Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bChteKCircvD2wz99u-UXkqSKYY.roa
File: bChteKCircvD2wz99u-UXkqSKYY.roa (raw, json)
Hash identifier: XumppIOk+/viJnNiAVu1oA4Jha4UFPsHKPzLpWaojbw=
Subject key identifier: 6C:28:6D:78:A0:A2:AD:CB:C3:DB:0C:FD:F6:EF:94:5E:4A:92:29:86
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42636648
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bChteKCircvD2wz99u-UXkqSKYY.roa
Signing time: Sat 01 Jan 2022 14:03:05 +0000
ROA not before: Sat 01 Jan 2022 14:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33980
IP address blocks: 192.165.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113810504 (0x42636648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c286d78a0a2adcbc3db0cfdf6ef945e4a922986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:75:5a:9b:67:f5:47:97:d4:0f:2b:8c:ef:
9a:29:4d:5a:4e:e0:47:fc:ac:a8:6f:35:a5:e9:da:
a7:c8:de:e4:21:9d:71:e5:f2:47:b8:12:63:72:ca:
aa:ba:72:2a:0b:34:8d:61:49:5f:0c:99:09:9d:37:
b3:26:1a:9d:91:f7:8a:5a:b7:ee:e5:65:e3:cb:ea:
6c:0f:ab:cd:cb:16:6f:41:4e:3d:12:c0:8d:41:4f:
59:97:32:c3:c9:cf:eb:3e:27:b6:73:6d:1c:2c:b5:
4a:95:54:04:01:15:3f:ec:3d:5a:40:f7:50:eb:b0:
ca:21:8e:7e:02:4b:bf:8d:b1:70:9f:78:92:94:df:
3e:ee:11:75:d2:4d:fd:21:84:54:40:8b:c1:e8:27:
70:d7:e2:16:50:b0:72:45:03:40:5f:13:8f:bd:35:
50:46:8b:98:d4:10:94:d3:28:80:59:56:96:23:32:
19:d5:2e:c1:27:bd:84:30:8c:26:d0:ab:1a:0d:84:
18:97:dd:82:2a:32:16:50:e4:dd:cc:b2:8f:94:8c:
86:18:cb:49:92:b4:e8:e4:48:25:2f:2a:e4:f9:f0:
e2:21:41:84:3f:00:74:a2:81:d8:cf:a9:eb:6c:94:
9c:df:22:3d:f2:a8:23:49:5a:80:82:af:51:a6:91:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:28:6D:78:A0:A2:AD:CB:C3:DB:0C:FD:F6:EF:94:5E:4A:92:29:86
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bChteKCircvD2wz99u-UXkqSKYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.72.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:18:80:92:41:e8:d2:a7:a0:a5:61:41:8e:7f:c0:27:e0:
67:5c:0c:2b:fb:f5:d2:4e:ff:00:29:04:e0:a0:9e:c2:9c:9a:
70:c3:7f:c9:fa:18:29:1e:b9:26:02:32:89:7d:c9:b3:31:69:
fb:db:03:c9:12:22:55:9f:b2:20:dc:43:3a:da:09:80:78:f3:
05:23:3a:1f:08:69:49:23:59:64:b3:91:ad:07:84:01:49:16:
03:46:03:b4:c0:5e:50:c6:8b:28:51:54:56:01:f9:4e:8e:8f:
57:84:a3:13:65:26:33:b3:2d:84:98:18:5e:97:b3:a3:8f:11:
e1:72:4e:eb:f5:f8:a1:1d:91:c4:96:ba:d9:ff:20:32:be:63:
56:7e:f0:98:e4:53:b9:a2:8c:fc:1c:f7:1e:46:a7:2b:40:6a:
07:30:03:e7:c5:41:70:2b:32:8b:58:e6:ab:7a:c7:2b:7d:a3:
4f:b3:bc:b1:91:bc:f7:9c:7e:8e:a3:1f:76:c9:82:99:a3:fa:
22:13:fa:b8:45:9c:2d:ca:53:85:22:c1:c0:0d:f0:d2:44:4a:
63:0a:76:75:e5:5b:69:99:d4:07:ad:9a:9c:e9:f3:9a:5f:ea:
3f:ad:30:a6:a4:76:47:e8:fa:79:75:06:24:64:db:7d:3c:cf:
81:4c:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:55 2025 by rpki-client