Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/da9VB6h3swEdWAzfuTn0_VDvx-4.roa
File: da9VB6h3swEdWAzfuTn0_VDvx-4.roa (raw, json)
Hash identifier: +yuygrYttU7aO1ULPUvaq4zXDDfO4EtoXs+OHu2ULlo=
Subject key identifier: 75:AF:55:07:A8:77:B3:01:1D:58:0C:DF:B9:39:F4:FD:50:EF:C7:EE
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0181FC9593613A8A63327EAAC2313EA36751
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/da9VB6h3swEdWAzfuTn0_VDvx-4.roa
Signing time: Thu 14 Jul 2022 12:01:09 +0000
ROA not before: Thu 14 Jul 2022 12:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 29
2a04:27c0::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:95:93:61:3a:8a:63:32:7e:aa:c2:31:3e:a3:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 14 12:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75af5507a877b3011d580cdfb939f4fd50efc7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:30:5e:2a:8a:0e:e3:70:91:d9:21:2c:29:
79:78:8e:39:cf:e8:2e:68:74:85:3e:09:29:79:aa:
b3:0c:97:f9:e9:19:0e:38:4b:31:ab:b5:43:68:f6:
63:15:24:9b:f8:a0:a4:45:ca:13:69:a8:62:69:52:
5a:c4:5d:8c:21:90:37:f9:64:e9:0a:c6:4f:27:b3:
38:21:b2:32:a3:b2:22:1a:29:81:4b:d9:41:3b:f6:
29:3d:69:7a:2b:8c:78:c5:5b:7d:41:c8:2c:e6:1e:
54:8b:a8:66:eb:78:22:5b:a0:40:71:b9:f5:96:aa:
97:b1:fd:28:5f:21:cd:27:f4:e8:c9:09:71:07:82:
9e:21:17:e9:1a:90:b6:d8:15:f4:47:3f:3e:e8:df:
c7:6c:89:67:6d:39:87:62:8d:83:30:8c:e3:01:52:
e1:fa:da:15:06:82:8a:e7:58:3a:d3:b9:b7:a2:20:
73:13:b3:07:8a:f4:48:1a:21:c2:98:33:cc:8d:27:
a7:51:bd:0a:cb:4d:8f:52:44:3a:31:3f:e9:53:71:
80:ed:fb:b3:ae:82:08:a5:fb:3e:5a:91:80:82:ee:
29:4f:87:ad:cc:0b:63:f6:47:a3:13:ea:61:0f:d2:
17:12:aa:55:04:1e:60:63:08:ca:b3:17:6c:36:fc:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:55:07:A8:77:B3:01:1D:58:0C:DF:B9:39:F4:FD:50:EF:C7:EE
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/da9VB6h3swEdWAzfuTn0_VDvx-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
109.74.28.0/23
109.74.31.0/24
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:25:3f:b7:2e:29:35:77:f7:f1:04:43:1e:17:06:fe:61:13:
9c:69:f5:4c:7f:44:78:d4:0d:f8:6c:2f:88:ac:17:b9:a6:78:
cb:4e:7f:4d:4e:13:e3:8e:e0:c3:57:d3:eb:a7:68:3e:f8:b3:
95:b4:dc:3d:fd:12:c3:e2:ae:86:ef:45:46:ff:32:28:2e:0b:
c8:a2:4e:11:90:9b:47:2f:f0:45:fb:6c:60:7d:4f:72:71:1d:
8d:fa:c1:05:e7:85:25:71:72:98:fa:7c:e2:53:cb:09:aa:3a:
b3:ab:39:59:f6:94:ae:f4:4a:1c:1f:6b:f4:71:79:9d:92:2d:
0f:71:3f:d5:84:15:6a:c0:76:2f:0b:1e:9a:8c:24:b3:ba:9e:
92:7f:d7:d0:ff:2b:3b:0f:60:26:dd:f0:35:58:7b:ac:2f:81:
49:8a:a1:36:ef:53:67:48:74:53:41:74:14:51:89:de:e0:21:
f1:a3:c1:04:e4:01:e5:d7:6c:38:30:23:99:bb:bc:8d:a5:7b:
43:ee:7a:34:df:1e:6c:13:3b:e7:87:ba:f3:e9:e2:ec:61:4d:
a7:93:cb:9b:5f:62:e2:7e:65:65:6b:c6:8d:50:57:c2:85:6f:
fc:68:08:73:7e:7b:0c:f9:97:7d:6e:87:bd:b6:fb:c3:ec:9b:
21:1d:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:44 2025 by rpki-client