Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/0CytvhJudNwvmE_qIywCHCo6NeE.roa
File: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (raw, json)
Hash identifier: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=
Subject key identifier: D0:2C:AD:BE:12:6E:74:DC:2F:98:4F:EA:23:2C:02:1C:2A:3A:35:E1
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019428279A22D4E9F811CE80B678CD647F93
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/0CytvhJudNwvmE_qIywCHCo6NeE.roa
Signing time: Thu 02 Jan 2025 17:54:31 +0000
ROA not before: Thu 02 Jan 2025 17:54:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60072
IP address blocks: 31.171.192.0/21 maxlen: 21
31.171.197.0/24 maxlen: 24
31.171.198.0/24 maxlen: 24
185.58.216.0/22 maxlen: 22
185.58.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:9a:22:d4:e9:f8:11:ce:80:b6:78:cd:64:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jan 2 17:54:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d02cadbe126e74dc2f984fea232c021c2a3a35e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:57:f0:52:df:0e:5e:91:03:27:90:d9:a0:
ba:60:04:d8:e6:b1:29:1c:36:f8:63:c0:d4:06:d8:
68:14:b5:4b:cc:51:62:99:b8:ea:b1:5b:2c:e8:0d:
9e:fd:cb:6d:a6:29:b0:7f:db:a9:ce:08:8f:45:f8:
7b:83:0c:92:bc:e0:e8:f6:32:ee:35:7b:2d:ce:28:
e1:49:60:51:06:45:0d:5e:f0:dd:3c:5f:0c:33:a6:
40:ca:60:c4:60:ad:90:64:fc:83:61:09:8d:34:28:
d1:6e:97:6a:fb:8d:df:b4:c6:95:62:06:8e:08:a4:
46:4c:15:e9:0a:25:4b:68:ce:ef:f1:bd:07:de:1b:
bb:de:fa:b1:f8:11:1e:bd:57:a0:cd:09:36:52:ee:
da:af:4d:8f:cd:35:48:4c:fe:7b:17:f4:5d:7c:26:
1a:e6:a2:e8:41:17:fd:37:ca:c4:5c:b5:87:79:55:
b9:8c:3c:d0:f4:2b:9d:f3:10:6f:c8:21:30:b5:8b:
67:f4:2a:2c:7f:f2:06:43:05:59:12:24:88:d2:19:
4d:f3:9b:f3:1e:7c:76:f9:18:a5:35:c6:37:21:1a:
c1:14:c9:df:ae:12:15:ab:4b:23:ec:21:25:43:9b:
cb:6d:dd:8a:ec:c3:74:98:dd:f7:15:01:cb:a5:e3:
04:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:AD:BE:12:6E:74:DC:2F:98:4F:EA:23:2C:02:1C:2A:3A:35:E1
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/0CytvhJudNwvmE_qIywCHCo6NeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.192.0/21
185.58.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a0:56:24:2d:82:63:cf:4a:b2:fb:b1:81:b2:5e:f9:13:d8:
73:e9:6d:40:05:7a:f0:12:67:79:c6:39:dc:43:55:8b:b3:d5:
18:7d:68:3a:9a:5e:8a:f6:e9:7b:06:c1:92:13:03:b7:f7:5b:
2e:d8:fc:82:1f:cd:1a:e6:76:5e:f4:8e:82:01:97:4e:21:ea:
77:e5:cc:9f:39:99:19:31:c0:a8:a3:ec:6c:fe:6f:1d:94:fc:
68:ca:7f:41:01:f8:04:c4:9d:ce:11:3e:e7:49:9c:5f:a1:50:
8f:d5:6a:1e:e3:b3:5d:e1:b4:46:b7:f6:33:ab:63:41:3c:c7:
8e:6a:94:1b:e7:d5:cb:b9:57:98:ec:4c:17:29:7e:34:09:c5:
8e:5a:20:02:3b:cd:25:26:14:af:a7:ae:30:65:c5:25:34:38:
89:b0:0e:00:04:79:0a:79:bc:46:ff:97:70:ac:e0:9f:79:23:
58:5b:c3:cf:ab:3e:05:f1:1a:f4:76:48:2d:fe:d1:0f:b1:3b:
f2:d9:22:33:f5:8a:1b:ad:cd:af:51:51:ee:d1:98:72:0d:8d:
7e:bc:2e:28:e6:0b:ff:52:97:ea:75:85:ad:46:22:59:64:65:
3a:d0:1e:4c:0c:cd:f5:05:a8:46:49:a2:0c:8f:02:7b:1b:ad:
59:3d:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net