Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgf7R-rc0htwVwItaQ-_I-5LCas.roa
File: tgf7R-rc0htwVwItaQ-_I-5LCas.roa (raw, json)
Hash identifier: +HrAEBLIqVZbcC3JndlHubIWtFAVvbLQnQqpPSlve+E=
Subject key identifier: B6:07:FB:47:EA:DC:D2:1B:70:57:02:2D:69:0F:BF:23:EE:4B:09:AB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0EC310E1FA77A9BE9CF036FACCBD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgf7R-rc0htwVwItaQ-_I-5LCas.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208760
IP address blocks: 192.165.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0e:c3:10:e1:fa:77:a9:be:9c:f0:36:fa:cc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b607fb47eadcd21b7057022d690fbf23ee4b09ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:cd:d3:3a:13:88:f5:14:ef:93:e8:a7:c9:
db:bd:bc:68:e2:20:54:ad:e8:96:df:58:d1:eb:15:
76:34:1f:0f:85:aa:f8:66:44:85:87:35:e8:6f:1a:
57:c3:74:6d:ac:ef:60:41:4d:fe:c4:79:16:0b:2b:
eb:ce:f7:21:0f:ab:f1:0c:41:c2:c4:2a:59:a1:3e:
76:73:f2:79:f6:12:39:fb:5c:82:f7:84:e8:7e:94:
0c:2d:16:c5:74:63:ec:58:d4:63:84:0c:9a:cf:b3:
34:ee:41:aa:9f:16:70:98:b1:49:79:53:06:aa:4d:
62:e9:e8:83:5e:14:ca:93:d2:79:ac:11:30:3c:d5:
37:de:45:ba:b7:7c:80:d1:ad:39:6a:7c:b7:c1:b2:
21:29:01:f0:2f:f8:34:cf:9b:9f:9b:ae:16:69:3e:
e0:8c:0c:66:4f:81:51:a5:4a:31:1b:48:3e:7d:4e:
9a:18:59:90:7a:e2:5a:5e:7c:73:7a:c6:f8:70:f5:
ab:88:0d:5b:7d:d8:bf:1f:a4:29:9e:09:93:a5:8f:
76:4c:40:5d:ef:16:60:02:41:b0:01:fc:11:c4:aa:
9d:c1:1c:6d:dd:2f:a4:c9:aa:e2:21:39:33:e9:1a:
b8:62:df:d2:65:47:36:a2:5e:b2:a2:a7:1b:3a:70:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:FB:47:EA:DC:D2:1B:70:57:02:2D:69:0F:BF:23:EE:4B:09:AB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tgf7R-rc0htwVwItaQ-_I-5LCas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.10.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8a:11:90:ac:8b:24:d6:1a:80:32:da:f2:06:42:02:94:ce:
2f:b7:82:2a:fb:2b:6e:39:ca:b2:1e:04:75:5d:b4:41:e2:0f:
e0:bb:df:a7:c0:f7:30:0c:14:9a:c6:29:97:b8:e0:7b:61:49:
89:20:7b:25:5a:1d:2d:e8:dd:29:09:47:26:2b:65:58:e6:8b:
fc:5c:68:39:b0:ee:c6:55:b4:c1:04:a4:78:20:15:f9:b6:71:
3c:c7:0b:50:82:83:4c:40:4f:8f:2a:ef:9a:67:3f:e0:9b:84:
58:36:ac:68:de:23:69:1a:41:f0:df:e3:76:26:ea:2a:83:00:
97:94:69:9b:1a:a1:c2:52:86:c0:a0:6e:29:ca:68:30:61:dc:
90:75:de:33:82:b4:a3:81:b9:5f:5b:22:ff:f7:55:3a:f8:a5:
3a:a0:a6:b5:31:69:33:a8:29:6e:c9:d8:48:3d:f0:9c:68:30:
66:66:cc:08:47:c7:d5:50:2a:dd:96:ba:03:97:6f:e1:6c:49:
42:7f:bd:23:21:dc:bb:df:8d:4d:c8:55:13:72:7f:f2:a5:15:
4e:1f:fe:b3:71:93:d1:f6:1f:51:8a:a9:c7:de:d9:22:2b:f5:
ce:d5:86:20:2f:12:bf:b8:fd:07:ce:ae:28:b8:88:44:77:e7:
11:70:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:51 2025 by rpki-client