Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uawiZsGbWlxQKLKqpYjsqER2oHA.roa
File: uawiZsGbWlxQKLKqpYjsqER2oHA.roa (raw, json)
Hash identifier: cTajcb8mJonkipJctyul7N218IMk3IdRxYaaYDNpvRM=
Subject key identifier: B9:AC:22:66:C1:9B:5A:5C:50:28:B2:AA:A5:88:EC:A8:44:76:A0:70
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0E55C4BEF75ADA9FB42F2CFBB73C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uawiZsGbWlxQKLKqpYjsqER2oHA.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208639
IP address blocks: 193.180.56.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0e:55:c4:be:f7:5a:da:9f:b4:2f:2c:fb:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9ac2266c19b5a5c5028b2aaa588eca84476a070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:09:f4:87:a4:55:45:8b:89:b5:58:41:93:
b5:fd:e4:3b:64:9c:3d:d0:73:3b:7d:13:a6:dd:1a:
ae:87:d2:09:6a:61:cc:2b:46:cc:84:4a:a9:8f:ee:
d4:00:67:82:45:49:b8:bc:2b:22:3f:86:f6:46:90:
99:d8:64:d1:ca:59:e3:32:e1:e3:c1:44:88:56:13:
74:2b:35:17:79:eb:07:34:f0:5f:46:bd:4e:c0:2c:
02:b9:98:58:4c:80:dd:b9:c8:91:7e:4e:28:46:88:
49:3c:d4:76:2d:08:dd:06:09:a7:51:8c:e8:2d:2f:
d9:5a:8b:4a:b0:92:2b:16:e8:c8:ca:89:cd:18:20:
fd:c4:18:e0:84:09:5e:cd:a0:14:c1:c3:9b:51:7c:
58:29:a0:76:2c:a0:7c:7d:97:39:ef:f9:c9:5e:b6:
3c:de:29:8d:9f:b9:ac:56:48:73:5e:4f:01:8f:9c:
03:79:35:1e:e4:21:01:35:4b:b5:0b:9d:55:46:b6:
27:14:45:56:c0:f6:77:b5:66:bd:89:db:fb:52:64:
fd:f9:13:3c:18:b3:68:09:02:89:f8:1f:5b:22:bd:
33:0e:8f:5c:36:48:54:de:52:ec:26:6d:bc:11:70:
47:91:09:d1:71:78:f2:af:1c:6e:c8:6a:b6:93:4c:
41:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AC:22:66:C1:9B:5A:5C:50:28:B2:AA:A5:88:EC:A8:44:76:A0:70
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uawiZsGbWlxQKLKqpYjsqER2oHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.56.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:8a:04:25:38:27:a9:b9:32:d1:2d:87:49:83:8a:c1:93:6a:
b3:e0:e9:96:29:19:d4:d9:7b:7d:7f:46:26:29:6b:f2:67:0c:
6f:fc:76:4c:22:01:22:53:f3:02:a6:24:b0:4d:87:df:d6:ca:
2f:82:9c:e4:dc:12:91:19:f6:3d:6a:e2:9b:5e:4b:1c:3d:71:
43:cf:13:9b:c1:4a:87:87:22:62:a9:40:87:40:3f:a6:53:b9:
11:c5:82:14:c4:3a:50:04:43:72:33:80:71:1e:26:33:c6:d9:
eb:5d:db:0a:27:00:ec:37:55:2a:82:de:ba:c7:56:af:92:38:
71:47:3f:46:93:f6:f5:95:45:8d:be:7b:4b:8f:b2:86:d3:93:
45:ae:bc:d4:11:c9:2d:30:12:2e:d6:8d:0c:8c:55:b0:58:5c:
b3:ec:75:c4:78:7f:86:b5:ba:3a:84:98:c7:58:13:c0:50:1a:
b8:97:84:fa:28:1c:f9:c4:95:20:0f:66:3c:8d:00:bd:ad:14:
24:e3:54:63:77:43:0f:cd:95:b9:9d:48:03:e8:d4:01:0d:91:
46:39:bb:86:de:8a:97:4d:1a:88:89:dd:2e:47:4d:0c:e3:0a:
4a:c2:c2:1b:91:3d:d4:c0:03:4e:fc:44:00:3f:17:13:f4:33:
80:62:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:59 2025 by rpki-client