Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/biZ8xBUCl2c9d-vnazK8T9PvjOc.roa
File: biZ8xBUCl2c9d-vnazK8T9PvjOc.roa (raw, json)
Hash identifier: kDKYroTujo0QcOLP1LSCAdI6NRgLGWPUIFqUz7/kvYA=
Subject key identifier: 6E:26:7C:C4:15:02:97:67:3D:77:EB:E7:6B:32:BC:4F:D3:EF:8C:E7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484A7F6AEFA22D1F36B67D858F287F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/biZ8xBUCl2c9d-vnazK8T9PvjOc.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30893
IP address blocks: 194.71.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4a:7f:6a:ef:a2:2d:1f:36:b6:7d:85:8f:28:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e267cc4150297673d77ebe76b32bc4fd3ef8ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:54:ac:8e:fd:58:15:d3:bc:86:23:4e:e3:
6d:34:40:3a:eb:44:ce:eb:96:ce:2f:75:5f:22:33:
2b:e8:1b:34:07:1b:ee:5b:f7:15:2d:df:dd:3f:0c:
74:bf:e8:c5:5a:c3:e4:6a:c5:8d:2c:02:70:69:06:
f1:2c:d3:b1:e2:66:04:f1:ed:55:6d:59:41:a8:b3:
d7:fa:e3:af:63:50:b9:0d:62:5e:f9:5d:1c:f3:a0:
43:9c:76:a1:e1:e1:c7:e3:3c:8b:a4:df:e1:2f:3b:
17:b9:ef:04:4d:6a:2a:a9:af:1a:fb:ce:32:f2:fa:
68:85:17:fa:44:cd:ea:4c:54:74:be:f4:fe:a2:7a:
ff:8f:1e:99:4e:35:61:bb:7e:1b:db:b3:99:69:0c:
3c:73:75:69:40:d3:fb:cb:d9:6e:ed:81:28:c4:44:
35:2e:ad:78:b2:a5:eb:1a:4c:17:f4:cc:32:2e:f4:
4c:1f:cc:b3:a1:6e:4e:db:4f:cc:18:bb:05:34:47:
6f:41:23:f7:01:d6:20:09:30:94:40:80:01:cf:c9:
f5:f0:3f:d0:04:ef:d8:4c:98:8f:49:1c:0e:08:cf:
c1:39:66:6e:93:01:3a:55:01:53:a2:9b:45:2e:08:
9c:18:8c:f3:33:1d:3e:ef:73:c0:be:ca:6a:d2:51:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:26:7C:C4:15:02:97:67:3D:77:EB:E7:6B:32:BC:4F:D3:EF:8C:E7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/biZ8xBUCl2c9d-vnazK8T9PvjOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.111.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8f:bb:a7:a9:d6:4a:8d:72:04:c4:08:0c:a8:99:7e:38:0a:
95:74:41:53:4c:be:16:a7:a6:dc:19:a7:ef:cf:9e:18:ba:48:
44:a0:29:37:65:70:a1:53:b7:d2:14:56:5c:71:6b:ba:ce:e2:
91:ac:81:89:a9:4d:17:c8:a7:bc:5f:2f:34:5a:3d:96:a9:45:
65:23:a5:ee:6f:1d:02:e9:57:36:e1:26:c1:39:0b:4a:24:5a:
df:b2:5f:f1:6d:34:ea:b2:37:b9:d8:ef:dd:22:c0:93:74:c1:
fc:1b:95:9b:4a:1b:8e:b2:0c:12:93:1b:3d:38:80:b3:eb:a8:
ae:2e:12:1c:64:70:ea:c6:0a:2d:44:29:6b:ed:74:41:d7:02:
1b:21:2b:88:33:d2:f9:a3:fc:48:f1:97:b8:cb:b6:f6:48:20:
a0:63:65:1f:94:38:e7:03:d0:4b:8f:de:1a:68:c9:b2:40:d4:
1a:9f:f8:6e:bb:e0:0e:7f:35:23:3e:9c:53:f1:e0:db:b0:13:
2f:79:87:45:37:6a:34:a6:94:58:bf:09:19:ca:b6:fa:96:a6:
cf:de:81:93:26:66:dd:9d:c5:5e:67:28:01:ee:05:05:5e:a6:
ab:b7:ab:61:35:b6:f0:7f:dc:d4:13:35:1e:78:e5:c7:97:91:
42:fd:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:29 2025 by rpki-client