Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v-t-8UXqTnVk23zYsIc2ZAz7aGM.roa
File: v-t-8UXqTnVk23zYsIc2ZAz7aGM.roa (raw, json)
Hash identifier: S+Bwa/StcJ8jaxHZIpl5M4dlcC6MfDjLa1azo2CIb8c=
Subject key identifier: BF:EB:7E:F1:45:EA:4E:75:64:DB:7C:D8:B0:87:36:64:0C:FB:68:63
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748652B42770E4C431FAC2A1D4B4236
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v-t-8UXqTnVk23zYsIc2ZAz7aGM.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61102
IP address blocks: 192.71.27.0/24 maxlen: 24
193.182.144.0/24 maxlen: 24
193.182.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:65:2b:42:77:0e:4c:43:1f:ac:2a:1d:4b:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfeb7ef145ea4e7564db7cd8b08736640cfb6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:90:67:04:0c:fe:86:56:f8:38:b6:e2:89:
ff:4f:21:6c:03:a1:70:f6:bc:43:06:c5:e3:dc:2e:
b9:2a:c3:87:23:f0:bd:13:12:72:f3:9d:3c:df:8d:
37:be:6d:74:13:88:74:e7:a0:63:71:ed:fb:d2:c3:
18:1c:8c:d0:db:05:af:10:87:b3:70:f1:7f:e4:b0:
f2:73:af:eb:46:eb:4d:f0:da:d4:95:8b:4a:e4:63:
b8:e8:ed:8b:45:47:c6:3a:aa:12:98:93:2a:65:9d:
57:c7:dd:06:a9:ab:c4:a3:4f:e8:20:f9:e9:ea:2d:
af:87:62:d0:fc:e0:89:d4:9b:01:1c:c6:14:ea:7f:
51:ae:e3:15:74:c5:d5:94:ce:25:87:bf:b9:f5:b2:
88:37:27:f8:04:4f:d8:88:0b:ba:c4:25:ce:be:50:
31:db:db:08:9c:5c:31:e8:7d:e3:86:35:c1:95:69:
ac:e3:2c:be:7a:33:b4:5b:9d:60:80:c6:e0:b2:c2:
51:31:ec:05:72:86:6c:d1:fe:14:53:c9:9e:c2:9a:
01:cb:d7:8d:0c:42:c4:91:6c:cb:36:ff:97:0c:42:
f3:a1:46:40:fd:23:7f:f1:7e:04:02:ca:89:58:33:
b6:81:f6:e9:62:70:ae:27:5a:8f:eb:4b:a3:8a:7d:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EB:7E:F1:45:EA:4E:75:64:DB:7C:D8:B0:87:36:64:0C:FB:68:63
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/v-t-8UXqTnVk23zYsIc2ZAz7aGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.27.0/24
193.182.144.0/23
Signature Algorithm: sha256WithRSAEncryption
70:f5:3e:cd:11:25:7e:16:23:56:7c:d0:01:c4:d3:23:a4:5d:
9d:eb:a3:ed:3e:70:02:78:33:31:79:cd:fa:8f:5c:bf:db:b7:
14:05:c7:a3:df:57:01:83:84:4d:34:cc:5e:ef:33:e9:ed:66:
3c:f9:45:cd:c5:ed:64:06:24:7b:90:c9:c5:30:bd:aa:b4:0b:
d7:bd:c9:77:7c:d5:b6:fd:52:f7:a5:76:c3:85:2b:73:37:64:
85:a8:4a:2b:9f:2c:70:4e:5e:cd:fb:a9:8b:7a:bb:c3:e0:c1:
55:27:56:fa:b9:81:50:4a:84:bd:10:81:e1:9e:2e:8b:c3:26:
56:0a:d5:6c:15:de:2b:e7:d7:39:06:e0:a6:e6:4d:2c:90:f5:
bd:ba:27:27:c8:bc:76:f8:fd:30:2a:bf:59:51:65:86:e4:cc:
ea:b9:42:42:31:d3:b9:7d:ac:cc:39:4f:b0:45:68:2a:36:83:
90:b6:1c:a5:89:4d:41:89:18:8c:03:88:f4:ce:1a:62:0f:fe:
6d:64:72:28:d0:90:cd:ff:d1:83:0d:4a:6e:93:72:02:93:46:
b6:dc:31:e3:f5:b9:8b:e0:50:34:d4:57:51:6b:a0:e4:df:03:
c9:ab:63:81:31:cc:15:28:b9:4a:c6:cc:9b:74:10:74:41:63:
3f:60:cc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:51 2025 by rpki-client