Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uRomC7kd95VKeDgbHeqvOoCjcEY.roa
File: uRomC7kd95VKeDgbHeqvOoCjcEY.roa (raw, json)
Hash identifier: 2dMNIqxY3k4tsA1F00SaL26FMKRiY/l0uWDbqzYvO7s=
Subject key identifier: B9:1A:26:0B:B9:1D:F7:95:4A:78:38:1B:1D:EA:AF:3A:80:A3:70:46
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274840FEA2C1ABD59408BF6FA56682D0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uRomC7kd95VKeDgbHeqvOoCjcEY.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8995
IP address blocks: 192.165.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:40:fe:a2:c1:ab:d5:94:08:bf:6f:a5:66:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91a260bb91df7954a78381b1deaaf3a80a37046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:1f:df:c3:83:44:95:dc:59:26:da:29:ea:
9c:e7:08:d5:32:64:98:36:bf:2c:31:42:6b:b2:1c:
61:0f:15:82:1f:ce:d3:c0:a8:74:fb:d9:b5:fc:40:
49:83:0a:ed:63:fb:65:01:5e:b1:f2:dc:81:51:73:
64:b5:54:6b:f8:4e:46:f6:15:2e:3d:b0:6a:eb:45:
8c:ae:41:9a:6c:fe:d6:7b:e2:93:7d:de:1d:62:32:
e8:ba:c7:19:c4:db:a9:d9:c1:62:0f:10:90:dd:7f:
9e:f7:17:d4:5a:38:dc:a5:b1:1f:9d:d1:25:90:5f:
e1:5f:4a:97:35:c1:e0:40:be:27:7a:06:e9:d9:f9:
87:38:dd:ce:e5:c7:19:29:96:ca:a8:1b:ed:42:2c:
2d:f5:5b:51:ac:83:fd:7c:14:57:0e:e6:32:9d:a1:
c8:fb:b4:73:ba:ec:6f:4a:e5:86:0a:b7:99:d7:33:
82:47:e8:41:2b:44:32:30:de:b2:73:b8:21:e1:0f:
7e:29:37:f0:a4:d5:db:02:c7:c0:bc:8d:33:e5:3c:
3d:32:8d:2c:ec:77:2f:57:7b:67:e3:2a:2f:e9:33:
62:25:2a:fa:03:3a:84:37:5f:b9:e2:5c:2a:2b:60:
0d:b1:65:63:0f:c2:cc:bb:7a:8a:fd:c7:06:89:d5:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1A:26:0B:B9:1D:F7:95:4A:78:38:1B:1D:EA:AF:3A:80:A3:70:46
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uRomC7kd95VKeDgbHeqvOoCjcEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.82.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e4:c2:50:49:51:d8:6c:11:e2:46:56:68:c1:d7:ab:ec:fa:
d8:eb:f4:9e:49:9f:dc:e1:77:c6:de:74:8f:6b:7d:87:fa:01:
24:30:55:fa:fc:0f:bb:5f:8e:12:94:5a:d9:50:11:14:f9:db:
52:b3:14:7a:7d:68:46:b3:8b:c8:f4:57:4c:80:82:df:e6:01:
ac:82:c5:70:90:d6:00:f0:be:70:fd:e4:1c:e6:ff:4a:12:a8:
5c:bf:19:91:a5:d7:7b:e1:3e:3f:af:18:8a:81:e8:04:c4:88:
1d:60:84:df:93:7c:28:a3:2b:b7:e4:3d:58:60:ee:5a:f6:08:
ea:d4:0d:2d:c5:ae:cc:36:84:40:79:9d:11:d4:bf:db:23:a9:
7f:fb:00:a8:54:7e:c9:09:79:ea:49:11:2d:e3:ac:26:ce:38:
93:c9:ab:9f:b2:7e:63:36:26:58:26:de:82:d2:4e:3f:48:21:
32:92:de:d5:da:69:4d:ef:db:87:d9:82:ed:ca:fe:25:16:37:
75:e0:bd:a8:53:d6:67:55:8f:12:3f:52:d4:be:84:5e:88:bc:
51:d1:19:39:4d:68:c1:9b:c6:52:6d:b5:4d:d5:bd:29:ba:ca:
c8:7f:c8:21:38:05:29:d1:3e:a8:08:90:22:d5:db:e3:33:c4:
13:aa:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:46 2025 by rpki-client