Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vRnVst7EAg1GIJN54SrExI40ER0.roa
File: vRnVst7EAg1GIJN54SrExI40ER0.roa (raw, json)
Hash identifier: w6pV8ZdjCBW9Z10TX++/LqzhQMpDZYIaYr/gD2ooPB0=
Subject key identifier: BD:19:D5:B2:DE:C4:02:0D:46:20:93:79:E1:2A:C4:C4:8E:34:11:1D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCACC2B29C655B53D479ED19375DCFD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vRnVst7EAg1GIJN54SrExI40ER0.roa
Signing time: Sun 01 Jan 2023 10:05:07 +0000
ROA not before: Sun 01 Jan 2023 10:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2836
IP address blocks: 192.121.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cc:2b:29:c6:55:b5:3d:47:9e:d1:93:75:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd19d5b2dec4020d46209379e12ac4c48e34111d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:43:05:9c:59:62:a9:84:fb:ff:1a:22:72:
11:8d:bb:a1:10:2e:22:c2:bf:cb:f9:12:e0:ae:b0:
03:5a:5d:25:93:19:58:35:22:bc:d8:82:af:b7:1f:
8b:db:c3:04:20:ee:9b:21:d5:1a:93:7e:32:bd:e9:
3e:3e:33:25:f6:89:04:e5:88:bb:6a:3b:20:3b:ee:
41:67:cd:5b:00:3f:9d:f7:23:2f:f1:d7:79:4f:ae:
01:7e:31:f1:4a:59:44:9d:1c:ba:31:c7:e4:3a:99:
c3:7e:8b:1d:ed:f7:f3:a5:0e:a9:c4:db:0c:9f:a1:
ed:f6:02:da:ab:23:88:be:9d:3b:e2:b5:de:9a:b8:
86:93:7b:6f:3e:ea:86:51:82:f4:e6:24:91:d5:15:
7c:4d:17:41:81:6b:2e:1b:d2:b0:56:b6:78:a7:4e:
a4:f5:78:cb:71:ec:28:2b:f5:a5:74:22:fd:cc:2b:
09:e1:9c:8d:71:d7:8c:d4:9d:c2:93:2b:f1:56:45:
34:ea:73:21:f0:e5:3c:f9:de:7c:e8:0c:0f:30:9a:
ab:9d:9c:d9:21:46:60:53:d9:99:42:f4:b8:c6:5d:
8b:cf:05:f2:c7:9d:9a:32:31:0d:56:94:2c:ab:dd:
32:f4:dd:f0:70:8e:2c:dc:05:55:fb:70:54:48:7d:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:D5:B2:DE:C4:02:0D:46:20:93:79:E1:2A:C4:C4:8E:34:11:1D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vRnVst7EAg1GIJN54SrExI40ER0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:69:f9:0f:1e:8c:9d:a2:cd:f7:e8:9a:10:f7:97:c6:b2:ae:
4d:72:56:2a:ae:f1:cc:e7:d3:ef:99:c4:9e:5d:dc:bb:10:4f:
61:f1:d1:18:94:55:18:1f:cc:95:71:16:27:f2:4d:39:2f:3a:
55:90:2d:a8:01:27:cd:59:75:04:fa:26:3b:d4:d0:ee:3e:2d:
00:96:5e:b5:2e:a6:00:e0:38:3b:61:2b:cc:3b:13:8c:a7:6c:
32:4c:b5:64:9d:db:b2:f0:02:06:4e:5c:42:72:eb:11:8b:e6:
45:3e:20:63:4d:d2:37:fd:13:78:aa:6f:1e:1d:07:56:11:44:
c8:22:9b:db:db:f8:0b:04:f0:31:dd:a5:5c:fe:f1:46:2c:4a:
b8:42:3b:98:2c:e1:f2:26:3f:c6:46:8f:1d:fe:1e:91:f4:9e:
5c:90:2f:c5:60:d2:e3:50:92:8d:bc:fd:58:c8:78:4b:a3:02:
16:41:db:79:02:f8:f8:14:db:80:9d:1a:19:6b:02:5b:38:ac:
86:b6:bc:a6:c8:c5:b3:49:5f:e1:a2:bb:ce:2a:47:6c:88:73:
d7:f8:d2:b9:9b:63:76:b5:cf:60:62:d1:39:7e:df:28:fb:d1:
ad:e1:dc:33:6a:87:c7:5a:37:54:68:01:76:4a:32:ee:09:8d:
91:5b:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:51 2025 by rpki-client