Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c4ReCz3UD_-HQjls4oza0KGcxxo.roa
File: c4ReCz3UD_-HQjls4oza0KGcxxo.roa (raw, json)
Hash identifier: OnlR/5XbdePzQzjoYgYAR0YMSE8nvrdIJwg3a7fEfYs=
Subject key identifier: 73:84:5E:0B:3D:D4:0F:FF:87:42:39:6C:E2:8C:DA:D0:A1:9C:C7:1A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195196150EAE6EDD398FA03285B689B65ED
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c4ReCz3UD_-HQjls4oza0KGcxxo.roa
Signing time: Tue 18 Feb 2025 14:06:02 +0000
ROA not before: Tue 18 Feb 2025 14:06:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209659
IP address blocks: 193.180.167.0/24 maxlen: 24
193.180.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:61:50:ea:e6:ed:d3:98:fa:03:28:5b:68:9b:65:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 18 14:06:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73845e0b3dd40fff8742396ce28cdad0a19cc71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:01:2c:e8:13:27:34:e7:ef:93:13:fe:06:
9d:ad:4b:13:88:6e:6f:a1:64:f4:e8:15:99:72:77:
95:a2:e3:e0:e1:ff:30:63:e0:a0:21:18:aa:62:7e:
28:23:e5:5c:3a:47:01:48:7e:a7:79:cc:e4:69:99:
23:f9:8e:d2:60:e0:9e:a8:d7:a5:92:3c:88:63:7a:
55:00:33:c9:9b:f7:34:79:31:b7:63:c5:e9:4b:cb:
21:60:b8:d8:df:58:ef:58:ab:ad:db:4a:98:d0:05:
1f:6e:7d:57:26:64:6b:ce:67:18:2c:0c:5e:3e:37:
f2:c8:d1:d1:e6:42:da:f6:9a:31:ba:14:42:b5:c7:
de:37:f0:d7:3e:d1:10:1a:2c:74:33:a8:13:23:d6:
4e:e1:5f:a7:41:9b:43:71:91:b6:e6:a5:b4:30:44:
83:d5:63:12:a8:9c:74:67:55:21:2c:f4:b5:98:76:
97:54:9b:af:cd:f7:6b:d5:16:d0:0e:e4:b9:83:19:
4e:0e:77:09:b2:9d:48:e2:77:af:19:bf:62:c0:79:
b9:e6:1b:be:c1:53:96:dd:2b:fe:13:5e:5a:ad:c0:
f3:e4:96:bc:e2:63:3f:6e:1c:0f:97:e7:f1:58:36:
cf:3f:44:73:cb:c3:19:77:0f:54:9c:a9:69:c2:fd:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:5E:0B:3D:D4:0F:FF:87:42:39:6C:E2:8C:DA:D0:A1:9C:C7:1A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/c4ReCz3UD_-HQjls4oza0KGcxxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.167.0/24
193.180.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:be:90:ca:8d:31:65:e9:03:ed:e8:24:62:a2:82:7a:1f:bc:
7e:8f:5f:fc:fb:66:08:5f:ec:d9:8b:69:5e:f6:74:9c:ea:f2:
f5:09:f3:17:b1:be:c1:cb:6f:0d:01:c7:a6:0b:aa:5a:bf:50:
fb:93:07:9e:56:54:d6:62:e1:58:bb:1c:e3:04:11:07:18:68:
6a:35:5a:8a:82:bd:b4:7f:2b:e7:e2:f4:d3:42:33:a8:54:49:
43:30:29:e1:4b:62:3e:67:9b:15:2e:f0:27:62:86:da:c5:83:
1e:4e:39:77:22:4e:74:3e:81:22:a3:ca:69:5f:34:ec:59:33:
4c:9b:43:28:30:17:3e:64:70:fd:b3:5f:3d:50:17:32:16:02:
ec:e4:c4:b8:34:8a:7e:ce:fb:03:9b:17:1d:05:e0:90:db:2e:
51:89:30:ae:1a:b6:46:2c:3f:56:30:66:b0:15:5c:c8:2a:53:
21:24:37:e9:bf:14:4d:6a:a5:66:19:76:6a:cf:f6:be:9d:9b:
c1:c5:76:c5:07:80:9a:6a:c0:7a:74:fd:13:83:c5:27:a7:97:
0d:d3:f2:ab:87:0a:52:f7:1a:8c:09:fb:a9:66:63:fe:b8:84:
dc:31:63:77:00:c3:c3:96:d4:82:61:8d:1c:6f:98:9c:8b:0a:
56:62:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:50:52 2025 by rpki-client