Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/P8taCIHYKyNiPZlcepPaQY_uTYI.roa
File: P8taCIHYKyNiPZlcepPaQY_uTYI.roa (raw, json)
Hash identifier: dsBwLrc7JTcaccnfOEHvTbIENpVJWwXLxgV4ZppjPl8=
Subject key identifier: 3F:CB:5A:08:81:D8:2B:23:62:3D:99:5C:7A:93:DA:41:8F:EE:4D:82
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019421441ED58D83DE8958FA46FA88318991
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/P8taCIHYKyNiPZlcepPaQY_uTYI.roa
Signing time: Wed 01 Jan 2025 09:48:19 +0000
ROA not before: Wed 01 Jan 2025 09:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211757
IP address blocks: 31.43.172.0/23 maxlen: 24
31.43.172.0/24 maxlen: 24
31.43.173.0/24 maxlen: 24
185.242.186.0/24 maxlen: 24
2a10:9840::/29 maxlen: 48
2a10:9840:1::/48 maxlen: 48
2a10:9840:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1e:d5:8d:83:de:89:58:fa:46:fa:88:31:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Jan 1 09:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fcb5a0881d82b23623d995c7a93da418fee4d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:93:cf:f5:f0:62:53:4f:14:d7:de:98:4b:
09:d1:8d:21:65:ff:54:b3:8e:03:58:0a:51:eb:b7:
4b:7e:db:45:8f:b8:0d:59:48:b1:8e:62:bc:f0:0a:
12:9d:27:40:92:de:67:e5:d4:b4:1d:5d:4d:ea:e5:
59:36:d9:e2:ee:43:88:e7:83:6d:0a:db:2a:92:23:
fc:2d:0f:36:82:a0:f1:30:6f:3a:68:9a:ce:6c:d2:
b2:b7:d4:bb:a4:2f:aa:bb:63:c0:fd:89:f0:b3:17:
f6:21:ea:29:16:d7:d2:dc:6a:e8:00:c4:c5:a4:b9:
87:a2:ff:9c:db:fd:3e:0b:c0:3d:6a:1e:03:e3:fc:
e0:02:53:e7:ad:ee:40:97:7b:55:95:6e:34:b6:4a:
5e:74:78:40:6d:53:4d:4b:12:a6:56:99:5d:77:38:
ba:da:93:5f:f0:68:a2:5b:95:fb:66:d1:ac:a4:2b:
3a:99:33:04:82:e1:09:97:39:e7:7e:db:95:42:e3:
70:cc:f8:e4:e9:a1:fc:c0:b3:43:8c:99:96:30:f4:
bc:77:ee:51:53:c2:13:88:93:0f:c0:a8:b9:a7:fa:
f9:bd:94:d5:ed:00:d2:53:fb:be:5c:cb:17:bc:a9:
f6:4b:33:64:cd:83:f8:28:a9:7f:8f:29:f5:d1:2e:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CB:5A:08:81:D8:2B:23:62:3D:99:5C:7A:93:DA:41:8F:EE:4D:82
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/P8taCIHYKyNiPZlcepPaQY_uTYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.172.0/23
185.242.186.0/24
IPv6:
2a10:9840::/29
Signature Algorithm: sha256WithRSAEncryption
89:c5:5f:c0:62:06:56:96:f6:28:ab:4c:bd:e9:a9:d6:f1:6b:
56:65:94:c9:f6:a4:41:04:37:a9:17:c5:41:40:ba:bf:cb:57:
f2:31:97:87:cd:1a:03:03:4e:eb:3e:b0:b2:7c:5e:6b:93:22:
80:be:31:56:bf:02:7d:db:a7:b6:43:24:e0:f6:30:b3:d5:3d:
96:40:f8:d9:7f:37:bb:4e:39:61:75:97:0f:15:b4:b3:a9:02:
7f:cc:3e:26:d9:4d:30:29:20:0f:f7:84:47:d5:e5:15:be:eb:
be:3a:7c:60:5b:73:4e:80:d3:4a:78:dd:ab:8d:79:6c:22:fe:
03:bc:6f:dd:4c:3d:e4:c8:bf:62:28:e7:0a:cf:be:df:01:28:
1b:8b:15:04:68:5b:79:70:11:ff:e9:bf:04:d9:47:f2:8b:00:
16:49:e8:0e:f7:72:78:ce:77:df:c1:32:75:cb:43:55:98:c2:
57:1b:62:4f:0c:0c:e4:fc:54:fc:5d:26:26:ca:6e:7b:bb:06:
8c:56:2a:7b:c3:67:49:2e:76:fb:51:06:38:0d:cf:f4:80:47:
88:3e:a8:2b:9c:36:01:b8:56:d7:b6:fb:a0:fd:96:86:fd:92:
6f:24:53:1e:d5:e2:4e:3d:f0:a0:25:e0:0a:4e:f0:61:a9:f3:
5f:1d:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:07 2025 by rpki-client on console.sobornost.net