Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bVYXKi2Xxe7W_AjU9XUHfvso8ek.roa
File: bVYXKi2Xxe7W_AjU9XUHfvso8ek.roa (raw, json)
Hash identifier: ao8+brMHE+bheX0uQh1+w6tyZJbGA5NpXWBknDCc0Cs=
Subject key identifier: 6D:56:17:2A:2D:97:C5:EE:D6:FC:08:D4:F5:75:07:7E:FB:28:F1:E9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42BCB185
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bVYXKi2Xxe7W_AjU9XUHfvso8ek.roa
Signing time: Tue 18 Jan 2022 14:20:18 +0000
ROA not before: Tue 18 Jan 2022 14:20:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209578
IP address blocks: 193.180.64.0/21 maxlen: 32
193.182.96.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119662469 (0x42bcb185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 18 14:20:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d56172a2d97c5eed6fc08d4f575077efb28f1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:e2:6a:fa:93:46:07:91:00:76:73:0c:dc:
e4:2a:de:53:39:03:8e:49:bf:e0:2d:ff:87:97:e8:
94:3f:7b:e0:61:cf:6b:91:1e:4c:c7:78:42:2d:b0:
85:6f:d8:53:3a:60:1a:f0:a0:ba:8a:06:33:d1:6e:
06:aa:0e:63:d7:ef:39:7d:69:a9:d9:3a:f1:c0:ac:
6b:31:16:89:dd:9a:8e:33:a7:f2:0e:61:0c:69:f0:
6d:a3:22:9a:99:43:f3:ed:7d:01:06:c0:a0:23:8c:
f7:fe:1a:cd:97:4a:07:b8:2a:da:55:f1:6b:5e:4a:
8a:b2:e7:bf:49:4f:4e:2c:cf:a7:8a:7f:d8:03:4f:
a7:85:1b:21:63:9f:19:0e:2c:35:57:88:d9:23:01:
fd:02:d2:51:33:bf:b5:81:7a:6c:7b:cf:0d:48:9c:
e0:c9:7e:9e:4c:32:c5:e5:c3:dd:bd:d4:b2:85:6b:
55:6f:ab:9c:dd:97:67:a4:cf:e9:a5:d2:3d:88:46:
b1:39:36:32:7f:fc:bf:2c:84:ba:8e:36:64:15:c5:
c9:25:b6:c6:ab:b8:ed:fb:4f:51:e3:a2:25:68:a9:
04:be:ce:db:fb:1d:4e:8a:25:a3:2c:0c:15:f1:63:
a6:b7:90:99:a9:dc:fa:57:40:3c:37:c4:91:54:85:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:17:2A:2D:97:C5:EE:D6:FC:08:D4:F5:75:07:7E:FB:28:F1:E9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bVYXKi2Xxe7W_AjU9XUHfvso8ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.64.0/21
193.182.96.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:dc:fd:9e:cf:c6:a3:96:38:cb:37:87:9c:de:78:85:46:2d:
d1:90:a4:50:9a:67:b3:8b:bb:a3:fc:d4:e7:d4:69:4f:3c:9d:
a9:a7:42:d6:b8:8c:20:4d:64:81:22:42:d2:cb:e9:0a:aa:71:
e4:ac:fa:a7:d7:db:fc:7e:6a:18:93:a4:25:ae:5e:1e:08:db:
26:f5:7e:c1:5e:cc:30:c1:8b:79:10:d7:66:fd:be:aa:2d:84:
a7:e1:3d:4e:c7:74:f0:f7:6e:04:d2:45:ee:10:ac:01:db:b3:
ad:e2:b8:a3:d0:b1:97:cd:12:59:ce:cf:b7:a6:7f:76:56:63:
9c:1d:78:c6:00:81:bb:ac:91:5a:58:c4:df:39:88:c2:77:30:
08:aa:23:b8:db:30:41:91:e0:9d:75:c2:73:5a:4e:21:a3:7a:
ef:2d:0b:97:f1:1c:e5:d4:73:d5:87:e4:61:13:d3:2b:a4:c4:
19:2d:9b:5b:c1:1c:a5:ac:eb:6e:58:07:ad:7b:bd:aa:47:fd:
08:b2:bf:b6:56:0e:66:39:0d:76:65:c7:0c:9f:0c:cd:7a:d4:
b0:43:6d:be:87:55:b5:23:8e:1f:5e:69:cf:7e:df:c8:91:ee:
0a:8a:95:b0:db:a0:0c:02:a6:77:6e:0b:18:55:d8:d3:be:a9:
aa:ed:da:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:20 2025 by rpki-client