Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/hZ3-JvoahZfApqDM_NJS-s-Ye9w.roa
File: hZ3-JvoahZfApqDM_NJS-s-Ye9w.roa (raw, json)
Hash identifier: NOahSPFNwlFmuv10KNkpO4cKfdcsilFzJ/WBQ9jVkQ8=
Subject key identifier: 85:9D:FE:26:FA:1A:85:97:C0:A6:A0:CC:FC:D2:52:FA:CF:98:7B:DC
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 07F59B3B
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/hZ3-JvoahZfApqDM_NJS-s-Ye9w.roa
Signing time: Sat 01 Jan 2022 15:07:05 +0000
ROA not before: Sat 01 Jan 2022 15:07:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 193.135.137.0/24 maxlen: 24
193.135.151.0/24 maxlen: 24
193.135.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133536571 (0x7f59b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 1 15:07:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=859dfe26fa1a8597c0a6a0ccfcd252facf987bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:b4:aa:43:f1:e4:58:2f:2e:cb:cc:e8:84:
c8:d7:3a:30:2d:bf:5f:fd:8f:4e:fc:3e:f8:fd:03:
a7:7e:ae:2e:f2:97:a8:a5:ef:4d:2a:75:c0:87:93:
75:1e:98:f0:d6:d7:ad:44:64:aa:fd:0e:c9:cd:36:
41:9c:1f:bb:b2:3e:58:4e:85:c3:bf:d3:f2:7a:0b:
21:18:53:e6:05:fa:82:35:ff:1f:3a:2e:42:bc:d1:
3a:63:b2:f4:f4:60:7f:db:65:73:d7:87:21:1c:39:
e7:06:cd:cb:2a:5c:ea:db:68:52:50:d9:f0:0c:49:
ea:b8:16:7f:0a:51:cc:97:2d:c7:00:d7:e2:08:39:
d2:3e:73:73:20:39:f8:c1:45:de:b5:35:d7:e5:9f:
6d:84:16:01:5f:58:a9:7e:68:29:5c:9f:cd:f5:5c:
85:e4:41:2a:af:e2:c0:04:72:90:73:40:81:f9:ca:
61:a6:0c:ac:2f:c8:94:1b:5d:85:16:5c:ee:68:da:
ff:19:11:be:c0:bf:15:5f:6c:de:5a:a0:79:8d:a1:
03:d1:b3:98:3f:c5:e9:16:8a:4c:23:b5:97:2a:bb:
12:0a:14:e9:75:1a:dd:40:10:2b:bb:ee:ad:37:a0:
59:f0:e4:66:44:70:96:68:1f:46:d3:fb:df:3a:2d:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:FE:26:FA:1A:85:97:C0:A6:A0:CC:FC:D2:52:FA:CF:98:7B:DC
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/hZ3-JvoahZfApqDM_NJS-s-Ye9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.137.0/24
193.135.151.0/24
193.135.157.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8a:26:dc:2c:3d:5d:0f:eb:a9:82:b6:63:33:76:4f:fa:62:
a2:58:9e:1d:d1:d1:49:d4:98:80:26:c5:39:31:4f:53:85:3a:
1e:64:a8:c8:0b:2c:33:ab:21:71:df:6e:c3:a4:ef:98:39:56:
4e:4b:38:df:d8:18:60:b5:aa:c5:c8:31:22:19:88:d5:06:11:
f3:42:84:a2:ba:58:48:eb:9a:ae:7f:97:92:22:68:36:85:03:
33:9a:49:5e:06:04:22:ef:ed:81:bb:ec:68:fd:de:82:af:5a:
00:e1:66:ea:f7:33:c5:94:89:76:4d:a4:cd:8d:13:7d:e1:68:
9a:69:a9:b6:78:58:c6:86:a9:08:a4:b5:f0:5c:58:fe:f6:8c:
14:4b:b8:e5:45:7c:7a:b7:4f:51:de:c9:a6:90:ed:0e:05:65:
c9:d2:bb:fe:7f:24:5d:e2:ed:99:53:0f:9e:27:e0:c6:d0:cf:
30:22:0b:82:92:1d:cc:30:15:a1:cc:3f:db:85:74:f1:86:ef:
7f:42:c0:ea:f2:cd:94:12:46:e0:40:fd:b0:b5:27:69:dc:cc:
0a:e2:d2:ff:e5:5b:a1:a7:a2:6b:68:4e:4c:52:9b:c5:85:5a:
f6:e0:e6:9f:15:ce:35:98:20:12:7e:4f:b9:67:2a:dd:e6:f0:
e9:6f:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:33 2025 by rpki-client