Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ldMTDKzQzmqe5vvV_6MvPfgiMIM.roa
File: ldMTDKzQzmqe5vvV_6MvPfgiMIM.roa (raw, json)
Hash identifier: +jfciQ1hJJziRds8G40dn4BrtpDXfpe0HhePztwdgWA=
Subject key identifier: 95:D3:13:0C:AC:D0:CE:6A:9E:E6:FB:D5:FF:A3:2F:3D:F8:22:30:83
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 427EEA29
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ldMTDKzQzmqe5vvV_6MvPfgiMIM.roa
Signing time: Sat 01 Jan 2022 14:03:22 +0000
ROA not before: Sat 01 Jan 2022 14:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197942
IP address blocks: 193.234.81.0/24 maxlen: 24
193.180.160.0/23 maxlen: 23
192.36.180.0/24 maxlen: 24
194.71.64.0/22 maxlen: 22
194.71.68.0/22 maxlen: 22
194.14.218.0/24 maxlen: 24
194.71.72.0/21 maxlen: 21
194.71.81.0/24 maxlen: 24
194.71.80.0/24 maxlen: 24
194.71.82.0/24 maxlen: 24
193.183.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115613737 (0x427eea29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95d3130cacd0ce6a9ee6fbd5ffa32f3df8223083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:fa:76:c4:00:67:55:6c:7f:3b:b8:13:ff:
8d:d6:95:45:ed:31:85:38:88:61:d2:fb:1a:64:51:
3a:47:8d:34:cd:56:72:32:07:8f:e5:22:9f:4e:2e:
d4:a3:2d:2e:5c:8b:cc:bf:82:f4:d9:07:ca:e9:e0:
c3:ba:17:d5:3f:4b:eb:7d:c0:5f:a3:93:ab:73:30:
72:fc:26:26:e2:a5:cf:35:3a:5b:5b:f9:e6:a8:98:
9a:05:d3:e3:2a:d2:6c:80:63:af:06:0b:17:49:1a:
63:8d:c3:f3:11:27:ae:aa:6c:b0:4e:d9:7c:da:e7:
ec:ac:67:f7:bb:f3:db:29:ba:5c:2e:64:be:17:a1:
05:80:37:73:a7:23:bd:1a:36:f4:20:6a:1e:f1:15:
3b:d9:9e:5f:64:a5:3b:fc:fb:07:44:85:c4:58:a0:
4c:5f:d4:61:97:cf:94:52:81:e9:cd:79:bc:6b:a4:
ab:22:c5:58:58:97:a8:95:39:95:79:b2:32:26:bd:
3e:b2:8a:3a:06:f2:50:be:78:da:9c:54:b1:5a:fb:
67:06:25:81:ad:39:14:64:73:0f:c2:c2:f5:79:6d:
ed:a9:c0:69:2c:f9:fc:68:84:a9:82:4b:a7:ce:1e:
82:43:4b:39:83:c6:1e:e7:a9:d3:40:ce:6a:81:88:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:13:0C:AC:D0:CE:6A:9E:E6:FB:D5:FF:A3:2F:3D:F8:22:30:83
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ldMTDKzQzmqe5vvV_6MvPfgiMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.180.0/24
193.180.160.0/23
193.183.188.0/24
193.234.81.0/24
194.14.218.0/24
194.71.64.0-194.71.82.255
Signature Algorithm: sha256WithRSAEncryption
30:4f:ed:06:fe:c5:70:93:9d:d7:6b:4a:21:b8:bf:21:28:57:
95:56:93:e5:78:89:22:40:3e:36:ae:60:38:4c:ff:c7:60:9d:
e7:24:e2:e3:33:0d:28:74:98:ed:42:2b:07:45:8a:ab:48:89:
6f:9a:38:6e:37:21:ae:9b:43:7f:da:b7:60:8c:a8:36:0e:fe:
97:a9:f5:dc:f3:1d:17:23:70:67:5e:5a:bd:f8:1a:7c:7f:89:
2a:90:78:88:92:32:d8:6e:ba:ed:1d:ee:38:0f:a7:08:13:e6:
de:64:ed:10:45:86:0f:f9:2b:2a:7f:8b:7a:8a:2b:fe:9b:e6:
2a:07:f0:0a:32:f4:bc:8b:4c:fe:e8:3a:fb:46:04:67:14:4c:
01:0e:3f:3e:5b:d3:07:bc:1c:76:3b:21:b7:01:cb:0e:a2:1f:
a1:37:e7:8e:be:fa:f2:95:78:14:37:b4:c2:53:85:0e:19:49:
aa:ef:bd:00:95:79:2a:08:91:95:b9:9c:38:64:bb:ac:5d:81:
e0:81:1e:f9:ac:cf:8c:cc:8e:6b:b8:5b:88:0e:8a:ae:32:6c:
2b:ab:d9:5b:d8:13:ad:94:ae:a6:3a:cb:81:8b:51:0e:85:e8:
db:63:01:94:ea:80:e4:97:71:45:7d:49:eb:1b:6b:4d:e0:c6:
e1:9d:fc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:06 2025 by rpki-client