Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa
File: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (raw, json)
Hash identifier: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=
Subject key identifier: AC:7A:18:14:F4:34:4F:D1:DE:7F:EC:FA:B3:EA:49:EE:2D:32:C9:0A
Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial: 0194221F437FD6EC576ADDAE64F00D2C0045
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa
Signing time: Wed 01 Jan 2025 13:47:41 +0000
ROA not before: Wed 01 Jan 2025 13:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57665
IP address blocks: 31.222.16.0/21 maxlen: 21
185.226.44.0/22 maxlen: 22
185.241.104.0/22 maxlen: 22
185.241.104.0/23 maxlen: 23
185.241.104.0/24 maxlen: 24
185.241.105.0/24 maxlen: 24
185.241.106.0/23 maxlen: 23
185.241.106.0/24 maxlen: 24
185.241.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:43:7f:d6:ec:57:6a:dd:ae:64:f0:0d:2c:00:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7a1814f4344fd1de7fecfab3ea49ee2d32c90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:06:af:dd:a0:51:34:58:4b:25:21:ad:dc:
ea:57:bf:ae:14:88:e9:62:6d:15:a6:1c:d0:33:95:
79:cc:00:81:d8:19:96:43:6e:d4:be:dc:a8:1b:23:
ea:91:46:be:86:d6:5c:06:98:23:47:15:00:35:5a:
9c:8c:8a:bc:98:4c:68:11:58:2d:60:17:43:6b:20:
81:7d:d1:13:75:16:ad:36:4c:cc:75:ba:0a:8e:d8:
6c:a9:a5:df:42:b7:d4:fd:ac:ca:e3:e7:4a:57:d2:
98:a5:c7:5c:8e:f9:fb:36:c0:92:00:11:c3:67:e0:
9a:8e:37:c2:3a:89:1e:46:93:73:53:fa:2f:fe:77:
38:5c:89:6f:6d:72:9b:54:7c:69:62:a7:a8:3e:ce:
82:65:02:02:c5:3e:29:89:1f:dd:7f:5a:7c:9e:5d:
f4:7e:50:bc:35:53:3a:2d:e2:49:0f:39:fc:50:61:
d0:14:00:f8:5f:10:be:9e:48:58:ad:7a:7d:6d:9d:
27:72:bf:71:e0:f0:80:08:f3:a5:5a:16:4a:3a:f5:
1e:74:ea:29:0e:9c:3a:00:a6:74:91:82:82:c0:6e:
48:98:c0:c6:66:47:26:1a:3d:ac:5e:82:38:c8:af:
d3:f9:81:e9:2f:b5:49:9a:8d:d2:db:f8:cd:33:60:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:18:14:F4:34:4F:D1:DE:7F:EC:FA:B3:EA:49:EE:2D:32:C9:0A
X509v3 Authority Key Identifier:
keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.16.0/21
185.226.44.0/22
185.241.104.0/22
Signature Algorithm: sha256WithRSAEncryption
88:fd:72:64:c8:b2:0e:c1:80:d4:e1:fd:75:0c:57:4f:e5:31:
29:a8:35:1d:43:c6:2d:85:62:a4:13:03:20:9f:b7:39:e6:5f:
d6:48:ad:48:5d:4f:7b:fa:d6:78:20:d6:ce:95:7f:b9:74:9f:
ee:53:b9:f6:8c:bc:08:7e:24:d8:90:e9:ca:9b:ac:40:dc:97:
fd:ec:07:3f:35:bc:bd:aa:4e:6e:43:97:d7:09:e2:df:e2:49:
1a:e1:90:38:ed:06:91:34:ae:1b:c0:ff:30:b8:70:c9:94:6a:
63:f2:8f:20:e9:8b:b7:d4:a0:dc:45:52:db:66:d5:6f:27:92:
5e:40:9f:f9:16:3e:b4:ae:04:1b:47:11:c2:cc:6d:56:4e:b4:
45:dc:21:19:23:fc:2e:4c:b9:e6:81:15:bd:86:40:fe:5f:7e:
c4:77:17:6a:98:b8:ad:95:e2:0e:66:e8:29:48:30:f5:85:3d:
cf:3c:bf:cb:52:fa:d3:c0:18:d4:70:6c:fd:0e:42:09:97:10:
7b:13:74:19:51:98:95:dd:fc:9b:12:3e:ed:3f:16:ad:e9:b0:
91:55:d4:f2:9a:cc:9d:cf:a1:15:67:bf:13:80:26:e8:15:a4:
e3:e5:62:8a:2d:e1:17:5c:1f:13:bc:09:b3:f6:0d:08:e4:fd:
fe:d4:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net