Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uQgzDX4vXqB9XpaO3OEVTL6tBHc.roa
File: uQgzDX4vXqB9XpaO3OEVTL6tBHc.roa (raw, json)
Hash identifier: 0L2d4y1QPsPoPULDpVwbrePptVaRkKiWUAuXvyBB/8Q=
Subject key identifier: B9:08:33:0D:7E:2F:5E:A0:7D:5E:96:8E:DC:E1:15:4C:BE:AD:04:77
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0193D8DF23B15E7F3F161F361C52E8D08401
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uQgzDX4vXqB9XpaO3OEVTL6tBHc.roa
Signing time: Wed 18 Dec 2024 08:25:22 +0000
ROA not before: Wed 18 Dec 2024 08:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47708
IP address blocks: 192.121.194.0/24 maxlen: 24
192.165.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:df:23:b1:5e:7f:3f:16:1f:36:1c:52:e8:d0:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Dec 18 08:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b908330d7e2f5ea07d5e968edce1154cbead0477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:e4:bb:dc:97:71:3f:be:3c:dc:93:48:06:
7a:29:70:a2:81:7c:5d:af:6f:e5:56:c2:93:55:83:
16:9f:eb:f7:2e:c7:11:9c:af:a9:bf:e6:a9:d5:48:
48:3d:27:cd:63:85:dc:87:49:bb:d9:c9:a4:6c:e4:
c8:b4:37:d4:42:88:b1:b4:c4:73:e1:56:15:47:d0:
fe:1b:14:86:a6:6a:b3:a2:bf:ad:78:67:be:b8:38:
ef:99:2b:40:61:85:c7:44:ca:29:3a:ae:45:6f:db:
f4:2e:38:50:f0:1b:62:f2:07:81:00:87:99:a9:8b:
c3:32:38:fc:5e:7c:48:47:e0:16:a2:da:45:86:e7:
eb:5c:44:ce:0f:ac:1d:73:08:24:81:7b:05:77:18:
db:5f:e2:50:be:d3:3e:ef:aa:69:cd:ee:b7:f6:8b:
f2:98:4c:f3:99:81:04:54:0b:76:55:44:76:d1:c1:
2d:db:2f:31:01:48:1d:a4:35:97:74:90:cf:a0:20:
16:a0:8f:f6:c6:be:ee:18:72:4f:27:d9:e1:2c:1c:
76:e5:d3:62:3e:1d:3a:fc:6f:45:cb:8b:1c:c5:ae:
bd:5d:9e:a9:13:e6:f0:0a:41:1a:e6:0b:7e:e1:6f:
15:89:3a:dc:22:26:59:d1:18:d7:9e:bf:76:6a:35:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:08:33:0D:7E:2F:5E:A0:7D:5E:96:8E:DC:E1:15:4C:BE:AD:04:77
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uQgzDX4vXqB9XpaO3OEVTL6tBHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.194.0/24
192.165.8.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c8:e0:fe:68:47:2e:b7:1b:b9:f7:3a:88:d1:2d:39:75:68:
22:75:bd:d4:73:b4:d0:9f:bf:1e:0d:ac:53:59:e2:f0:74:85:
02:cf:45:aa:d0:3a:1f:9c:1d:ab:d8:22:ed:36:c3:d0:ba:2b:
7d:2f:7f:39:83:19:22:2e:93:a5:c5:2e:5e:75:dc:5b:51:55:
ab:37:b0:00:2d:19:b2:84:43:af:75:79:7e:95:3d:eb:b3:95:
a5:bf:fc:c8:8f:0f:27:7e:d9:98:55:64:03:c2:ff:42:cc:c9:
e4:70:eb:a0:8d:d2:c8:d7:1e:e7:a4:60:33:2e:09:76:c0:02:
1b:b7:33:64:c2:03:90:1d:9a:ee:e8:19:29:1a:8d:aa:ae:5c:
9e:63:b9:61:98:af:f3:73:ca:6c:e9:9e:3b:be:67:48:f3:9d:
c2:03:f2:83:aa:70:59:4e:7b:cd:b6:76:9e:c7:8f:0c:d1:68:
55:ad:e3:93:f8:a5:54:ef:95:5a:bb:c2:66:a9:3a:f5:2c:1a:
97:57:9e:02:dd:25:08:59:c8:0e:2c:14:90:f9:9d:0d:1a:cd:
a5:95:4a:e7:11:84:ca:c7:f4:c6:9c:be:df:04:85:21:a8:e7:
65:b5:c4:fa:b4:27:b4:bf:64:85:c6:f2:03:c2:55:ae:03:3f:
19:b0:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:15 2025 by rpki-client