Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0i4q6_ktMpkKvHCTyw_04fJDzU0.roa
File: 0i4q6_ktMpkKvHCTyw_04fJDzU0.roa (raw, json)
Hash identifier: Lo3Wfq5ZYfaE0BoKTVH+jgjfUMe30FFG8Cvy7Dm4W0k=
Subject key identifier: D2:2E:2A:EB:F9:2D:32:99:0A:BC:70:93:CB:0F:F4:E1:F2:43:CD:4D
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 019426D9F846EB27D815B595DFD31987EC8C
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0i4q6_ktMpkKvHCTyw_04fJDzU0.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31216
IP address blocks: 31.217.128.0/19 maxlen: 24
46.18.168.0/21 maxlen: 24
83.243.16.0/21 maxlen: 24
89.30.0.0/17 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
185.55.16.0/22 maxlen: 24
185.143.244.0/22 maxlen: 22
194.126.217.0/24 maxlen: 24
2a01:8200::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:46:eb:27:d8:15:b5:95:df:d3:19:87:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22e2aebf92d32990abc7093cb0ff4e1f243cd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:08:78:e7:f1:f7:6e:45:f2:e5:f4:a0:b9:
68:46:ad:6c:8b:70:1d:20:95:4a:8b:33:d0:1c:d7:
32:69:48:bb:7c:c3:f4:59:52:57:b4:83:ff:bb:a2:
6a:15:77:16:b4:ed:8d:6f:e6:ab:6a:5c:20:88:89:
e1:3b:56:db:02:f0:8f:94:68:58:b1:cc:42:e5:6d:
5d:45:c0:92:bf:a9:2c:d7:fa:50:63:32:35:10:7d:
5b:30:a6:9e:3a:de:9b:c9:09:6b:09:00:72:24:26:
7b:de:d9:6d:15:10:21:26:4e:bb:65:5b:c1:62:49:
75:c7:fc:57:49:c3:36:91:ed:9c:04:e2:55:8a:08:
74:0c:60:bb:30:b1:12:00:0e:0f:d2:cc:31:40:03:
f7:4a:f6:fb:21:ab:ba:e5:bd:2b:c4:70:30:4f:d8:
e4:fd:30:c6:24:50:0a:b0:81:69:8a:07:23:14:95:
46:63:a8:a0:6d:1a:9e:4f:55:ee:f0:68:da:f1:26:
30:9b:dd:8a:9a:1b:1e:c9:52:27:78:04:72:10:32:
45:89:ce:bc:8d:2a:ad:9a:56:52:cc:1b:71:11:14:
10:98:8d:11:b9:02:39:ec:36:e5:cc:a3:5a:5c:af:
1c:a6:c7:be:c2:80:55:f5:f5:f6:f9:7a:bc:36:ba:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:2A:EB:F9:2D:32:99:0A:BC:70:93:CB:0F:F4:E1:F2:43:CD:4D
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/0i4q6_ktMpkKvHCTyw_04fJDzU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
185.143.244.0/22
194.126.217.0/24
IPv6:
2a01:8200::/32
Signature Algorithm: sha256WithRSAEncryption
26:a5:55:8c:ff:42:0f:fa:34:77:f9:eb:00:29:bb:6d:46:f1:
b7:23:31:4e:97:fc:e0:8c:9a:7d:17:c3:8b:95:7e:24:a8:a0:
8e:a8:47:77:8c:53:fb:dc:ac:f4:dc:91:83:d5:ce:fe:f4:9f:
57:39:36:8c:91:33:8b:20:bd:fa:16:a3:d5:38:f5:f6:ea:f8:
fc:6d:ca:43:3a:c6:b2:b0:d8:af:b3:89:92:b7:79:14:8c:5d:
46:a8:b2:59:75:ac:33:d3:7d:57:16:27:ad:b1:73:35:8d:61:
39:c5:2b:ff:68:6d:11:16:bf:fd:57:6f:00:cb:d9:89:26:75:
90:8c:84:e9:3f:d2:6a:58:9f:2b:9f:fc:56:29:39:7d:a9:99:
ae:d9:8a:6c:05:25:35:a9:ca:d2:1c:5c:58:95:e5:b4:09:ee:
93:3a:6b:fc:9f:5d:47:89:75:2b:3a:8a:50:a5:17:46:48:39:
6c:55:7f:64:4d:e4:55:e0:03:1f:cc:77:50:cb:b0:69:cf:80:
9b:71:43:b8:00:4d:7a:f7:8e:16:49:62:1b:34:0a:18:66:1e:
b6:02:cc:89:ea:57:72:dd:d5:bd:8f:d7:0f:d0:ce:d7:f0:3d:
ce:cb:17:e5:71:58:bf:da:da:64:c8:c8:0d:48:c1:57:a0:2b:
bb:69:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:47:08 2025 by rpki-client on console.sobornost.net