Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/dLz_hs_QORbsBLSIa-GqwYxnFoY.roa
File: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (raw, json)
Hash identifier: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=
Subject key identifier: 74:BC:FF:86:CF:D0:39:16:EC:04:B4:88:6B:E1:AA:C1:8C:67:16:86
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019427485D49D20E578F96801C5A062D4B07
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/dLz_hs_QORbsBLSIa-GqwYxnFoY.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 31.210.128.0/21 maxlen: 24
37.35.88.0/21 maxlen: 24
45.145.180.0/22 maxlen: 24
87.237.64.0/21 maxlen: 24
93.95.8.0/21 maxlen: 24
94.190.240.0/21 maxlen: 24
94.199.184.0/21 maxlen: 24
109.69.80.0/21 maxlen: 24
151.236.208.0/21 maxlen: 24
185.11.240.0/22 maxlen: 24
185.31.252.0/22 maxlen: 24
185.33.184.0/22 maxlen: 24
185.49.236.0/22 maxlen: 24
185.68.0.0/22 maxlen: 24
185.71.24.0/22 maxlen: 24
185.122.216.0/22 maxlen: 24
195.94.112.0/20 maxlen: 24
195.189.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:49:d2:0e:57:8f:96:80:1c:5a:06:2d:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74bcff86cfd03916ec04b4886be1aac18c671686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4c:7b:69:a9:15:1a:3f:01:ba:3e:4d:a5:05:
33:01:ba:2e:6d:0d:fd:51:88:3e:25:e2:50:5e:20:
85:14:a4:48:b2:ac:c4:44:61:47:6b:8d:0e:6d:02:
c4:c4:6c:bc:15:95:d7:06:68:ca:22:87:73:a5:4c:
89:f8:75:03:32:a9:4e:81:5e:45:4d:f4:c9:11:75:
3d:e1:1d:c6:5e:c7:1d:a1:16:ad:a6:ac:08:44:06:
95:92:25:77:01:68:ec:48:d8:0f:96:d4:73:b2:91:
60:a3:be:c2:78:3f:f8:48:2c:d0:1b:88:fe:c7:84:
3e:52:20:a4:b9:93:16:67:d0:e6:3e:3d:7c:02:ba:
08:c3:07:79:b7:60:d7:a6:d0:58:ec:22:6a:78:67:
7a:9f:e8:9d:8b:5c:27:64:b0:65:c6:4b:3b:99:7e:
f3:83:6d:d9:3e:6f:81:3b:fd:10:4a:23:85:6a:d2:
2f:af:ac:df:d6:b5:1a:a8:1e:05:84:d8:17:12:b0:
27:a0:b6:cc:bd:d7:93:a4:f6:c7:dd:6a:d5:c6:76:
6a:4f:40:08:d2:26:37:f7:56:72:b3:53:8a:a0:7e:
95:9f:26:78:04:7c:13:ce:3c:76:61:60:56:bb:f6:
8a:53:f9:f1:b1:44:23:43:2a:18:75:d5:9e:03:be:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BC:FF:86:CF:D0:39:16:EC:04:B4:88:6B:E1:AA:C1:8C:67:16:86
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/dLz_hs_QORbsBLSIa-GqwYxnFoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.128.0/21
37.35.88.0/21
45.145.180.0/22
87.237.64.0/21
93.95.8.0/21
94.190.240.0/21
94.199.184.0/21
109.69.80.0/21
151.236.208.0/21
185.11.240.0/22
185.31.252.0/22
185.33.184.0/22
185.49.236.0/22
185.68.0.0/22
185.71.24.0/22
185.122.216.0/22
195.94.112.0/20
195.189.124.0/22
Signature Algorithm: sha256WithRSAEncryption
87:52:05:84:d2:84:98:b8:93:84:d5:91:0c:a3:c7:36:a3:b3:
d0:2a:d8:21:70:49:c4:2a:1b:2b:84:41:58:f9:b4:b3:bf:d1:
3c:85:0b:91:f5:8b:fd:ed:5f:d5:d6:4e:05:fe:f1:43:25:55:
11:47:25:13:e3:37:ff:62:b2:94:5a:9c:a5:2e:81:20:81:41:
21:de:1a:13:a7:06:48:ba:09:c7:2a:07:ee:78:c7:64:f1:1f:
ed:eb:87:e6:84:cf:fb:c9:50:ab:be:f6:2a:d6:ab:c4:27:73:
c4:47:80:fc:ad:aa:cb:5c:da:7e:1a:3a:d3:1a:11:2b:87:29:
ab:98:47:76:b7:1d:aa:1a:e5:82:7f:72:86:62:72:cb:62:4c:
87:72:4e:2a:8d:bb:6f:51:83:b6:0f:d5:04:12:f4:2f:1c:2c:
e7:2a:ee:91:2c:9d:e0:59:e0:79:5d:c4:72:74:d6:09:5a:f2:
b9:39:50:44:1a:a8:61:a3:d1:ae:82:4a:4f:90:d9:b4:d4:47:
6e:3b:11:33:62:c0:55:06:c5:c4:b5:ea:6f:92:ab:89:72:81:
31:93:61:aa:92:15:78:13:b4:46:57:2a:e3:f0:f1:74:73:4c:
64:7d:69:8e:ed:6e:c0:9f:e9:7b:9a:dd:dd:e9:aa:21:a0:09:
bb:33:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:06:04 2025 by rpki-client