Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gJ8VBeBIdEGKiAKLX-CgYAgT9VA.roa
File: gJ8VBeBIdEGKiAKLX-CgYAgT9VA.roa (raw, json)
Hash identifier: gzHeZnoHDI3488HmHrpnKhYAYt4uk9X0nIHJHDNpFAY=
Subject key identifier: 80:9F:15:05:E0:48:74:41:8A:88:02:8B:5F:E0:A0:60:08:13:F5:50
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194FB0DA59AC4634EB94AE9959E6003FC10
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gJ8VBeBIdEGKiAKLX-CgYAgT9VA.roa
Signing time: Wed 12 Feb 2025 16:46:02 +0000
ROA not before: Wed 12 Feb 2025 16:46:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 192.71.155.0/24 maxlen: 24
192.176.176.0/21 maxlen: 24
193.180.174.0/24 maxlen: 24
193.180.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:0d:a5:9a:c4:63:4e:b9:4a:e9:95:9e:60:03:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 12 16:46:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=809f1505e04874418a88028b5fe0a0600813f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:60:b1:ab:8b:d9:ec:87:44:2c:af:a6:10:
7e:38:57:4f:7c:ab:c5:a0:93:8e:9a:f7:b6:59:60:
64:a1:8d:4d:55:1d:d4:ca:ac:1f:fd:1c:25:65:2a:
a5:1c:63:0d:42:49:5f:3f:a4:95:43:54:ea:05:b1:
43:10:2e:24:2c:68:82:70:d3:28:9d:b4:fc:be:c1:
b8:bf:60:fe:66:db:b1:11:f4:3c:e9:05:11:85:fc:
73:89:e9:84:16:59:57:80:23:84:87:31:2e:df:a4:
b8:bb:cb:3d:fe:80:e4:1c:1a:50:25:c5:7a:d1:cb:
5b:83:da:37:29:43:bd:f7:53:08:4d:2f:97:f6:5b:
c8:d6:33:5c:4b:41:77:68:6d:f2:82:a4:b7:41:90:
a4:aa:e6:ab:3f:12:43:18:fa:2d:9a:35:1a:a3:4a:
ec:3a:a0:01:1b:a1:e3:52:02:87:4c:e3:05:85:d2:
eb:3e:1c:7b:26:3a:de:3a:e6:ac:ab:36:66:a9:f6:
03:d6:3a:0d:1c:a2:4e:d9:5d:a3:3d:a0:de:4d:3b:
dc:50:c6:b4:02:e4:e1:f5:70:22:b3:3a:73:de:78:
18:93:03:5c:8f:08:e6:86:0a:61:00:cb:fd:0a:c6:
99:d6:db:f6:51:23:d5:9d:2d:7b:a6:22:36:41:e7:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9F:15:05:E0:48:74:41:8A:88:02:8B:5F:E0:A0:60:08:13:F5:50
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/gJ8VBeBIdEGKiAKLX-CgYAgT9VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.155.0/24
192.176.176.0/21
193.180.174.0/24
193.180.255.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f2:25:33:a5:95:e5:25:9f:02:9e:80:92:fc:64:fd:03:11:
ea:76:89:67:40:20:c5:2c:2d:d9:e2:bd:8e:16:fd:1d:90:85:
4d:00:5d:dd:a6:59:8b:8a:73:26:2f:24:83:a5:24:5b:ac:ef:
bb:53:22:4d:aa:64:03:ec:cd:8a:43:b1:f8:96:99:51:70:ab:
09:b6:1a:97:5c:ca:a7:32:4e:a5:88:b6:ed:6e:34:50:8f:69:
4d:46:15:10:29:c6:18:f0:7b:5f:4f:96:ad:9a:b3:14:b5:af:
8b:f8:64:1f:d6:83:44:62:d3:55:42:43:4f:4a:09:02:ee:a8:
eb:e7:db:66:92:41:7f:b5:d7:cf:1f:72:10:20:ac:e4:04:e3:
bd:0c:41:40:c6:21:07:c1:3e:51:76:0c:2e:f7:c8:c3:0f:07:
21:7a:ca:87:fa:e0:d3:45:04:1a:0d:0f:0a:60:ae:15:60:d7:
c1:25:23:9e:2c:d5:76:b4:74:e9:bc:ad:50:f0:36:64:ad:63:
4a:4c:c7:73:bb:3a:c6:a6:1e:f1:08:ca:dd:5d:ed:f3:79:d9:
05:c7:d0:72:2e:23:0b:22:79:8a:20:39:be:99:43:16:04:65:
1b:fb:e8:8d:cf:df:4d:9a:22:59:cd:3d:31:67:b9:69:d1:eb:
cf:30:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:38 2025 by rpki-client