Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pDRckOZe9BkL3EizLETPcrIBsrg.roa
File: pDRckOZe9BkL3EizLETPcrIBsrg.roa (raw, json)
Hash identifier: 8825NJZdbAxwEWKv43n6y/giKoSgOvSEL4FRoK+tLQI=
Subject key identifier: A4:34:5C:90:E6:5E:F4:19:0B:DC:48:B3:2C:44:CF:72:B2:01:B2:B8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018D9CD140BEE161F821C93DDF51D85136F5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pDRckOZe9BkL3EizLETPcrIBsrg.roa
Signing time: Mon 12 Feb 2024 10:16:15 +0000
ROA not before: Mon 12 Feb 2024 10:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8434
IP address blocks: 194.71.27.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:d1:40:be:e1:61:f8:21:c9:3d:df:51:d8:51:36:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 12 10:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4345c90e65ef4190bdc48b32c44cf72b201b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:40:6d:a6:4b:5e:22:ad:79:f6:c3:d3:86:
c5:fe:0f:28:32:c5:31:db:1a:87:e8:5d:e2:d4:f6:
67:20:39:6d:cc:6e:08:99:3b:fe:3a:b6:51:15:76:
c7:8b:60:2d:aa:3f:8d:04:fb:2b:9f:48:f9:c7:5c:
53:46:50:b2:a9:bc:59:c0:19:7d:8f:e3:f8:3d:9c:
ce:61:27:3a:eb:c3:b4:71:b0:e4:5b:78:21:b3:78:
18:ac:4b:a9:79:77:d9:d5:0f:bb:4a:97:bf:9b:a0:
96:4d:e2:43:c5:dc:07:a4:23:57:28:2b:40:cb:5f:
35:d4:63:8b:d0:96:c2:5d:b1:4f:6f:ac:ea:fb:88:
53:7b:bf:e1:16:a9:a4:3b:ee:cd:41:ab:6e:3c:bb:
72:02:d1:01:a0:66:d2:46:b8:20:34:ae:82:ee:bd:
74:83:e5:7f:fc:a1:f7:84:05:bd:5a:f3:75:61:88:
cc:fc:59:25:39:17:41:2e:a7:1e:f0:31:a8:a1:eb:
88:28:d1:0d:56:0d:94:83:d5:84:e6:1f:54:ea:14:
6a:6a:31:2c:2e:37:5e:3c:f8:80:e4:ae:14:0c:da:
cf:05:90:85:b3:d5:17:7b:45:42:dc:1e:f8:a8:f4:
f3:a9:ca:14:4e:f0:fd:96:bc:f3:52:b7:76:3c:ab:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:5C:90:E6:5E:F4:19:0B:DC:48:B3:2C:44:CF:72:B2:01:B2:B8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/pDRckOZe9BkL3EizLETPcrIBsrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.27.0/24
194.71.140.0/23
194.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7b:8c:37:d0:aa:d1:ec:83:8c:37:da:e0:fe:71:2f:67:fc:
a2:3a:7b:4c:ba:bd:54:40:ee:a1:57:56:26:63:5f:ed:30:7f:
42:0b:84:12:4d:ff:4c:bd:14:1a:f3:3c:79:62:32:e2:86:6b:
35:6b:2a:88:40:13:79:e2:a2:ad:24:2c:ef:d2:c6:df:80:b6:
b2:14:70:76:51:b4:dc:32:96:b3:ae:9b:87:52:67:77:5f:e1:
7f:d7:ba:38:c9:b1:c4:ea:95:15:f3:e9:5c:da:7d:48:f6:5e:
b3:47:70:c4:26:61:65:d2:fc:cf:e1:01:2e:4d:2c:85:17:25:
19:9f:a4:3c:18:76:8a:9d:58:67:43:ac:ca:84:6e:a9:20:21:
85:78:78:d3:2b:a2:7d:1f:64:26:79:8b:2f:62:ae:84:8a:d6:
5b:8a:3e:49:c4:f7:78:ee:52:69:d8:6c:36:0a:ce:90:b5:7c:
23:df:b1:b1:14:ac:33:2f:37:e3:77:15:bb:fd:60:25:90:66:
c5:68:92:58:41:85:d9:47:6f:85:ab:61:30:d2:8d:27:e3:45:
9f:63:76:a9:d7:27:71:d3:f7:02:5e:33:b3:ad:14:79:91:2e:
03:7f:8f:dd:83:b1:36:b5:89:6a:a9:8d:f2:84:f7:16:6e:2a:
83:0d:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:42 2025 by rpki-client