Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k23h-r77qjypUONDkIQVX1rVI48.roa
File: k23h-r77qjypUONDkIQVX1rVI48.roa (raw, json)
Hash identifier: q8BES/gvBUMHLRX2iyEM0r3z2757ssu/6T7GsVPQ0C8=
Subject key identifier: 93:6D:E1:FA:BE:FB:AA:3C:A9:50:E3:43:90:84:15:5F:5A:D5:23:8F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427483F292CE0E302788BF58FA86E6260
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k23h-r77qjypUONDkIQVX1rVI48.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8642
IP address blocks: 192.165.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3f:29:2c:e0:e3:02:78:8b:f5:8f:a8:6e:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=936de1fabefbaa3ca950e3439084155f5ad5238f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:c5:c7:27:a8:07:07:3f:1a:9f:64:2c:6f:
99:c1:73:b6:02:97:f6:c1:ab:54:5a:ca:b6:bf:ce:
ea:d5:a0:b4:ca:c6:48:c5:d7:e0:d9:16:ef:e0:5b:
1d:85:5c:cc:7a:11:ca:1f:73:64:9b:24:e1:c2:1b:
98:f4:e9:7b:f6:de:92:96:f3:1c:76:a2:21:ff:4f:
cb:3b:fd:99:2d:62:64:33:4a:15:5d:ae:89:a2:0e:
58:34:3e:b4:b5:f2:d9:44:69:2e:2f:74:ad:1a:73:
ee:d2:9d:b1:84:9f:f2:0e:67:09:30:3a:20:b5:16:
be:6a:e6:d2:25:8f:d1:a9:7d:4d:95:16:18:de:6e:
88:b9:d1:70:1b:3f:c1:b0:07:f7:e6:2a:a5:83:64:
59:ed:f4:aa:1e:ed:ad:7b:76:26:71:6b:cb:12:51:
0c:ea:90:93:f7:1d:97:f1:58:6f:51:47:21:77:00:
0f:6c:b7:3d:56:fa:0a:ed:e4:d8:b9:3d:26:7c:52:
38:65:04:0c:8c:9e:16:03:de:13:19:b7:70:da:87:
e7:b2:35:ac:e4:ce:16:87:1e:d5:8f:63:14:21:09:
87:e8:af:eb:54:75:c1:47:a3:77:9c:fb:2d:9f:42:
0e:04:8c:cb:e8:d9:07:a6:e4:f2:12:bb:33:d6:e1:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6D:E1:FA:BE:FB:AA:3C:A9:50:E3:43:90:84:15:5F:5A:D5:23:8F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/k23h-r77qjypUONDkIQVX1rVI48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:96:b4:6f:bd:b7:63:53:fd:4a:75:e9:4b:98:90:7c:da:e2:
9e:0d:ae:20:32:96:d5:23:b4:d9:2b:6b:6c:49:2e:d6:48:c8:
c1:2c:88:5a:29:aa:c0:7b:9f:62:b6:13:2b:51:4c:a1:1c:75:
e3:f0:d1:d8:88:72:58:b2:b5:e2:b4:3e:60:05:e1:2d:47:17:
0c:a9:9c:cc:a5:cf:0f:9a:f9:10:97:04:4d:c3:81:ba:15:ab:
93:2a:99:89:ff:7f:0c:81:91:da:6e:a8:47:75:ee:70:17:df:
ff:d4:84:43:06:93:c4:26:bb:2e:f2:6b:f8:aa:54:9c:62:cb:
4d:5a:a2:d9:7f:89:45:23:50:d9:dc:0b:6a:0c:90:7f:06:4f:
b3:3d:6d:85:3c:50:c7:2a:15:b6:ac:e4:c1:09:05:e0:d9:52:
5a:a8:e8:7d:be:69:27:84:61:2b:e6:d1:80:a8:75:1d:51:be:
10:b1:f7:67:b1:ac:a6:14:9c:b1:6b:13:45:c9:28:3a:77:5a:
a0:c5:97:ac:dc:0e:69:d3:1c:5d:48:7c:1f:b0:ea:9e:e8:5e:
88:ec:77:f2:66:63:95:a4:ca:73:01:be:d1:c7:e7:1c:00:d6:
9f:43:46:3a:40:fc:29:88:96:a3:e6:92:19:2c:ce:ae:57:71:
ec:8c:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:58 2025 by rpki-client