Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa
File: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (raw, json)
Hash identifier: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=
Subject key identifier: D0:83:9B:2D:73:63:66:92:FE:36:A1:CB:90:61:51:B6:C8:66:67:86
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 019425FDDF4B7EE382861B173C313A32EC42
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15954
IP address blocks: 31.24.120.0/21 maxlen: 21
31.47.72.0/21 maxlen: 21
37.247.120.0/21 maxlen: 21
91.216.219.0/24 maxlen: 24
185.49.184.0/22 maxlen: 22
185.57.196.0/22 maxlen: 22
185.66.72.0/24 maxlen: 24
185.66.73.0/24 maxlen: 24
185.66.74.0/24 maxlen: 24
185.203.224.0/22 maxlen: 22
193.247.194.0/24 maxlen: 24
194.176.119.0/24 maxlen: 24
217.18.32.0/20 maxlen: 20
2a01:a940::/32 maxlen: 32
2a01:a941::/32 maxlen: 32
2a01:a942::/32 maxlen: 32
2a02:2810::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:df:4b:7e:e3:82:86:1b:17:3c:31:3a:32:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0839b2d73636692fe36a1cb906151b6c8666786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:45:d5:32:d6:d2:ef:98:99:32:b5:ae:4c:
23:b6:c2:e2:61:f9:7a:e9:fe:e3:4a:94:46:0f:b7:
72:0b:e4:d8:21:e9:66:c4:0f:ff:0c:47:b1:45:19:
f4:2d:d7:1f:71:6c:00:13:b2:01:d4:39:3f:87:a5:
73:14:66:34:70:78:83:bf:c9:61:62:c1:1d:a1:fa:
c4:53:7a:da:bd:05:9c:a5:54:14:22:73:b0:e2:1b:
7f:fd:8e:5f:ee:67:54:f8:c9:f8:84:c2:6c:65:e1:
90:c1:ce:14:fa:db:2e:fe:c1:6d:0c:12:13:52:f8:
6d:f8:bb:00:a1:7c:e3:64:bf:2c:8f:4b:41:02:c6:
9b:1d:86:76:fe:88:55:8e:98:76:b9:5c:a2:7a:75:
86:3c:8c:b6:1d:ed:28:9c:5b:10:c0:6f:73:d5:a3:
d5:71:75:ac:30:41:e6:2e:c3:0f:9e:92:ee:0e:01:
90:71:6d:68:34:0f:9c:fb:1b:b3:47:dc:53:6b:77:
cb:65:bf:2f:5b:10:72:38:38:f2:92:ed:3c:24:41:
81:a4:7d:16:11:bc:e7:dd:3f:81:f7:79:1c:1d:26:
d2:91:db:14:f4:80:bd:97:60:ad:c2:4f:37:02:40:
7a:5e:7a:d5:cf:c1:70:3e:ff:71:e3:c2:49:8e:fd:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:9B:2D:73:63:66:92:FE:36:A1:CB:90:61:51:B6:C8:66:67:86
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.120.0/21
31.47.72.0/21
37.247.120.0/21
91.216.219.0/24
185.49.184.0/22
185.57.196.0/22
185.66.72.0-185.66.74.255
185.203.224.0/22
193.247.194.0/24
194.176.119.0/24
217.18.32.0/20
IPv6:
2a01:a940::-2a01:a942:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2810::/32
Signature Algorithm: sha256WithRSAEncryption
64:a4:57:6e:8f:6f:6c:cd:d9:b8:1a:58:10:f2:b9:dd:89:66:
39:63:41:13:da:e5:b9:bc:7e:5b:88:35:32:c6:dc:d4:12:0f:
96:07:9c:6f:e3:43:4f:03:ef:c3:4b:a4:f2:9e:54:2b:dc:a2:
da:5f:84:22:91:13:73:56:d5:ec:1b:d2:08:6b:51:c3:61:75:
4b:c7:90:4a:76:36:b2:c9:83:25:ab:88:88:2e:a3:2d:32:b6:
ea:50:60:cc:a8:12:a4:38:98:c9:02:c3:cf:09:7d:16:84:fb:
2f:5c:bf:56:e5:08:01:73:c3:86:f7:16:f8:ea:80:e7:60:c1:
e7:a6:06:c5:e3:46:08:3d:b0:35:22:a2:2e:67:9e:e6:73:78:
8e:d9:90:a2:07:47:d6:40:3d:fc:ca:86:1d:ed:89:fe:bf:55:
33:43:9b:a7:93:d1:8e:ea:db:fd:d8:7d:2d:f9:9e:7c:dc:68:
b1:29:cd:23:3c:12:9a:1a:e1:f6:24:d2:37:a9:4c:8c:6a:9f:
77:aa:7d:77:b7:61:fd:65:de:13:71:62:0f:06:d7:ff:13:17:
34:29:6b:68:22:02:fd:3a:b6:56:b0:04:c5:57:3c:99:1f:a4:
c8:b7:68:7a:9a:1d:58:e5:c7:9e:5c:c2:4e:da:99:7a:88:5f:
de:44:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net