Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/gjO8B4zRln-E0qJ_xGCmtI2dqhU.roa
File: gjO8B4zRln-E0qJ_xGCmtI2dqhU.roa (raw, json)
Hash identifier: P6Tu9SmLOfUm9vjbcCtOEDV62kN5LnxbiJbgWi6zwoM=
Subject key identifier: 82:33:BC:07:8C:D1:96:7F:84:D2:A2:7F:C4:60:A6:B4:8D:9D:AA:15
Certificate issuer: /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial: 0194258E6C1CFCD114CC86C74CD21D2A2B5A
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/gjO8B4zRln-E0qJ_xGCmtI2dqhU.roa
Signing time: Thu 02 Jan 2025 05:47:58 +0000
ROA not before: Thu 02 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60388
IP address blocks: 185.31.108.0/22 maxlen: 32
212.73.96.0/19 maxlen: 32
212.73.99.0/24 maxlen: 24
212.73.102.0/24 maxlen: 24
212.73.103.0/24 maxlen: 24
2a00:b4a0::/32 maxlen: 128
2a01:70c0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:6c:1c:fc:d1:14:cc:86:c7:4c:d2:1d:2a:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
Validity
Not Before: Jan 2 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8233bc078cd1967f84d2a27fc460a6b48d9daa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:15:a4:f2:79:00:83:fe:19:ea:44:17:5e:
4e:d4:c6:d5:e5:98:be:72:cf:d8:60:b9:4a:d2:a7:
2d:ee:18:86:41:89:b2:98:13:17:8e:03:00:48:42:
7c:62:9b:86:45:bf:d9:02:af:eb:bb:1b:26:a4:e8:
22:22:02:c6:55:c9:3e:fe:c4:98:df:b5:89:13:bd:
0a:0d:c5:f0:67:66:37:bf:ea:fc:41:dc:64:05:38:
ed:6a:59:01:7f:c2:c8:44:61:a1:74:40:1d:98:ca:
c8:f9:1a:33:d6:77:4c:1d:dc:a5:71:9d:ed:8d:b1:
f7:07:e4:7d:bd:38:ad:de:ee:b5:0f:b2:8f:fb:1e:
fb:34:b2:d5:09:57:48:9e:4e:a5:6b:d2:99:54:54:
f2:18:7b:17:f2:6f:28:b2:48:cd:6e:59:5f:43:58:
80:90:1b:2c:73:fc:90:b1:d7:1c:2b:32:85:b2:c2:
ed:dc:9a:84:8e:c0:38:cd:22:d4:87:3d:1c:5b:bb:
f1:a1:97:35:a0:25:d5:a4:27:a5:18:83:54:16:7b:
14:61:64:f4:76:b2:20:26:f3:16:90:5d:94:6a:2f:
25:c3:17:77:1f:9d:b3:63:76:54:e6:cc:91:2f:ad:
1e:4d:d5:d2:85:a5:db:21:a8:ff:4c:dd:b1:41:ff:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:BC:07:8C:D1:96:7F:84:D2:A2:7F:C4:60:A6:B4:8D:9D:AA:15
X509v3 Authority Key Identifier:
keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/gjO8B4zRln-E0qJ_xGCmtI2dqhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.108.0/22
212.73.96.0/19
IPv6:
2a00:b4a0::/32
2a01:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:7c:ee:cc:d7:e0:9f:91:6f:49:b3:ca:ca:ff:90:99:4f:24:
fb:fd:d0:66:18:49:93:96:f3:94:2b:f1:15:d6:af:77:dd:58:
2e:45:ba:7b:22:b7:fd:f2:d7:8c:05:52:c2:0c:6d:a3:74:c1:
d7:c7:0b:1b:37:50:d7:59:fc:91:fd:0c:82:cd:20:43:ad:8f:
17:af:5e:65:4d:a0:51:41:e0:5c:ff:60:61:bf:f6:86:0e:ce:
69:b4:d4:a4:9a:23:ae:07:5a:24:01:a5:d6:76:d4:bb:50:fe:
54:45:d1:c9:46:ae:97:0c:5d:4f:27:dc:9d:60:40:de:e2:2a:
3e:6b:2a:07:4c:a3:94:19:b7:33:07:50:be:4d:84:40:91:ed:
78:d2:e2:17:ee:73:00:45:a6:e8:84:cf:b2:cf:77:aa:d8:1a:
d3:d0:e0:e5:bb:39:b6:30:31:42:81:fb:33:10:09:3b:60:44:
eb:1d:94:81:e5:99:72:fd:3e:30:65:8f:0b:a0:29:d6:3b:89:
5e:f9:68:2c:6b:97:1d:2e:07:57:ad:9f:dd:f3:4d:71:ac:23:
cb:ca:ef:56:79:26:5d:3a:56:0d:22:85:dd:f6:c5:48:52:a6:
f6:77:28:c3:3d:84:26:a4:bf:3b:bb:ab:38:68:ca:29:13:00:
0a:32:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:40 2025 by rpki-client on console.sobornost.net