Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jx1TSegQs95DLjJXMnRGBqLoTgE.roa
File: jx1TSegQs95DLjJXMnRGBqLoTgE.roa (raw, json)
Hash identifier: ilK9l/zASR49ffKpyy7Tdy+bmLg2CLhsy5yDZ5JcNEA=
Subject key identifier: 8F:1D:53:49:E8:10:B3:DE:43:2E:32:57:32:74:46:06:A2:E8:4E:01
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 42527B81
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jx1TSegQs95DLjJXMnRGBqLoTgE.roa
Signing time: Sat 01 Jan 2022 14:02:55 +0000
ROA not before: Sat 01 Jan 2022 14:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2865
IP address blocks: 194.132.150.0/24 maxlen: 24
192.36.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112701825 (0x42527b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f1d5349e810b3de432e325732744606a2e84e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:45:6c:fd:0c:87:5a:f1:07:ce:db:48:a2:
8c:68:f9:38:d4:92:7e:d1:1e:de:58:a3:5c:77:7d:
a3:1d:7f:be:3a:0d:54:ef:33:02:17:8b:cd:fa:7f:
da:cd:16:80:ba:d4:b9:b3:7e:d5:b9:8d:8d:59:e1:
20:db:eb:5e:60:d2:86:83:45:15:9a:40:64:fd:aa:
3c:eb:86:98:90:b8:fc:45:23:9e:b6:2d:fb:9c:a3:
fb:54:7e:29:98:b0:b1:23:4c:09:3e:8a:bd:65:f6:
cf:47:09:ad:f7:08:9b:21:3c:c3:70:37:ec:33:8a:
e6:9e:34:3c:62:90:5f:f5:3a:f5:d7:8f:6b:4a:4e:
a6:78:fa:1a:1e:f7:6f:18:e8:88:0f:e8:00:b2:84:
6c:60:9c:7c:92:bb:88:db:38:4d:51:25:65:d4:2f:
0e:7b:43:92:df:51:ec:44:6c:fb:e8:23:aa:0b:c7:
3b:8f:e0:a6:b4:ef:c7:d6:5e:a5:81:a6:e2:c9:a3:
57:50:1f:75:a2:18:8e:2a:c7:3a:48:54:f6:eb:f6:
4c:6f:ee:75:89:18:3a:53:62:38:ce:9e:cc:19:5e:
6a:b0:ef:9a:84:95:cb:28:a4:db:57:cd:57:5f:7f:
9c:2a:f8:95:db:e2:73:43:84:6e:8b:e1:b3:09:01:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:53:49:E8:10:B3:DE:43:2E:32:57:32:74:46:06:A2:E8:4E:01
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jx1TSegQs95DLjJXMnRGBqLoTgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.49.0/24
194.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a1:61:bc:58:c5:0c:d5:29:5c:4b:8d:46:ff:1c:e4:6f:49:
3e:a7:09:07:52:72:a5:bb:fc:b7:49:31:b9:a8:af:db:b2:64:
9e:de:9d:ba:9a:2e:67:13:df:f2:4a:1a:68:81:88:4d:bd:69:
4a:38:ed:b3:25:76:20:8d:79:ff:9a:3e:ec:1b:4e:33:e0:ef:
0b:2a:d6:23:af:d8:72:29:c8:6c:a7:5c:5e:69:14:fd:2b:d7:
80:a5:3b:c9:9c:4a:12:d7:fe:df:78:0d:fe:50:93:bb:79:f6:
b1:57:bd:5d:a5:83:b8:69:f0:1d:3b:d9:39:68:df:39:31:03:
07:9b:01:a1:da:2a:71:1c:09:3d:80:b0:eb:a1:1d:07:6f:ab:
e2:33:86:30:d7:0e:74:a1:4e:c4:65:f2:ec:6a:4c:b3:7c:e4:
78:45:cc:da:fa:4a:a7:76:ae:39:a5:e7:4a:18:77:98:ed:f5:
b4:1d:8f:5c:8c:48:d3:f6:08:93:1c:95:f6:c2:11:c5:a9:a9:
81:bc:b4:f5:39:cd:69:7d:b7:00:73:46:d2:c5:bd:49:db:88:
74:e7:65:6d:3f:ad:c2:d5:cc:c3:5e:0d:05:87:8b:21:59:57:
6a:05:59:6b:20:34:0d:1b:2f:b9:44:e4:95:a1:6c:34:8e:dd:
9d:d7:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:15 2025 by rpki-client