Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eTcJtDOg1HR9RqDNtgIckuOJjKM.roa
File: eTcJtDOg1HR9RqDNtgIckuOJjKM.roa (raw, json)
Hash identifier: Cl7NbXDVOs6wUwbhAfjpd1VrHUjNKIeJMJZ4TNGnSpY=
Subject key identifier: 79:37:09:B4:33:A0:D4:74:7D:46:A0:CD:B6:02:1C:92:E3:89:8C:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018852A6374D18064CD09BC9698090E126B6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eTcJtDOg1HR9RqDNtgIckuOJjKM.roa
Signing time: Thu 25 May 2023 11:23:24 +0000
ROA not before: Thu 25 May 2023 11:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 193.181.71.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:a6:37:4d:18:06:4c:d0:9b:c9:69:80:90:e1:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 25 11:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793709b433a0d4747d46a0cdb6021c92e3898ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:70:75:e9:bc:d7:fd:14:65:b2:61:2e:2b:
6f:d3:d2:ba:c4:db:de:96:c0:a9:82:cf:89:97:b9:
1b:37:1f:3a:1e:3b:cc:8a:be:6c:1c:06:42:ed:8f:
43:33:cd:e8:bb:05:60:2f:3a:44:86:e0:d5:2b:ca:
54:ef:6a:3a:a7:35:dd:66:81:99:6c:18:30:58:06:
1b:cf:96:97:54:cf:a0:ea:c4:ad:49:bf:b7:13:d5:
00:d0:f7:c4:b9:cf:71:43:fc:96:b3:1d:43:40:03:
b7:42:39:20:58:8d:d5:a5:75:e0:97:84:46:dd:44:
60:fe:18:72:ff:68:fb:a0:5c:fe:65:78:f8:0c:1f:
a5:79:53:f6:9a:eb:b2:c3:c8:8a:fc:33:e2:05:3b:
59:4a:6c:1c:cf:dd:3c:f5:b2:9c:19:57:7f:b9:96:
e2:fd:91:62:3c:ba:d8:1b:27:91:09:a9:ac:95:3c:
93:7d:d5:b6:a3:4a:2f:1e:50:50:57:08:a2:49:43:
e7:ce:13:75:1e:72:55:33:c7:67:84:95:e6:c9:85:
01:fd:12:e4:08:dc:6c:fa:e0:f4:79:c7:84:73:68:
95:01:18:60:3b:90:0e:e6:88:ed:16:55:f0:4f:6c:
4c:9e:dd:54:48:7a:36:e7:10:e0:22:6f:ef:eb:04:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:09:B4:33:A0:D4:74:7D:46:A0:CD:B6:02:1C:92:E3:89:8C:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eTcJtDOg1HR9RqDNtgIckuOJjKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.200.0/24
193.181.71.0/24
193.182.6.0/24
Signature Algorithm: sha256WithRSAEncryption
73:b2:45:76:57:9b:8e:99:de:1f:ff:fc:5a:d7:e9:36:be:95:
94:08:4b:60:a7:88:ef:83:21:87:0c:2f:0b:62:dc:40:90:fa:
51:f0:78:64:cb:17:1a:94:53:f9:e9:84:cb:6c:04:a8:19:46:
06:df:ab:76:1a:f4:fe:43:5e:41:ef:f4:e4:dd:f1:60:22:14:
c4:83:3f:c4:22:b8:2b:59:c9:51:2d:25:32:ec:13:fd:c3:d0:
12:14:5d:06:74:ad:bc:e2:28:9c:f1:31:dd:3d:35:a9:37:19:
d8:c9:68:ec:db:76:b9:b4:4d:a9:63:75:fa:1b:39:01:54:92:
41:89:80:23:46:45:8e:f7:56:31:0d:5b:e7:3e:26:d1:dc:a5:
98:47:15:c7:7a:ee:68:c0:de:c7:ba:8a:54:5f:b9:31:ef:6a:
07:5d:be:51:1d:69:2b:81:7f:63:de:4b:42:1a:ca:55:26:31:
f7:9b:be:da:c8:8d:7c:03:23:47:ee:45:71:eb:2f:93:f8:3a:
32:0f:56:48:45:4b:2c:13:e2:9b:4c:54:d3:42:af:ec:51:4a:
f8:08:30:1d:ee:c2:40:3b:8b:f7:01:33:61:a9:b9:eb:ac:67:
a4:1f:e5:eb:ba:e9:24:18:fc:6a:cf:f0:4f:96:eb:a5:1d:72:
09:f8:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:24 2025 by rpki-client