Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/I8ss4EzfBc_E6Ebc96KtodwkTNg.roa
File: I8ss4EzfBc_E6Ebc96KtodwkTNg.roa (raw, json)
Hash identifier: AiTv5W+AlPuM/j/7wO8LKQb21Yhuyp4ro3rVouKC/1Y=
Subject key identifier: 23:CB:2C:E0:4C:DF:05:CF:C4:E8:46:DC:F7:A2:AD:A1:DC:24:4C:D8
Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Certificate serial: 0194206812D21646F9B233198C9CA1A78262
Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/I8ss4EzfBc_E6Ebc96KtodwkTNg.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48438
IP address blocks: 31.43.128.0/19 maxlen: 22
91.210.248.0/22 maxlen: 24
194.26.164.0/22 maxlen: 24
2a0c:b440::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:12:d2:16:46:f9:b2:33:19:8c:9c:a1:a7:82:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23cb2ce04cdf05cfc4e846dcf7a2ada1dc244cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:b8:30:4f:fc:63:c0:6a:15:89:65:e9:66:
06:ac:1e:79:af:42:5a:41:2f:1b:69:31:b6:c0:73:
d6:5a:31:9a:3a:bd:fa:39:04:4d:10:19:f9:03:bd:
57:39:67:a2:91:d1:20:ce:3b:13:84:23:b4:25:f3:
a1:ba:df:89:32:32:8b:f9:21:d9:c5:41:62:bb:82:
48:7a:ca:64:c3:67:29:3a:da:bd:d4:65:23:ca:6f:
2a:4a:27:de:86:07:a1:be:92:65:58:c8:b0:9b:2f:
82:7f:9e:17:15:45:fa:b5:c3:f1:eb:8b:78:14:38:
bf:3b:36:04:37:0f:3c:ce:21:ce:d3:df:4e:04:f9:
31:15:cf:b4:ed:d2:40:72:b9:61:31:4f:52:0e:f1:
34:15:37:32:67:ca:cb:2e:e3:71:dd:94:69:97:e2:
d3:2f:b2:91:b8:93:73:50:7c:47:d4:6c:68:2a:d3:
ea:6c:c0:0a:53:75:6f:11:4f:d0:e6:7e:a4:b9:75:
e2:df:e0:c0:32:1e:11:28:23:b1:75:61:9d:60:e3:
1a:7e:37:ab:5c:bf:df:bf:c6:51:4e:19:e0:90:0c:
03:b8:33:af:28:b5:d3:dc:f3:e4:c2:3d:86:99:01:
7b:e7:5d:59:86:8d:46:ce:fa:51:a0:6d:fa:46:61:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:2C:E0:4C:DF:05:CF:C4:E8:46:DC:F7:A2:AD:A1:DC:24:4C:D8
X509v3 Authority Key Identifier:
keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/I8ss4EzfBc_E6Ebc96KtodwkTNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.128.0/19
91.210.248.0/22
194.26.164.0/22
IPv6:
2a0c:b440::/29
Signature Algorithm: sha256WithRSAEncryption
9d:ca:78:38:0f:a7:37:92:63:6e:40:75:9e:81:00:b4:f4:b7:
90:2f:ed:69:1f:b1:3d:bd:cd:2f:b8:eb:63:db:e1:3d:84:3f:
a9:27:74:a8:22:2b:e4:e2:1d:24:53:35:2a:54:43:b4:4b:6f:
40:16:35:c7:81:74:d6:fb:d5:c0:5e:b5:17:a8:60:96:b6:58:
a6:0c:d8:c0:28:aa:fa:74:f5:fb:c2:ba:81:1b:3d:a5:eb:e1:
ef:38:32:04:46:39:9d:b1:51:89:4f:e8:1b:c5:df:d0:5c:b4:
3b:a7:92:85:2f:13:de:0c:96:d6:62:0c:9b:32:f7:a0:4f:66:
e0:87:84:07:64:35:0a:a2:4d:ed:58:80:86:04:9c:c7:ca:17:
fe:a4:59:de:cb:a5:fe:a7:9b:11:9d:1b:f4:a0:a8:61:2d:e2:
f8:96:a5:d4:3c:d8:bf:03:1f:55:84:ca:a7:b8:74:78:e7:26:
e2:03:95:b1:ec:8b:2e:09:2d:d0:25:cc:72:74:5a:f2:4c:7f:
95:cb:9f:8f:d0:1d:b5:99:21:ee:a1:2a:22:98:7c:59:14:3f:
fd:58:ec:af:1d:f0:39:81:db:c8:ca:eb:36:b3:b6:b7:67:21:
72:b6:fe:c7:83:11:14:a3:c1:74:ff:dd:b7:8b:88:5b:85:07:
e3:e4:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:16 2025 by rpki-client on console.sobornost.net