Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/V4rBn9MIp8KUtarYPueWHYQE6JA.roa
File: V4rBn9MIp8KUtarYPueWHYQE6JA.roa (raw, json)
Hash identifier: 2IA4AAzngv9i3J7VAsp+kwbHYUSy9SgWlVB+T7teQOM=
Subject key identifier: 57:8A:C1:9F:D3:08:A7:C2:94:B5:AA:D8:3E:E7:96:1D:84:04:E8:90
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 06A1CDB6
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/V4rBn9MIp8KUtarYPueWHYQE6JA.roa
Signing time: Fri 04 Feb 2022 18:43:21 +0000
ROA not before: Fri 04 Feb 2022 18:43:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.233.127.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111267254 (0x6a1cdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Feb 4 18:43:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=578ac19fd308a7c294b5aad83ee7961d8404e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:1d:a8:e1:7e:61:3c:b2:54:d3:99:a3:b4:
37:dd:89:d2:6c:0e:b7:c1:c1:b8:ba:1b:48:79:41:
03:c2:30:6e:4b:5f:4e:ac:e7:ab:4f:33:d5:cf:05:
ac:2a:1c:0f:43:b3:a9:83:56:80:fc:f0:7b:f8:e1:
f5:71:98:09:f3:43:d1:83:28:b9:dc:c1:c9:ae:56:
1e:ea:8f:1c:74:5c:f8:8e:19:7d:ce:43:24:cc:2b:
50:fe:e0:59:47:0c:81:7c:67:80:10:de:df:d4:f0:
f4:f6:8a:b0:ed:6c:62:db:15:5d:79:df:b0:a7:e8:
df:a8:e7:b3:16:a9:8d:65:4b:d5:f2:77:81:32:d4:
dc:c1:22:23:dc:fe:2c:81:b0:30:a3:c5:13:25:a1:
e6:9d:6e:e7:7e:3f:13:84:d8:a4:84:26:c3:78:e3:
09:95:9d:1b:2e:99:5f:2a:07:a7:2c:46:72:6d:92:
10:81:a9:b1:2c:f0:4a:27:7f:45:74:0c:a0:e6:43:
6d:1e:a7:0d:60:9a:76:b0:26:94:eb:22:21:d7:39:
ec:43:88:bc:3c:97:dd:91:1a:4a:b8:02:b3:10:73:
de:82:74:0d:6d:53:38:71:ff:fc:6f:d8:ce:3d:b0:
20:93:6f:18:7d:25:4d:02:1e:dd:9e:24:d0:d8:6c:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:C1:9F:D3:08:A7:C2:94:B5:AA:D8:3E:E7:96:1D:84:04:E8:90
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/V4rBn9MIp8KUtarYPueWHYQE6JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.156.0/24
185.233.127.0/24
194.113.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1c:76:a5:7c:0f:bc:05:2e:65:9c:da:96:47:ff:71:ca:b2:
ce:3f:20:c2:09:74:fc:db:5d:4b:f7:b0:58:68:ce:70:f9:14:
ea:7b:f5:d5:82:d5:df:7d:59:1a:37:2d:dc:47:ca:cd:04:31:
06:7a:d8:e9:fe:b5:c6:a7:69:0c:e5:97:17:a6:49:33:49:77:
56:ce:e6:88:44:a9:dd:1d:38:d6:f7:43:e5:81:35:a7:ec:22:
2f:f9:05:62:17:d1:63:4c:42:3c:69:2a:99:0b:01:1d:88:ee:
a6:cd:c3:b6:98:bd:5f:67:77:4a:05:6c:14:e4:af:0a:a1:2a:
71:43:a8:d0:7f:a8:0a:27:8d:be:57:ca:44:5e:87:cd:98:40:
68:2c:a7:66:1c:11:1a:24:35:92:31:ee:d5:b4:c4:03:3c:98:
69:25:1e:bd:e3:a6:de:b0:eb:96:a4:3e:e5:06:34:e2:8b:a1:
6d:46:8b:87:74:81:4a:42:67:b2:38:e1:e8:ab:14:95:72:15:
bc:83:b9:54:16:0e:c2:a1:bd:70:83:a0:8e:ca:d6:c6:51:d5:
63:14:01:23:f8:4b:72:6c:00:f9:c1:07:16:a7:9e:0b:55:d3:
79:ee:c8:82:19:98:74:e1:ba:7f:c6:ba:23:31:ea:1f:8e:60:
52:96:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:53 2025 by rpki-client