Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/amvhpuiEQrYOPYM02sm4qOxc730.roa
File: amvhpuiEQrYOPYM02sm4qOxc730.roa (raw, json)
Hash identifier: 5aTjizcQx2WkAxqb+ZtOY7ut2xubdGQ9J2qP/OuYkk4=
Subject key identifier: 6A:6B:E1:A6:E8:84:42:B6:0E:3D:83:34:DA:C9:B8:A8:EC:5C:EF:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274857F78F53A684AED558CF760A94CF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/amvhpuiEQrYOPYM02sm4qOxc730.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44515
IP address blocks: 193.181.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:57:f7:8f:53:a6:84:ae:d5:58:cf:76:0a:94:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a6be1a6e88442b60e3d8334dac9b8a8ec5cef7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:2b:fa:0c:6d:8a:0e:9e:ba:3e:4d:3c:78:
57:60:f8:32:9f:a7:cc:c1:22:da:7f:d8:a6:b8:61:
66:cc:8c:8d:55:8b:d1:78:1f:49:58:22:f6:66:e5:
04:ac:36:51:14:dd:73:0c:94:25:ba:26:e9:c5:e5:
c9:a4:4c:99:82:e6:0c:57:ac:ea:92:8f:07:8c:68:
04:f9:07:38:d7:24:f1:fb:c1:6d:c7:88:59:6e:a6:
87:f0:bb:67:e7:c4:a1:92:74:c5:2b:4c:83:79:0c:
4f:96:ed:0f:b7:ba:f0:45:7f:96:2e:e3:60:98:9f:
d4:0b:8b:75:b3:b6:c6:82:44:21:8c:ff:02:85:19:
73:6c:3e:5b:cb:34:e1:7c:8c:1d:d8:40:31:52:c4:
ea:fc:6c:9d:a5:d3:01:8b:ec:56:42:10:7b:eb:80:
ff:f9:c9:05:b8:69:61:d2:5e:e3:a6:48:1e:8e:dc:
96:62:bc:80:6a:f3:66:fa:2c:63:69:48:dc:1a:5a:
62:e1:fc:bc:b1:c2:22:69:aa:5c:36:e3:ee:40:77:
50:ba:9a:a5:0e:01:36:70:f8:a9:0a:6d:c3:a3:ee:
fb:a2:32:55:06:09:c4:d0:ae:e7:90:5f:ee:e3:45:
b8:1e:aa:bf:99:ee:62:d2:dd:7a:4a:61:81:0f:90:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6B:E1:A6:E8:84:42:B6:0E:3D:83:34:DA:C9:B8:A8:EC:5C:EF:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/amvhpuiEQrYOPYM02sm4qOxc730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:99:ed:e8:84:cd:91:5e:a8:b5:68:3b:7a:f2:5f:4d:b5:30:
a3:a2:43:84:cc:1d:2f:e1:7b:25:77:3c:69:66:79:c2:0f:a2:
cc:db:40:11:ba:4c:aa:8c:d0:54:c8:97:73:e0:84:f6:3d:4b:
61:5a:13:e0:e2:08:ec:0a:50:71:02:1f:0b:4c:43:c5:1c:4c:
0d:18:9c:cf:4a:bb:e2:25:df:b4:42:1b:2d:8e:e2:39:e3:33:
08:86:64:10:bf:68:24:ff:0f:08:1c:3d:7a:89:47:fd:62:0b:
30:b6:9c:dd:6f:93:c4:c8:60:64:7b:25:39:41:d4:83:ca:a4:
3b:16:32:c9:90:81:7f:15:84:13:6e:b5:f9:2f:f4:5a:c6:ef:
a2:e4:19:15:09:a2:e0:88:b5:81:e1:15:fb:bd:eb:49:ff:23:
56:34:8d:62:ac:d2:31:5c:70:08:bb:d1:f2:0a:a9:94:d0:d5:
09:ab:c0:a8:28:3c:ff:18:3d:83:94:a3:cb:56:6f:e5:38:25:
77:1c:98:8f:02:15:e9:48:9d:34:28:82:9d:69:d6:9e:2e:03:
3f:f9:ce:87:48:03:fe:01:93:bb:7e:b6:0d:8f:b7:cd:e9:9c:
90:b5:75:bd:7c:4c:9c:8c:bf:c8:22:b7:02:4f:71:c0:90:e3:
17:7f:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:23 2025 by rpki-client