Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/o9vxMPP1GSi0SeCJXATA3pZ1Ghk.roa
File: o9vxMPP1GSi0SeCJXATA3pZ1Ghk.roa (raw, json)
Hash identifier: y8oMua2IQUv7AgfC2lg0eVF1b8EaY7pzSxktUIeLqaE=
Subject key identifier: A3:DB:F1:30:F3:F5:19:28:B4:49:E0:89:5C:04:C0:DE:96:75:1A:19
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 0193203032E89876E037DB16465274FCFF90
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/o9vxMPP1GSi0SeCJXATA3pZ1Ghk.roa
Signing time: Tue 12 Nov 2024 11:44:09 +0000
ROA not before: Tue 12 Nov 2024 11:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15954
IP address blocks: 31.24.120.0/21 maxlen: 21
31.47.72.0/21 maxlen: 21
37.247.120.0/21 maxlen: 21
91.216.219.0/24 maxlen: 24
185.49.184.0/22 maxlen: 22
185.57.196.0/22 maxlen: 22
185.66.72.0/24 maxlen: 24
185.66.73.0/24 maxlen: 24
185.66.74.0/24 maxlen: 24
185.203.224.0/22 maxlen: 22
193.247.194.0/24 maxlen: 24
194.176.119.0/24 maxlen: 24
217.18.32.0/20 maxlen: 20
2a01:a940::/32 maxlen: 32
2a01:a941::/32 maxlen: 32
2a01:a942::/32 maxlen: 32
2a02:2810::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:30:32:e8:98:76:e0:37:db:16:46:52:74:fc:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Nov 12 11:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3dbf130f3f51928b449e0895c04c0de96751a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:a1:23:ea:bd:ec:6b:b5:e8:92:de:c3:de:
dc:4a:cc:90:b8:bc:d1:32:59:be:d0:d4:6f:b5:48:
82:66:a0:cc:0a:6b:de:c4:85:ef:32:73:df:7b:9c:
8d:53:af:f7:2c:f2:f7:5b:14:e1:4f:ce:95:89:6c:
d0:71:52:60:61:be:b7:ce:e9:d5:a0:7b:08:fb:5d:
6a:5d:c5:f9:0d:62:01:97:b9:b5:13:10:bb:41:77:
99:e5:80:af:59:3d:fa:11:c7:ea:9e:91:4a:f3:91:
be:81:24:a9:10:c6:95:78:92:0b:3d:c1:84:4c:db:
69:00:51:e9:85:23:fc:21:e4:8c:0f:12:a3:e9:55:
6c:49:25:3f:da:e8:9e:84:b7:a5:fb:b6:ae:66:66:
36:88:d3:93:60:91:b3:72:01:50:7c:39:ba:84:f8:
f3:d6:a5:78:b5:d6:13:ae:f6:02:35:1d:ad:0a:ed:
8b:78:50:c9:fb:09:c5:7e:23:08:20:b6:a9:88:f6:
f3:00:63:33:01:9e:d2:1f:a2:b1:a1:59:19:92:a6:
85:fb:c6:7c:5a:30:56:9d:16:6a:78:0d:78:c8:73:
13:4c:9c:5e:9c:ba:59:78:1f:b7:2a:14:96:80:14:
e0:2f:36:0a:a6:a3:ea:d8:de:c4:fd:31:c4:41:51:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:F1:30:F3:F5:19:28:B4:49:E0:89:5C:04:C0:DE:96:75:1A:19
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/o9vxMPP1GSi0SeCJXATA3pZ1Ghk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.120.0/21
31.47.72.0/21
37.247.120.0/21
91.216.219.0/24
185.49.184.0/22
185.57.196.0/22
185.66.72.0-185.66.74.255
185.203.224.0/22
193.247.194.0/24
194.176.119.0/24
217.18.32.0/20
IPv6:
2a01:a940::-2a01:a942:ffff:ffff:ffff:ffff:ffff:ffff
2a02:2810::/32
Signature Algorithm: sha256WithRSAEncryption
08:3e:02:a8:49:10:d9:ba:84:25:e0:2a:1c:dd:6e:35:7d:a6:
7c:7c:ee:7d:29:cc:ea:b5:a7:2f:2a:05:6a:ce:7e:19:4f:70:
29:72:20:8a:ab:9c:37:bf:5a:01:db:b6:cd:39:45:4e:4c:e0:
8a:fd:0e:84:aa:99:7f:f9:76:af:a2:d7:49:81:60:c6:01:b6:
82:a1:72:f0:8b:03:e1:2e:96:a2:a5:32:6e:38:d4:ad:04:26:
30:37:a8:34:5e:16:96:3b:59:51:94:35:21:33:fc:e7:c0:e9:
96:cf:6f:f4:9c:2e:64:06:8c:21:72:a9:b2:bb:62:37:c9:28:
20:4c:99:f9:6e:c8:46:59:77:dd:50:87:a6:be:1e:e4:c4:65:
70:4b:f4:24:b9:d4:d9:c0:86:44:b8:e3:d9:f0:8a:53:d4:77:
ec:d9:64:ac:7d:55:bd:d4:2a:d2:32:47:fc:59:c4:55:b9:d1:
fe:0d:54:a6:7a:d0:be:39:cc:9e:97:40:6e:95:83:ff:6c:94:
79:14:83:c9:8d:0e:e2:d5:cc:97:84:37:1f:40:48:60:fe:03:
37:e5:ca:4f:93:44:68:ee:c8:4b:fe:cb:e1:32:0f:49:a5:96:
90:b5:36:4f:ef:59:43:3d:dc:9b:27:dd:d4:14:80:f5:ed:9e:
a9:54:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:10 2024 by rpki-client on console.sobornost.net