Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x_pm-ALb7d6u1UTSTkIQoP5tE0k.roa
File: x_pm-ALb7d6u1UTSTkIQoP5tE0k.roa (raw, json)
Hash identifier: t32D5JqO1mhG4p/df9+QR5JzHDnoBM5OtjjAPCqYiv0=
Subject key identifier: C7:FA:66:F8:02:DB:ED:DE:AE:D5:44:D2:4E:42:10:A0:FE:6D:13:49
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274866159E85D63E94844A573F2214CF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x_pm-ALb7d6u1UTSTkIQoP5tE0k.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197308
IP address blocks: 192.36.169.0/24 maxlen: 24
192.36.199.0/24 maxlen: 24
192.71.124.0/24 maxlen: 24
192.121.85.0/24 maxlen: 24
192.121.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:66:15:9e:85:d6:3e:94:84:4a:57:3f:22:14:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7fa66f802dbeddeaed544d24e4210a0fe6d1349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:01:70:f9:95:6d:e6:5e:43:9a:50:8d:16:
bd:63:f7:7c:55:ef:61:88:68:65:ce:f2:1b:2c:9d:
af:07:ab:31:84:1b:f4:6f:84:a7:d8:8e:de:eb:ad:
5f:87:57:38:78:dd:b1:a3:16:95:3f:a4:ea:c1:cd:
97:00:e7:a3:d9:c1:03:30:7b:d5:b1:84:e8:c9:48:
1d:f9:c4:74:ee:b6:27:14:5c:62:69:45:17:7a:ca:
21:40:cd:6d:ea:f3:84:a0:e8:e7:0a:e4:65:76:64:
f6:76:85:8d:3f:2d:fa:47:7b:d4:12:b2:e1:94:a3:
ff:2e:ab:1c:3a:2b:2e:28:92:75:3a:6c:db:bd:ec:
eb:9b:93:f6:e0:12:86:49:32:3d:62:f8:05:95:6c:
92:9a:bb:16:27:cd:4d:f3:43:c7:15:c5:35:80:8f:
b1:e2:28:e5:f9:32:e1:f8:98:0d:4c:5c:b5:7a:77:
af:de:d2:e4:01:fe:16:b0:05:a8:d2:b5:05:22:e1:
3a:62:7d:76:ff:9a:a8:e5:a2:da:2f:27:8c:c2:bd:
84:02:d5:a0:67:62:fe:36:85:f7:48:7e:71:87:09:
3b:37:aa:c8:df:0b:61:44:0d:dd:71:14:cd:f1:f2:
d6:67:cc:39:7b:c9:4b:4d:39:0e:ed:e3:aa:fb:32:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:66:F8:02:DB:ED:DE:AE:D5:44:D2:4E:42:10:A0:FE:6D:13:49
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x_pm-ALb7d6u1UTSTkIQoP5tE0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.169.0/24
192.36.199.0/24
192.71.124.0/24
192.121.85.0/24
192.121.252.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:06:60:59:71:1c:e2:1d:58:c7:7a:74:d9:23:fe:19:7e:bb:
05:7b:72:3f:d8:7e:74:e9:d7:1e:ca:f5:19:ef:98:14:5f:50:
c5:c1:9d:2b:a8:75:de:b6:04:17:84:3d:5f:8f:a6:5b:c4:d9:
5c:61:6b:9d:e6:bb:74:0f:16:76:c4:bb:25:9d:8f:f0:d7:e1:
23:6c:2b:3e:83:4a:e2:e2:83:d9:3e:bd:62:71:36:9b:c9:6e:
fc:ea:30:c4:4f:f5:e9:5c:fb:56:87:18:c9:1c:56:fa:b1:20:
49:26:2d:60:7d:fb:7d:28:dd:ba:ff:56:4c:e0:24:6c:4b:67:
a3:65:22:fc:28:4f:9e:a7:24:67:f5:f5:96:42:84:7c:90:ea:
2f:0c:52:d3:93:47:4c:bc:14:fb:41:73:ca:6f:3f:41:3e:7b:
e3:e1:47:3a:59:e5:fe:e2:7f:9b:55:a7:d2:7b:18:49:a4:c6:
d5:ce:d4:37:8c:47:a0:4f:31:1c:89:62:f0:6c:00:12:4e:b4:
30:a0:41:03:33:eb:5c:43:79:f3:f5:1d:56:84:b3:d1:4e:65:
85:2a:cc:5f:5a:af:36:c4:57:55:00:75:95:77:a2:9a:62:41:
02:3f:cf:d6:fd:f1:15:3d:13:0f:ee:be:7d:4a:54:8d:eb:f5:
0d:2c:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:24 2025 by rpki-client