Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xD74DsqTX53v11XJJi4SxR_uaS0.roa
File: xD74DsqTX53v11XJJi4SxR_uaS0.roa (raw, json)
Hash identifier: y71xxT8CYK1q4kWiQju5bFBg5g/ebYKIDKzT3G0l+9E=
Subject key identifier: C4:3E:F8:0E:CA:93:5F:9D:EF:D7:55:C9:26:2E:12:C5:1F:EE:69:2D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484781385BF5EB2CFA38A6E147DE53
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xD74DsqTX53v11XJJi4SxR_uaS0.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28726
IP address blocks: 192.121.79.0/24 maxlen: 24
192.165.117.0/24 maxlen: 24
192.165.118.0/24 maxlen: 24
193.181.64.0/24 maxlen: 24
194.14.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:47:81:38:5b:f5:eb:2c:fa:38:a6:e1:47:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c43ef80eca935f9defd755c9262e12c51fee692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:ad:d0:19:fd:9f:45:dd:7f:0f:b2:b9:cf:
78:38:a0:21:17:0c:3a:ca:c5:a8:e9:86:c6:ab:3e:
27:12:ba:c1:b4:88:fb:3e:f0:55:0d:54:2b:96:b5:
f6:c2:af:7a:c5:11:93:58:21:33:50:18:3e:36:aa:
f1:17:89:27:38:4b:ae:bc:07:26:c1:ce:7d:db:a0:
66:a8:86:62:48:66:65:e4:8d:49:d3:9d:7e:53:1d:
ec:7a:76:2e:14:bd:97:b6:bd:6e:d3:27:f1:5d:17:
1f:b4:4e:e6:97:20:06:31:6c:12:b2:54:0c:6b:46:
23:7e:1f:88:9f:80:35:ed:9b:51:57:34:07:b2:2d:
78:b2:c1:36:9c:5d:57:b1:10:46:8f:e8:eb:6c:df:
ac:9d:cb:85:58:0f:a3:d8:07:d3:ba:ea:de:22:ba:
c6:0d:9d:be:53:12:4f:99:47:53:ea:3f:d1:5f:b1:
a4:f1:b0:9d:3a:50:74:e7:e8:11:a3:d9:2f:2d:0c:
a0:17:1e:6f:2e:69:03:6d:c7:b1:55:3a:0f:10:0d:
2d:f1:9f:8a:76:ad:e3:8f:35:68:c4:c5:b9:0e:c3:
39:95:3b:9f:56:60:cd:7e:31:cc:e6:d7:bf:61:c6:
d2:c4:e9:9a:1a:e6:51:db:fc:f2:b9:4f:b7:8b:56:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:F8:0E:CA:93:5F:9D:EF:D7:55:C9:26:2E:12:C5:1F:EE:69:2D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xD74DsqTX53v11XJJi4SxR_uaS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.79.0/24
192.165.117.0-192.165.118.255
193.181.64.0/24
194.14.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2d:3f:01:15:da:01:3f:da:00:df:30:ef:b0:b1:6d:55:f3:
f7:fe:d1:07:28:f3:0d:c8:25:df:6d:03:82:9a:c2:40:d8:a0:
34:03:e9:48:af:06:9d:9d:9f:e5:31:be:c0:71:1c:96:0f:ea:
b6:49:3d:66:08:8b:7d:9a:54:92:62:cb:76:5b:73:4c:df:9b:
29:2a:40:c1:f4:a8:50:bc:79:71:20:2e:5c:aa:e9:ad:a9:55:
b8:fe:5b:f1:b4:f3:b0:34:c1:60:37:15:15:b8:eb:cc:e9:d8:
6d:af:0c:9b:9a:6a:fb:98:39:1e:71:e8:de:72:7d:9a:21:a3:
db:98:3e:bf:80:52:40:f8:6a:40:34:e1:63:d6:a6:bb:56:d4:
06:0c:df:7e:3f:64:37:58:e8:5d:ad:57:88:d5:92:fa:4d:b7:
f5:a2:03:be:20:bc:fd:50:26:b2:9a:f9:1d:6c:df:1c:95:15:
d3:95:ad:86:33:15:be:50:81:66:58:f4:aa:87:b4:ac:27:63:
9b:33:04:9b:da:e0:9e:5c:f5:de:0c:35:2b:c7:40:72:fe:2e:
58:0d:3a:08:d6:0d:47:94:9a:7d:c5:43:5e:4e:6b:eb:26:67:
a4:02:fd:fe:4c:88:1b:42:90:b0:48:39:8c:46:6c:7c:90:45:
f4:5c:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:44 2025 by rpki-client