up7M.roa (raw, json)
Hash identifier: PqtpX9kO6WNR2YazNL6EbwxUe/rO3iZ4vBpP3X1jz/g=
Subject key identifier: 69:FE:8E:6F:EE:D9:65:8E:B4:5E:EC:E5:03:29:F2:C2:4D:6E:A7:B3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01954CDC2A106E49D4A5DAA995352857C45D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/af6Ob-7ZZY60XuzlAynywk1up7M.roa
Signing time: Fri 28 Feb 2025 14:00:51 +0000
ROA not before: Fri 28 Feb 2025 14:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 193.180.208.0/21 maxlen: 24
193.181.208.0/20 maxlen: 24
193.182.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:dc:2a:10:6e:49:d4:a5:da:a9:95:35:28:57:c4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 28 14:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69fe8e6feed9658eb45eece50329f2c24d6ea7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:aa:ca:79:e2:1f:d7:4d:34:76:e7:4d:8f:
77:19:2c:49:0d:c5:04:17:be:04:a0:a3:96:0d:0a:
62:8a:3e:d9:ec:8a:0e:75:fc:f4:67:99:c0:f4:31:
a9:ff:45:9a:13:7a:8f:38:fb:14:02:22:f0:73:b8:
1a:be:10:1f:09:0b:18:d0:60:84:44:51:83:6e:02:
97:8e:fe:fe:36:25:74:b6:4b:7c:16:1b:cc:d7:0c:
53:18:79:69:fe:99:8d:c8:3d:77:8b:97:d7:8d:e4:
59:05:ea:11:f1:2e:55:e0:9b:4a:0f:d1:aa:6f:c3:
7a:f8:27:e0:31:96:f7:c5:1c:f5:c5:01:e7:d5:75:
60:ce:34:a3:47:ae:32:d0:d1:61:60:47:f4:8d:d8:
d8:cb:66:07:fb:26:c1:0d:8d:dc:7b:bb:bb:b6:15:
75:5a:4c:fc:56:12:ef:7e:fe:29:7e:b5:d9:9e:f7:
43:28:c5:59:5f:bc:27:99:1a:47:b3:08:60:08:f2:
b9:60:a2:0c:7b:fa:55:97:be:26:0f:ee:6c:20:f5:
94:be:dc:93:62:f6:5a:fd:5f:30:a2:c1:3e:d2:77:
a6:8b:6c:e2:18:3c:db:78:16:e0:bb:15:62:7c:36:
fe:30:61:31:c0:2e:91:7f:44:7e:e9:58:ae:8a:47:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FE:8E:6F:EE:D9:65:8E:B4:5E:EC:E5:03:29:F2:C2:4D:6E:A7:B3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/af6Ob-7ZZY60XuzlAynywk1up7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.208.0/21
193.181.208.0/20
193.182.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:ca:ba:48:8d:82:16:36:9d:e4:aa:37:65:5e:b8:89:75:d7:
91:34:ca:76:02:70:73:ab:5e:80:7e:b3:de:62:68:61:cd:07:
10:bb:32:b5:8a:40:52:8c:32:30:ec:49:f2:9f:11:d1:3a:09:
8c:85:31:93:4d:6a:a6:a1:b2:b3:dc:6f:33:15:13:5a:8f:d6:
60:ff:ac:1f:6d:99:48:71:03:fc:10:55:1c:04:cd:6e:8f:5a:
39:1d:33:45:08:84:ff:09:f6:b9:3e:de:10:64:54:2a:1d:16:
13:2f:f7:5d:35:24:26:cc:bc:24:3d:a9:10:cd:9b:01:c3:34:
eb:b8:6d:1d:4c:1e:cb:48:1d:cd:32:a1:ac:49:c1:f2:5e:ff:
f5:a4:2a:b0:6d:9d:6d:b4:d4:be:bb:83:54:78:8f:c4:29:3b:
06:32:83:a3:4e:fe:94:e8:40:1c:13:dc:52:5e:fc:8d:dc:04:
d3:a9:fd:e6:80:73:87:20:c5:b0:8a:f5:0a:23:d1:14:4a:73:
1b:da:40:33:cd:e5:58:a4:88:ef:96:3e:ec:4a:86:c7:32:0b:
b4:e3:d2:64:93:37:1e:98:c2:5e:cb:f1:be:e2:5b:99:03:d7:
01:3a:10:50:48:14:dc:35:14:ef:79:44:84:1f:ba:f6:22:56:
95:78:d3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:42:29 2025 by rpki-client