Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOetkKYWizm7z1n5EIxgpgczInw.roa
File: nOetkKYWizm7z1n5EIxgpgczInw.roa (raw, json)
Hash identifier: Yk9YXmN6rIja0d8RahrDiUwXqOP2Zwr/yKcF4zcpqEc=
Subject key identifier: 9C:E7:AD:90:A6:16:8B:39:BB:CF:59:F9:10:8C:60:A6:07:33:22:7C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFEFE6B688250DD5175595BFF95E6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOetkKYWizm7z1n5EIxgpgczInw.roa
Signing time: Sun 01 Jan 2023 10:05:20 +0000
ROA not before: Sun 01 Jan 2023 10:05:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198463
IP address blocks: 194.132.214.0/24 maxlen: 24
194.14.33.0/24 maxlen: 24
194.68.125.0/24 maxlen: 24
193.182.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fe:fe:6b:68:82:50:dd:51:75:59:5b:ff:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce7ad90a6168b39bbcf59f9108c60a60733227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:30:75:61:24:88:82:b4:d1:31:8c:72:17:
e3:99:d7:4f:26:b2:18:12:14:0d:d3:44:68:16:d9:
08:ff:c3:35:0f:76:f1:87:09:87:a7:26:ef:ad:fc:
b8:8d:8b:5e:09:cc:f5:18:83:ef:fe:6f:9b:8b:c4:
8b:86:aa:59:c7:10:5b:7a:a8:24:af:7b:34:53:8e:
89:16:11:12:58:7c:d4:c4:cb:3f:97:e6:93:d4:55:
51:0d:96:cc:70:b4:20:de:bd:2f:cd:16:f0:f6:dc:
85:b1:51:4b:ca:18:f0:78:e2:56:17:5e:07:15:c6:
01:31:26:6b:6c:3f:98:e7:cd:69:3f:9d:73:de:ee:
43:f3:1e:1a:62:f3:92:d1:e5:29:bd:09:94:e5:3c:
51:74:6a:b5:cb:c1:76:67:63:4f:33:76:e7:c3:6a:
5d:f5:df:8e:1c:a8:c8:54:af:3a:e1:80:05:ac:bd:
59:40:22:12:6d:76:1e:1b:7a:b5:c3:b6:0d:49:24:
a7:08:89:53:0a:fe:34:19:e3:e2:91:2d:32:c7:1c:
f3:20:28:c5:77:15:94:07:10:e8:31:a5:7f:4a:84:
23:34:39:ef:de:e5:0a:65:b1:90:90:dd:79:59:79:
88:a5:25:d0:db:5d:be:d0:7d:9a:24:b7:8a:a1:d5:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E7:AD:90:A6:16:8B:39:BB:CF:59:F9:10:8C:60:A6:07:33:22:7C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nOetkKYWizm7z1n5EIxgpgczInw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.180.0/24
194.14.33.0/24
194.68.125.0/24
194.132.214.0/24
Signature Algorithm: sha256WithRSAEncryption
02:96:39:0e:22:91:79:60:e7:f9:ed:e4:79:35:90:30:2c:ef:
c7:fb:e8:fc:c1:7e:e2:c5:f4:1b:cd:2b:6f:da:46:d7:2a:f8:
9a:f4:e2:85:79:d8:c0:c2:83:d8:1c:18:fe:29:77:82:d5:e5:
92:21:99:a9:7f:54:6e:1f:8a:e3:a7:eb:fc:c9:6d:b5:c8:94:
a8:d7:57:19:68:69:d4:ac:08:56:7a:bf:7a:6a:ae:f1:84:59:
79:c9:80:7a:8a:c8:1e:66:47:46:1a:6f:8a:4d:19:c0:3a:d8:
15:66:9f:a4:e3:62:aa:41:89:6a:d9:f5:06:30:e2:d2:f7:de:
ba:0b:bf:39:d2:8c:aa:2b:67:6e:42:ee:b0:ec:ee:68:8a:aa:
0a:ca:b5:2c:6c:c8:63:0f:6b:dd:a8:3c:1e:9b:1e:b5:37:2b:
4b:ae:c6:6f:da:b5:5a:3f:19:cf:4d:38:48:cb:f9:49:4a:a8:
1b:0b:ce:58:0c:5f:6a:a5:59:2a:6e:19:dc:b4:75:27:0c:0e:
18:ca:2e:6e:81:0d:4e:4c:4c:07:7a:69:5e:2a:f2:7c:e7:89:
d2:43:bc:4c:36:fd:3f:37:a3:fb:11:48:9d:57:79:8c:83:00:
32:cf:ba:99:f0:be:1e:08:d2:3e:79:40:29:13:90:cc:fc:47:
18:10:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:18 2025 by rpki-client