Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sn9V1E-QgYwvne13Rb_1gmpx-gQ.roa
File: sn9V1E-QgYwvne13Rb_1gmpx-gQ.roa (raw, json)
Hash identifier: NjxPZdsu4yNSnK+AgXWwlZ2X3Jmp4CMcBE95E6oxu5c=
Subject key identifier: B2:7F:55:D4:4F:90:81:8C:2F:9D:ED:77:45:BF:F5:82:6A:71:FA:04
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD1D5838C6622D3057CD1D2A88BA0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sn9V1E-QgYwvne13Rb_1gmpx-gQ.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8473
IP address blocks: 194.71.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d1:d5:83:8c:66:22:d3:05:7c:d1:d2:a8:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b27f55d44f90818c2f9ded7745bff5826a71fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:ec:fc:74:8e:70:b7:0a:6f:12:f8:74:26:
7b:3e:9c:66:12:69:cf:47:47:67:ea:87:98:22:0f:
a6:c0:c2:4a:a5:9c:93:ee:bf:94:3f:4f:46:df:4e:
f6:51:91:f4:fb:75:d6:0e:02:f4:46:52:ff:ed:d5:
2e:f9:5c:81:48:81:1a:07:87:b7:32:00:3d:7f:5b:
40:c0:2e:a6:a4:3a:19:ef:a5:12:01:d4:48:b0:60:
73:16:fa:77:d4:f2:a0:dc:c2:f1:cf:80:fa:72:e0:
cc:ef:d1:05:09:6b:72:11:ed:fb:16:5c:f8:5d:f5:
19:96:24:c7:e6:5d:92:fe:4b:d7:99:dd:7a:14:1d:
7c:98:3b:7a:96:76:99:e5:5b:00:4d:a6:cd:a3:87:
06:a4:67:99:52:ca:e0:52:63:04:b3:e2:f6:e1:a6:
12:0a:d1:b1:30:48:2b:c6:b4:3d:59:18:77:8b:fd:
21:c0:14:29:5f:a0:b2:3a:18:53:77:c2:ea:b4:c8:
ec:9f:69:f0:87:97:27:6a:df:b8:7e:f5:f0:a4:e6:
af:ca:0c:b6:58:58:46:01:9d:5f:e9:83:aa:20:81:
ad:46:51:e6:ad:d8:ea:36:1e:09:ae:80:1e:72:ae:
ca:07:77:28:2a:3e:7e:a3:22:f2:16:1c:c8:72:30:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:55:D4:4F:90:81:8C:2F:9D:ED:77:45:BF:F5:82:6A:71:FA:04
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sn9V1E-QgYwvne13Rb_1gmpx-gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.215.0/24
Signature Algorithm: sha256WithRSAEncryption
70:28:27:49:9e:e4:7c:93:0e:f3:cb:da:99:c1:0b:1b:1d:c6:
92:0c:d8:43:95:ad:0a:d0:8d:49:a6:7d:62:fc:2a:d3:10:6d:
08:ff:04:ca:c2:cb:4d:52:ff:78:aa:48:88:32:98:ee:b6:26:
28:a3:ec:09:f3:7c:53:f7:f1:f5:e8:0e:29:2d:8a:bf:56:0d:
ae:88:9f:1e:89:02:76:d7:23:f8:67:21:5b:5c:cc:24:6e:19:
b3:89:0a:de:24:45:94:9e:04:7d:df:cb:05:c0:71:96:24:a5:
c4:fe:15:69:50:50:23:f3:a4:47:f1:09:f9:e9:53:d6:36:0d:
a5:e1:4f:78:17:e8:fa:6b:3d:cc:d2:9f:26:a1:3f:a4:98:71:
24:52:54:82:d3:aa:d5:b4:66:6e:fe:d1:58:c5:e0:3b:5d:2b:
92:c3:45:d4:7c:54:20:dd:68:ff:1e:eb:d4:95:dd:c8:47:8f:
e2:b0:69:45:fa:ce:e1:90:df:78:ca:a0:07:94:ef:c9:56:73:
1f:47:0c:c5:d9:14:5f:b3:3c:0c:dc:5a:56:4d:c5:04:82:fa:
48:f1:99:b8:35:cb:1f:95:1e:65:12:37:35:43:24:d9:1f:c3:
b0:84:45:0b:f5:29:b0:0e:e2:79:c1:1f:06:9b:c2:12:15:2d:
06:8c:9e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:39 2025 by rpki-client