Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/xTKqoPX2dBhNlcT2NUs_e1chUO8.roa
File: xTKqoPX2dBhNlcT2NUs_e1chUO8.roa (raw, json)
Hash identifier: +dfoaZhwpySvyV4GfdG0x0LZsqFRXhC9aHTxd1OPPVo=
Subject key identifier: C5:32:AA:A0:F5:F6:74:18:4D:95:C4:F6:35:4B:3F:7B:57:21:50:EF
Certificate issuer: /CN=dd33623619e52729fbf9772a5522d781da3b6325
Certificate serial: 01922B39B99D1F22501229A609F70803037D
Authority key identifier: DD:33:62:36:19:E5:27:29:FB:F9:77:2A:55:22:D7:81:DA:3B:63:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TNiNhnlJyn7-XcqVSLXgdo7YyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/xTKqoPX2dBhNlcT2NUs_e1chUO8.roa
Signing time: Wed 25 Sep 2024 22:07:36 +0000
ROA not before: Wed 25 Sep 2024 22:07:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203649
IP address blocks: 185.119.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:39:b9:9d:1f:22:50:12:29:a6:09:f7:08:03:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd33623619e52729fbf9772a5522d781da3b6325
Validity
Not Before: Sep 25 22:07:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c532aaa0f5f674184d95c4f6354b3f7b572150ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:f0:0f:8e:b6:70:60:39:e9:4b:d3:0f:c0:
e3:ba:38:d7:81:46:00:b3:20:67:d1:6a:f8:65:b7:
8d:0e:70:7a:ca:1b:d4:ab:00:67:43:06:b5:1a:0e:
32:50:7f:71:e9:98:d7:52:60:73:a2:f4:e7:27:18:
c5:f0:93:cc:cd:fa:a5:0d:26:a4:fe:25:9e:09:ef:
f5:9f:04:0e:09:a1:56:8c:a2:e9:61:4b:17:33:f9:
a8:17:13:de:86:02:63:f8:77:1f:28:fc:9e:c6:f6:
0c:8f:5f:cc:06:7f:69:c9:96:47:ce:36:56:e8:6d:
19:20:5c:ff:1f:a5:4f:a6:ed:0f:28:e9:0a:7e:6c:
10:ed:38:56:b4:cd:f4:55:62:7d:05:e9:e6:f1:54:
89:f3:3f:5a:81:59:17:dd:c4:0a:98:d6:a7:9c:7f:
ec:ca:17:0e:4b:75:cc:5b:8b:13:ce:bf:e1:0e:dd:
07:78:9f:94:dd:9e:56:3b:71:d7:18:f0:dd:2f:ea:
49:bd:02:fc:78:5b:31:5a:62:68:b1:2f:33:b9:32:
e2:8d:7d:97:f8:88:0f:8d:aa:c5:7e:a7:f8:6c:7a:
85:95:b5:6d:94:52:58:ec:63:7c:31:b9:13:90:ac:
b1:f6:64:3d:c2:b4:c7:de:14:f3:08:ac:df:46:ab:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:32:AA:A0:F5:F6:74:18:4D:95:C4:F6:35:4B:3F:7B:57:21:50:EF
X509v3 Authority Key Identifier:
keyid:DD:33:62:36:19:E5:27:29:FB:F9:77:2A:55:22:D7:81:DA:3B:63:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TNiNhnlJyn7-XcqVSLXgdo7YyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/xTKqoPX2dBhNlcT2NUs_e1chUO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a29c9-d186-492c-ba90-ddfaa1c8ab9d/1/3TNiNhnlJyn7-XcqVSLXgdo7YyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.133.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:d5:19:99:81:21:08:66:2f:6a:07:4d:2a:e0:97:e7:32:
2c:52:04:14:bf:c8:de:6a:0b:72:a4:52:84:f4:c4:b8:5e:9c:
79:a8:53:47:df:69:66:45:ca:ba:0d:9b:3c:f0:ec:15:96:1e:
07:e1:53:35:e7:a5:bf:8f:e8:7b:a5:45:5e:77:be:e5:40:b2:
5d:4c:51:db:77:ef:6e:d3:84:62:43:54:31:f2:6b:ae:24:a9:
1c:40:67:84:98:68:61:d0:0e:37:5c:6d:46:b6:af:4c:ed:83:
14:1d:54:e8:8f:9b:42:29:04:64:fa:85:6b:13:13:5b:f0:ce:
72:30:a4:24:aa:e5:5b:b9:e0:34:4e:18:c2:e0:32:c9:0b:01:
fc:a2:13:0d:b8:c8:f8:1e:d7:60:4a:74:22:66:0f:9d:07:43:
75:41:3a:ef:98:6b:83:d3:25:53:ad:2d:5a:c6:d4:51:9d:04:
1d:0b:b0:83:29:c2:aa:a9:4d:98:a5:90:b2:fd:49:73:97:b2:
b8:c5:df:e6:1f:fb:f6:2d:56:e6:80:84:5d:3b:84:56:eb:66:
93:57:cf:6c:7f:7a:65:6f:a2:94:ce:fe:6b:34:06:f1:be:b2:
e6:3c:1f:d5:73:67:e3:29:8f:77:ad:be:a4:b0:1b:8b:12:5c:
c8:76:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:45 2025 by rpki-client