Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k_pLTSyAzINSFt8JoeOpLXMB51Q.roa
File: k_pLTSyAzINSFt8JoeOpLXMB51Q.roa (raw, json)
Hash identifier: LqQW0IcbLjokb+Xv8lKQ1UiAGnHvDdtUIaMTLHvxeck=
Subject key identifier: 93:FA:4B:4D:2C:80:CC:83:52:16:DF:09:A1:E3:A9:2D:73:01:E7:54
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01843E2F31273300F2C165C35A89DBE8BBE9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k_pLTSyAzINSFt8JoeOpLXMB51Q.roa
Signing time: Thu 03 Nov 2022 15:49:50 +0000
ROA not before: Thu 03 Nov 2022 15:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.235.44.0/24 maxlen: 24
193.235.45.0/24 maxlen: 24
193.183.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:2f:31:27:33:00:f2:c1:65:c3:5a:89:db:e8:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 3 15:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93fa4b4d2c80cc835216df09a1e3a92d7301e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:84:61:c0:85:d1:41:26:bd:ef:ec:96:f1:
e2:7e:4a:ec:b1:0c:19:ce:06:15:21:aa:89:b6:cd:
47:c2:d4:c3:55:f0:06:d6:4f:90:46:88:40:38:1c:
c1:14:9c:17:9e:1f:e8:4f:1e:f0:a4:4b:c9:70:a4:
3f:5b:5d:5e:90:42:71:67:1c:55:0e:da:20:d1:39:
be:4e:3b:63:75:d9:05:15:08:72:26:81:1d:dc:de:
c4:89:89:07:66:24:ca:e5:da:70:98:ef:83:eb:9f:
2b:b9:45:06:f4:d0:0c:4a:b3:08:b8:fa:fc:c7:fd:
47:eb:b3:0b:45:bc:2a:27:7b:52:ff:3d:0a:ad:1c:
ad:5b:72:06:45:ed:cb:7e:70:5c:8e:82:ce:ae:e8:
26:cc:8e:55:e7:aa:84:33:1d:95:6b:ca:95:6e:5f:
9d:9c:03:12:e8:8a:e1:d7:01:f0:b5:6c:e1:80:d1:
29:49:62:65:b5:17:53:38:97:42:87:fc:55:96:6e:
c9:0b:37:36:ea:c1:c7:60:75:b7:d3:30:e2:36:8f:
3a:84:43:48:83:0f:1c:9f:56:7e:82:4e:a5:34:72:
d8:98:d4:06:0f:51:df:1b:2b:24:59:35:f3:64:70:
38:d0:a2:1c:10:27:4a:f4:65:8f:03:af:1f:ee:2b:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FA:4B:4D:2C:80:CC:83:52:16:DF:09:A1:E3:A9:2D:73:01:E7:54
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k_pLTSyAzINSFt8JoeOpLXMB51Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.185.0/24
193.235.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:4c:5b:2b:f7:43:10:09:38:00:19:29:3e:96:a8:91:be:7b:
7e:ef:42:5c:45:85:3a:43:8a:9b:eb:7d:d0:cb:d2:0a:1e:4f:
34:60:29:5d:9a:32:e2:43:00:41:c1:cb:a6:9f:09:6f:a7:9c:
51:96:8c:2a:e8:31:81:2f:3d:73:9e:24:27:57:73:ee:c9:9a:
4c:3b:84:b6:d2:1e:87:e7:f3:55:9e:a0:f0:19:06:63:7f:ae:
1b:86:8c:03:8b:2a:1f:4e:53:55:c8:9a:8d:0c:95:63:b8:6b:
ef:25:1b:de:a3:47:4c:0b:40:06:7e:a2:ef:ea:71:bc:f8:cc:
c3:fc:7b:fb:85:f4:37:d4:a9:34:3e:52:f2:32:73:b9:04:3a:
a4:0b:53:b7:18:10:f9:25:06:0c:c7:f1:9c:70:3d:e7:2e:62:
dd:cf:a0:91:cc:23:2a:54:9f:54:c3:ea:9b:dd:cc:ff:b8:45:
48:d7:f4:a1:fb:c5:54:59:3a:11:26:1b:85:74:ed:45:ce:63:
7d:79:69:86:8e:4a:cc:a5:49:fa:fa:13:1a:35:89:38:6f:fa:
37:18:a7:30:23:f0:0e:99:02:a9:66:b8:41:a0:4f:a1:7d:90:
29:93:d8:09:ee:90:1a:5e:48:39:3e:eb:e3:33:b7:81:e4:09:
bc:c9:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:04 2025 by rpki-client