Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hdLgakiEnoN9pnH99sL9CiWIZ8M.roa
File: hdLgakiEnoN9pnH99sL9CiWIZ8M.roa (raw, json)
Hash identifier: bZCtrI/y8lQ1gvILnt+ynHJ/vpWoTAmqLM/qIW8nFYU=
Subject key identifier: 85:D2:E0:6A:48:84:9E:83:7D:A6:71:FD:F6:C2:FD:0A:25:88:67:C3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274872282468AA4A1D6CFFC00286C999
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hdLgakiEnoN9pnH99sL9CiWIZ8M.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204074
IP address blocks: 193.183.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:72:28:24:68:aa:4a:1d:6c:ff:c0:02:86:c9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85d2e06a48849e837da671fdf6c2fd0a258867c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:c1:9b:0c:3f:aa:44:73:a1:cf:94:05:bf:
66:9c:d3:e9:93:69:d6:c6:62:70:33:bf:f8:3d:c2:
e0:fb:51:9f:99:bd:48:c1:10:ed:2f:ea:a2:a9:3c:
12:d0:41:ae:17:5b:ce:72:d9:d3:c2:78:2b:40:32:
18:32:55:9b:41:91:a5:dd:09:a4:18:40:24:ec:b3:
10:22:8f:28:08:25:bb:f5:1c:78:23:ee:73:b4:e1:
0f:24:5d:40:06:1f:69:e5:eb:4e:f0:90:7f:f4:68:
74:73:3f:f9:9b:00:0e:09:49:4c:f7:d9:62:bf:3b:
25:17:54:af:1e:5a:a7:8d:4b:17:24:2d:b0:fc:5b:
47:bc:25:63:b5:57:bc:65:0f:3f:fb:d5:9e:77:89:
dd:20:05:3d:0a:59:02:13:39:7e:80:ca:ce:47:49:
3f:b8:6b:4f:49:0b:72:b0:b2:0c:af:47:fe:7e:35:
36:68:da:b9:85:c7:72:e8:1f:f8:e6:54:4f:42:db:
3c:23:7a:3e:a2:91:2c:ce:8b:db:19:a5:91:49:7b:
75:c8:5e:6f:a8:61:4f:d1:41:1c:63:ed:81:39:94:
3c:ee:1a:bc:e4:f1:ed:3a:f5:97:a5:80:45:f9:39:
e7:c6:8f:f5:47:a8:f6:2a:54:fe:7f:46:0a:1f:cf:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:E0:6A:48:84:9E:83:7D:A6:71:FD:F6:C2:FD:0A:25:88:67:C3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hdLgakiEnoN9pnH99sL9CiWIZ8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.80.0/24
Signature Algorithm: sha256WithRSAEncryption
22:01:a7:1d:8b:9a:ed:47:e0:b9:93:e3:c1:fb:f9:55:9f:f4:
ca:42:88:b5:88:e7:47:6a:ff:ac:69:17:eb:14:63:b4:75:e3:
5a:19:aa:a2:a9:12:b2:c6:ac:e2:c1:73:7d:87:d9:d1:5c:0a:
f2:b9:51:fd:4a:40:20:6a:66:ca:eb:5c:57:49:ff:19:5e:7b:
b8:56:b1:a8:de:69:47:1a:86:d0:fb:85:a6:ab:5f:2e:11:e6:
72:5a:b4:e6:6f:92:04:1c:5c:24:24:d3:29:9f:7f:dc:ce:ca:
5c:9f:bb:b9:2e:11:17:98:d8:97:90:51:f3:0b:05:b2:b8:96:
3e:70:a3:56:33:4f:89:e1:23:ac:0f:41:6d:80:6d:d0:47:8f:
24:9d:7e:13:c3:ae:7b:c5:49:e4:97:18:2b:54:95:4b:48:63:
f3:26:1d:9a:10:60:bb:85:bd:09:52:8a:c3:15:ee:3c:2f:d0:
47:7f:b2:ea:0a:e9:03:fe:8e:15:52:5e:33:d1:63:24:46:dd:
cb:30:42:5f:5d:96:31:4d:d9:43:5b:b3:43:f9:0e:0c:cf:65:
7b:72:5c:34:42:f6:03:95:f4:73:b5:66:46:a7:99:6b:a6:2d:
94:fb:9c:90:64:97:11:1d:c0:4d:e4:44:00:68:51:d8:fc:6e:
62:dc:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:59 2025 by rpki-client