Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uXHPPV72p1ELOFTmZDG7_YPtJg8.roa
File: uXHPPV72p1ELOFTmZDG7_YPtJg8.roa (raw, json)
Hash identifier: dgcAeZpzleIbzpS0zz+If7ur6/txDsnnXrb/V8eZyK4=
Subject key identifier: B9:71:CF:3D:5E:F6:A7:51:0B:38:54:E6:64:31:BB:FD:83:ED:26:0F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD420F36ABE61FD8D5DD6EE4B57B3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uXHPPV72p1ELOFTmZDG7_YPtJg8.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8769
IP address blocks: 193.182.245.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d4:20:f3:6a:be:61:fd:8d:5d:d6:ee:4b:57:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b971cf3d5ef6a7510b3854e66431bbfd83ed260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:9c:e0:d9:25:51:19:e4:ce:5d:f8:5e:61:
29:23:cc:cf:85:43:8f:9b:4c:1e:e1:30:df:2e:c4:
61:a5:cc:81:0f:3a:c6:85:f2:de:d6:d7:b8:39:99:
c1:62:e8:6b:36:46:f7:f9:ee:df:e0:2e:f0:0b:ef:
3a:dd:52:f1:d6:ae:0a:d7:fe:a1:4b:5f:a2:16:67:
f5:ea:20:0b:9c:0c:8d:5d:a0:0e:b2:f2:0d:c6:6a:
3e:09:0f:c7:7d:0a:62:f6:f3:54:34:63:ec:54:5f:
ea:93:1d:89:7b:cc:59:cd:be:20:c0:e2:62:d8:0e:
a6:1f:0b:80:70:87:b1:81:97:10:b5:28:ca:84:e9:
b4:ef:8b:07:8b:10:0f:1c:a5:45:d1:b9:ba:25:fd:
62:7c:7f:d6:5f:d6:c3:3c:15:98:75:4c:9c:90:a6:
56:98:21:c7:aa:8d:f8:1b:e5:df:1f:14:66:b7:8a:
1a:56:fb:b8:e9:e4:0e:10:b2:e7:84:6d:a6:75:da:
d5:23:d2:91:2a:f4:d8:49:43:ce:af:a1:19:6d:3f:
53:6f:36:dc:47:cf:95:be:10:6a:af:56:72:3e:4d:
fc:1a:ef:94:92:92:54:1d:29:6e:2d:de:de:08:d1:
8f:5f:3c:ac:d2:94:77:a7:aa:6a:be:1e:9b:dd:d2:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:CF:3D:5E:F6:A7:51:0B:38:54:E6:64:31:BB:FD:83:ED:26:0F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uXHPPV72p1ELOFTmZDG7_YPtJg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.245.0/24
193.234.18.0/24
193.234.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:14:b1:fb:48:dd:f1:c6:7d:de:bd:9f:72:17:01:63:c0:c0:
0a:06:96:c0:3c:9d:0c:09:83:ef:e5:45:8a:9e:cd:1d:75:49:
d7:88:77:31:3a:b3:8e:a3:8d:12:16:b6:3d:2d:7d:9d:7a:91:
b1:ca:72:39:69:1e:44:5d:89:44:a2:61:20:3a:dc:62:d2:b7:
78:58:27:9e:99:62:a7:c2:30:fc:43:76:4b:80:c8:4e:1f:a2:
9d:91:82:9a:6b:e0:e6:f9:72:9b:4a:6c:e9:76:61:31:45:3a:
70:25:79:1e:81:44:3d:b1:ec:06:9f:fb:23:b2:7d:11:1e:ac:
10:10:71:41:c5:27:ce:ba:21:c9:d1:ca:16:f4:0c:57:c7:86:
ee:16:e2:82:82:4e:33:32:7c:b4:1d:ef:20:a0:b3:5d:0c:42:
69:0e:9d:1c:99:b9:79:14:0c:de:c2:0f:5d:dc:26:65:b8:cb:
34:80:28:eb:95:57:8f:67:62:0c:f8:94:64:7f:07:1e:44:78:
02:61:58:bb:cd:b3:f2:62:ac:f6:7a:99:10:5b:10:62:23:66:
6c:37:8a:67:55:7a:48:49:e8:26:1f:dd:b1:99:ff:aa:4b:1d:
8d:35:15:2c:51:56:ee:3d:ea:51:30:ea:d6:8e:0c:7f:fa:eb:
9e:64:34:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:37 2025 by rpki-client