Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa
File: 8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa (raw, json)
Hash identifier: Fwwqse9/8KZUX187OjpN/LZOPaaW4loyUBTUxSbinX0=
Subject key identifier: F2:FD:98:FE:10:CC:E0:FE:20:9B:A5:4B:97:67:CC:D6:D6:17:50:C6
Certificate issuer: /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial: 019422FC2D25DCE07E546713FB0C4D00425A
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa
Signing time: Wed 01 Jan 2025 17:48:59 +0000
ROA not before: Wed 01 Jan 2025 17:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51428
IP address blocks: 31.134.32.0/20 maxlen: 20
178.212.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2d:25:dc:e0:7e:54:67:13:fb:0c:4d:00:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Validity
Not Before: Jan 1 17:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2fd98fe10cce0fe209ba54b9767ccd6d61750c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:82:65:c1:fd:d1:eb:3a:3e:d2:1c:8c:b4:
7c:9b:a7:d2:11:04:9c:cb:35:00:43:66:f2:27:1e:
04:08:57:72:77:d8:d5:48:4b:53:f3:1a:08:3a:6f:
3a:64:ea:7d:2b:4b:9b:7d:cb:1b:3a:86:00:2e:58:
b0:ff:eb:4a:90:7f:3f:5d:63:f2:8c:de:b5:ae:d1:
3e:a6:e3:eb:ba:a4:ea:64:06:dd:54:9e:32:98:bf:
11:ad:b8:a7:8a:88:c5:82:db:d8:57:b5:aa:73:03:
04:52:79:e2:5e:b8:e4:72:6b:30:cf:0f:ed:f0:24:
c8:e8:71:11:8a:bf:72:cd:e0:a1:32:c8:92:56:48:
4a:40:ce:27:1a:ae:0b:35:7f:35:ab:45:d4:82:6d:
ad:ec:e4:2c:b7:b6:5f:8e:a5:38:3c:32:9f:6e:84:
46:c7:9c:84:28:b1:25:5f:8d:28:0e:1b:b0:18:06:
b8:4c:89:49:65:e3:78:13:08:9b:70:b2:65:16:82:
aa:06:67:6b:ac:62:12:94:03:db:ec:25:4a:82:60:
71:8b:da:4a:2d:1b:32:08:da:9a:09:1f:3a:5c:35:
40:9b:14:2e:1b:1c:7c:6b:a9:46:3f:f2:a5:a9:da:
ba:8e:7d:c1:ec:b4:85:11:a6:4c:97:9a:98:c8:11:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FD:98:FE:10:CC:E0:FE:20:9B:A5:4B:97:67:CC:D6:D6:17:50:C6
X509v3 Authority Key Identifier:
keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.32.0/20
178.212.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:c8:7b:ab:9d:94:17:43:33:a7:ee:0a:82:49:fa:f6:70:a3:
78:da:ac:69:71:ba:b9:cf:c2:2e:85:68:65:df:a9:8f:03:33:
85:d4:7b:f3:f4:50:56:dd:81:fe:18:1f:3c:d1:4b:05:ff:d0:
6d:10:12:81:b0:30:fa:0e:e1:44:ce:9f:d7:92:73:f8:d0:14:
62:4e:db:96:f1:b5:a7:42:aa:e1:f6:4a:6e:3f:c3:35:2d:75:
d6:23:8e:5a:f9:8b:7e:f2:f3:7a:c7:e2:73:ae:c2:7b:a9:c6:
07:3a:8d:d3:33:e0:20:d4:2e:60:83:8c:54:8a:0e:03:a1:bd:
0a:f2:ee:8f:16:b1:69:89:e9:9f:65:78:df:41:a1:34:df:8a:
ef:8e:f9:37:3e:1e:a9:85:97:f5:18:e3:37:d5:bc:ed:24:ec:
09:b7:8d:77:23:95:a8:cb:af:f9:de:fd:91:4a:0c:11:23:9b:
ab:5d:1d:36:c2:08:9a:43:28:88:7f:97:97:7e:ea:60:ac:f8:
b3:f9:96:38:e3:2e:c1:0e:33:8d:61:53:5a:51:98:8f:93:b1:
a8:2d:fa:fd:9a:49:09:92:42:f2:55:0c:b0:8c:b0:6d:af:49:
c6:47:89:78:aa:dc:5e:57:a4:87:43:f9:77:21:e4:e6:dc:26:
d9:c0:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:07 2025 by rpki-client on console.sobornost.net