Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qvzJ5NSrAwP-lN3Rw7bBi9YN0_c.roa
File: qvzJ5NSrAwP-lN3Rw7bBi9YN0_c.roa (raw, json)
Hash identifier: USNq/lqRiV/7/NEYKt5rAKbJUUSrpAR5bTQuDuugCfQ=
Subject key identifier: AA:FC:C9:E4:D4:AB:03:03:FE:94:DD:D1:C3:B6:C1:8B:D6:0D:D3:F7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018243FC495A6921E706942D6428EDF79A67
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qvzJ5NSrAwP-lN3Rw7bBi9YN0_c.roa
Signing time: Thu 28 Jul 2022 08:46:23 +0000
ROA not before: Thu 28 Jul 2022 08:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44515
IP address blocks: 193.181.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:fc:49:5a:69:21:e7:06:94:2d:64:28:ed:f7:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 28 08:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aafcc9e4d4ab0303fe94ddd1c3b6c18bd60dd3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:81:8c:be:a5:43:47:f2:aa:64:52:53:17:
ee:5f:f2:a9:99:8e:8b:d7:04:46:91:0a:bb:2e:53:
1e:5a:bf:a7:02:98:97:57:56:41:b9:34:72:4b:f7:
29:e1:02:49:c9:fa:3f:9a:a2:7e:a9:ef:1f:27:5c:
40:e5:82:5f:5e:8d:5a:f7:f4:47:ef:04:9c:83:ba:
48:bf:04:35:2c:dc:15:62:95:49:32:b5:a2:e8:c3:
ad:6b:81:77:84:fb:e2:53:f5:af:d6:c9:f2:8c:d2:
88:0e:5a:fb:9f:83:a6:89:f4:d1:3e:2b:6c:91:b2:
40:d4:57:32:2f:1b:02:fb:b4:e7:21:f4:59:a8:77:
bc:53:7b:b6:41:98:d8:d7:0f:c7:04:eb:5d:c1:2b:
2f:be:91:13:ba:0c:8c:a9:7d:d7:9b:42:50:5f:1a:
86:61:43:81:36:0a:02:36:08:19:88:21:90:42:6d:
81:e7:36:73:e4:bd:26:65:7a:93:05:8f:17:f3:b9:
74:73:03:3c:2c:15:02:bc:ba:c3:4c:80:41:f8:c5:
90:2e:4e:df:f2:07:09:12:28:d3:67:7b:8e:41:c3:
04:5c:9a:7b:4a:43:f7:a3:5c:f9:c6:21:d6:62:ef:
f3:5a:be:11:e5:fe:86:06:61:1b:15:2d:f8:ee:38:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:C9:E4:D4:AB:03:03:FE:94:DD:D1:C3:B6:C1:8B:D6:0D:D3:F7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qvzJ5NSrAwP-lN3Rw7bBi9YN0_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a3:b7:6a:42:0c:72:3e:1b:8d:d1:70:75:40:40:6f:7a:51:
20:81:68:9f:95:2b:83:a9:ac:fd:d2:80:ad:22:e0:be:d3:6f:
5d:b7:b3:9e:73:b7:c6:b2:c1:1f:25:41:07:86:69:a6:ea:43:
c1:95:9c:57:b6:44:fa:e5:00:9d:67:18:de:a3:fb:7c:b8:f0:
07:e5:49:4b:83:5c:a7:1d:50:98:60:2d:b5:3e:d0:e4:ea:f6:
57:36:15:23:35:4c:19:25:b4:84:f3:1a:06:c4:86:44:7d:7f:
bd:f9:d8:e1:e2:7f:47:ca:5a:42:5e:bd:91:3f:f7:75:70:05:
15:c8:ba:bd:d7:f6:fa:80:b4:0e:bd:01:c7:7f:79:2f:95:f3:
cc:8e:93:e9:a3:24:2a:82:b6:5a:22:1a:0a:d8:fb:4d:db:e7:
53:e8:52:2a:57:b0:82:7f:1c:0f:4f:6d:2d:27:14:13:9a:94:
a6:dd:38:f6:70:ad:e1:f9:38:a3:bf:8c:0b:b1:5a:a7:be:69:
53:1a:76:1e:3a:0f:ad:da:41:6d:3a:71:ce:b7:52:74:2b:50:
b8:e2:10:ec:f2:d1:9b:70:bf:b4:43:60:ef:ea:c8:02:08:42:
d6:b2:0c:35:f4:3e:60:75:b0:20:ea:38:5b:9d:af:38:01:3a:
49:e9:20:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:59 2025 by rpki-client