Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xxB_vuUU2By5SrU1nCEk08D6JLg.roa
File: xxB_vuUU2By5SrU1nCEk08D6JLg.roa (raw, json)
Hash identifier: aqbVZKCgIH3cNxrHnAazW2IeZMXy+ljBOIOKcm7Np6Q=
Subject key identifier: C7:10:7F:BE:E5:14:D8:1C:B9:4A:B5:35:9C:21:24:D3:C0:FA:24:B8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB102F1D6677629E7957357B3482A2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xxB_vuUU2By5SrU1nCEk08D6JLg.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209578
IP address blocks: 193.180.64.0/21 maxlen: 32
193.182.96.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:10:2f:1d:66:77:62:9e:79:57:35:7b:34:82:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7107fbee514d81cb94ab5359c2124d3c0fa24b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:cd:88:05:3b:b2:b5:29:22:6e:fe:eb:c4:
e1:d5:6d:cc:47:7a:1b:fa:ae:c2:0f:a4:68:d4:a6:
4e:82:8e:5c:e0:84:e6:c4:a2:a5:9d:f0:41:04:e9:
97:dd:73:6f:a8:82:88:e1:bd:d0:2b:e1:5d:ea:06:
b5:e9:62:c6:83:f4:07:fa:0b:64:5f:e7:a3:fb:57:
54:ec:d6:66:b0:b7:ca:84:4e:75:c8:21:3c:dc:51:
3e:db:ee:a3:b1:98:4e:9e:9a:e2:85:2b:2e:63:80:
fc:7f:2e:15:33:19:4c:04:2d:dc:28:dc:ee:0f:39:
03:37:42:97:cc:fd:6d:bb:18:d4:94:11:53:f8:41:
4f:ed:2f:61:8d:27:bb:c3:36:06:24:bb:ba:5b:67:
5c:b7:80:94:00:e3:8a:5d:d4:fb:a2:63:91:84:a8:
d0:4e:ac:78:60:78:6a:cd:73:0b:19:7a:78:ec:f6:
5f:54:35:03:dd:13:6a:1c:42:6f:b8:5d:22:00:47:
9d:65:ab:99:f2:2a:bd:bd:34:2e:27:10:bf:70:25:
27:13:a4:f5:69:00:38:4d:eb:81:7c:e4:5c:13:51:
51:ef:7b:89:92:13:35:6c:41:2d:87:d5:d4:d5:87:
5b:05:e3:42:b6:60:75:78:8e:9b:84:9a:34:f6:20:
52:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:10:7F:BE:E5:14:D8:1C:B9:4A:B5:35:9C:21:24:D3:C0:FA:24:B8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/xxB_vuUU2By5SrU1nCEk08D6JLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.64.0/21
193.182.96.0/21
Signature Algorithm: sha256WithRSAEncryption
48:51:9f:76:eb:f4:a5:5a:5c:a4:90:05:f5:7e:8f:45:da:d8:
b1:54:93:cc:d1:7f:fb:1f:6d:06:45:05:f2:4e:a2:cb:d7:3c:
f7:80:2c:ed:c7:f9:0d:15:77:43:5c:8e:81:f1:d5:9c:27:1f:
51:5a:be:ec:72:0b:76:69:3c:0a:7f:62:da:8d:e3:d5:9f:d4:
89:58:a3:9e:e4:fb:a5:c2:d6:22:b7:08:6d:9b:da:97:ef:b3:
33:30:f8:4e:ce:52:73:05:54:2a:5a:81:d9:05:ad:12:78:d3:
a8:2b:55:14:e9:88:03:d0:d7:93:a7:0c:c0:f4:36:40:8c:03:
4b:8b:5e:6d:a1:24:0e:a2:d4:49:ef:11:a6:1f:c9:b5:04:a8:
67:6a:37:8a:83:8f:a3:47:36:8b:f0:fb:67:78:b6:52:42:5d:
ef:9e:37:99:71:3f:52:40:39:19:24:19:6f:99:17:f4:e9:ff:
35:c3:30:89:b8:8d:fe:4a:54:46:46:eb:94:fd:ea:02:39:ac:
0c:a9:f4:a7:76:b9:28:31:6f:cd:16:af:ed:85:58:be:22:da:
b8:2a:6a:ed:59:c9:2d:8b:54:02:4f:6c:ca:07:c5:b7:8d:e2:
98:72:e8:5d:75:3b:04:68:3d:7e:46:48:41:87:01:46:51:49:
8b:1f:ba:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:02 2025 by rpki-client