Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xu5xZsREIy27AdqmPdVoiKggkE0.roa
File: xu5xZsREIy27AdqmPdVoiKggkE0.roa (raw, json)
Hash identifier: qess8q6LPmYpDftg1Oxz3u/bMNvgkdfoh5b7vE2AkiA=
Subject key identifier: C6:EE:71:66:C4:44:23:2D:BB:01:DA:A6:3D:D5:68:88:A8:20:90:4D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 4288B557
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xu5xZsREIy27AdqmPdVoiKggkE0.roa
Signing time: Sat 01 Jan 2022 14:03:26 +0000
ROA not before: Sat 01 Jan 2022 14:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203052
IP address blocks: 193.234.128.0/21 maxlen: 21
192.176.224.0/22 maxlen: 22
194.132.72.0/22 maxlen: 22
193.180.76.0/22 maxlen: 22
192.121.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116255575 (0x4288b557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6ee7166c444232dbb01daa63dd56888a820904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:85:71:7a:36:fd:2d:67:a4:86:61:17:ec:
63:03:d9:23:f8:4c:ef:cd:7f:32:fa:a9:2f:82:84:
e6:3c:fa:99:dd:c1:4f:31:5a:c1:82:92:2f:2b:de:
8d:9e:29:f9:4f:c8:31:11:42:33:36:06:c0:c3:18:
2a:63:2e:bb:3e:24:b9:47:81:1d:f4:24:b1:e5:58:
ff:fa:fc:7c:63:b3:3b:d4:be:54:fd:0d:f1:21:1e:
c4:1f:60:19:23:d6:ec:76:13:e8:bc:89:cd:0e:6d:
62:78:d3:b0:dc:1b:bd:1d:c9:48:8f:7c:01:5d:33:
db:82:99:ef:8a:9b:0f:97:b3:c6:ac:2e:19:77:ae:
71:c2:7b:5b:f7:5f:4e:57:68:0a:f9:e9:c2:94:0d:
35:c7:7a:f3:37:0d:d3:31:2b:f5:9d:a0:bf:1e:c5:
9a:79:25:2f:c7:05:1a:3e:2d:27:93:d6:87:fa:50:
f0:c2:80:6c:a6:e3:b4:b5:3e:cc:70:1e:b0:87:da:
38:26:46:cf:e9:ca:26:4d:0c:da:77:32:92:18:3a:
e8:ba:e3:1e:d5:87:4e:d2:95:e1:10:39:18:d2:95:
47:3d:39:33:d0:d3:53:3f:33:61:ee:22:54:e4:3b:
86:94:41:e3:f7:d0:b8:af:d5:e4:47:1c:03:5c:21:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EE:71:66:C4:44:23:2D:BB:01:DA:A6:3D:D5:68:88:A8:20:90:4D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xu5xZsREIy27AdqmPdVoiKggkE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.204.0/22
192.176.224.0/22
193.180.76.0/22
193.234.128.0/21
194.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
14:cb:eb:5b:e2:39:8d:eb:b4:75:92:aa:7d:a9:45:51:fc:4f:
85:5e:01:c3:97:5a:2f:b1:8f:84:f3:17:04:ac:8c:51:e7:f1:
f7:9c:af:b3:b5:28:f7:b7:ae:97:91:d1:92:56:0d:27:1f:6f:
3e:78:db:94:25:3a:b7:ca:2e:7f:c1:56:a1:44:7c:35:3a:e0:
12:70:8c:16:44:b1:c1:19:6e:6e:12:9d:00:1c:c1:fc:c1:5f:
a8:6a:63:f5:3b:d1:b2:11:32:e6:b9:8c:f0:d1:16:cd:a5:2c:
b2:50:cf:21:1b:28:82:0f:ff:ec:2a:8b:21:54:c3:eb:a2:85:
53:0a:7a:80:b4:d5:ec:c7:b0:42:ce:10:da:21:34:fe:ec:cf:
bf:24:a4:7e:b0:4e:c2:04:7c:59:7e:ef:d9:2a:29:54:1b:f5:
e3:3f:8f:82:24:cd:0e:8a:45:ea:2f:67:81:8f:aa:3d:75:e4:
c9:d9:2d:44:1b:59:76:a3:57:73:fc:ef:39:42:68:f6:dd:60:
45:d5:92:3f:0c:65:43:49:00:6c:6d:42:e0:04:d9:c5:ff:db:
ef:96:97:5f:31:ba:fd:ba:a0:a7:d9:76:9a:0a:72:54:0d:d5:
34:0d:6d:b4:2e:b5:03:c5:a1:6a:58:e8:49:73:41:c3:8d:b4:
17:d8:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:18 2025 by rpki-client