Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/txyslSPH2AgybQsrBsdjAZG9rR8.roa
File: txyslSPH2AgybQsrBsdjAZG9rR8.roa (raw, json)
Hash identifier: hW+rlWNF8Sfr6AVtPb5jsnCR0O1VHkHlsiPhUpjsIic=
Subject key identifier: B7:1C:AC:95:23:C7:D8:08:32:6D:0B:2B:06:C7:63:01:91:BD:AD:1F
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01859AD3F16B8A52828635CEB3306C44AD5A
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/txyslSPH2AgybQsrBsdjAZG9rR8.roa
Signing time: Tue 10 Jan 2023 08:37:39 +0000
ROA not before: Tue 10 Jan 2023 08:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.135.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:d3:f1:6b:8a:52:82:86:35:ce:b3:30:6c:44:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jan 10 08:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71cac9523c7d808326d0b2b06c7630191bdad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:c2:a6:69:75:1d:5b:2a:86:c8:d8:02:51:
50:b8:c2:e9:ec:df:33:41:a7:69:cc:ac:4f:50:62:
2d:4b:18:d9:ff:04:89:d0:22:c8:41:7c:04:09:fc:
4c:de:d8:83:0e:ec:24:37:98:a6:58:b9:52:38:1f:
71:7a:3e:d8:4b:58:2c:47:29:26:fb:89:5c:58:10:
8e:27:fd:8e:ad:42:b3:90:0a:0d:77:c0:bd:d3:9b:
cf:ee:e2:6d:5f:41:cd:32:62:d3:88:b8:99:0e:cb:
25:7c:4e:42:a8:54:23:4f:df:79:c8:98:e4:86:ac:
b8:3a:5b:98:98:66:03:87:ba:bb:36:a0:78:eb:89:
e4:49:e0:ca:49:e9:eb:79:86:fa:2e:67:80:d7:b0:
d8:e4:d1:7e:6a:42:43:4a:20:47:0f:44:9b:f7:f3:
67:e9:ff:77:38:e3:4d:de:32:82:7f:64:7a:f7:c4:
c3:e8:80:ea:e4:3e:58:a6:2e:5a:30:9d:46:8a:d9:
a1:fb:04:41:f1:14:1f:da:33:98:59:6c:f8:74:78:
18:b8:a9:cd:20:0e:aa:40:5a:8d:a9:0d:27:f3:d5:
6a:e7:37:41:c6:65:2e:4e:04:e9:d7:dd:d2:6d:cd:
b8:6d:44:e2:55:19:fa:fa:05:3f:48:67:28:94:1a:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1C:AC:95:23:C7:D8:08:32:6D:0B:2B:06:C7:63:01:91:BD:AD:1F
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/txyslSPH2AgybQsrBsdjAZG9rR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.174.0/24
Signature Algorithm: sha256WithRSAEncryption
31:13:04:ab:c1:4d:30:7d:4e:e8:b2:60:5a:9c:b4:47:ab:a1:
af:25:6d:c1:60:55:08:4a:a0:43:fd:c8:85:b1:34:2f:43:62:
87:c3:85:a3:de:e5:77:3f:80:cc:29:5f:4f:94:77:df:55:26:
26:89:98:d2:ab:bb:28:12:40:b0:a1:d0:e7:70:7f:c6:ed:65:
41:dd:28:67:05:a6:c6:fb:cd:e0:e9:1d:56:33:fe:11:2a:59:
6b:b8:a0:eb:ef:3d:af:da:f8:63:b6:cb:b3:3a:67:fb:24:14:
ed:df:15:ec:27:49:52:2b:c1:36:df:99:72:4a:65:1b:32:1a:
31:f0:b5:b1:89:bc:26:1d:dd:d9:40:cb:bf:fe:4e:c7:23:3c:
07:0c:11:3f:e3:32:9b:1b:33:2a:ec:e1:a9:e7:73:94:38:05:
76:90:88:a0:8f:8c:b9:ce:07:a1:52:35:20:a7:72:c9:43:ca:
2b:ea:51:d7:db:68:1c:bc:15:09:0e:6a:e9:a1:6b:ed:73:1a:
89:cd:a4:af:66:96:f8:da:3a:ae:74:d2:73:95:4a:c0:63:38:
40:e7:2a:b5:db:16:54:a1:74:47:5c:75:12:54:d6:c4:53:47:
44:e0:f1:d9:12:a6:95:d3:df:d8:22:06:b0:dc:80:af:94:f6:
17:b7:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:47 2025 by rpki-client