Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/UTgbU7LYwN2qYQPFZIuw4slCDrA.roa
File: UTgbU7LYwN2qYQPFZIuw4slCDrA.roa (raw, json)
Hash identifier: lql7VNkPZMVC7euMKcUH0rUDUhieO3jxRoaOwg+ZAMk=
Subject key identifier: 51:38:1B:53:B2:D8:C0:DD:AA:61:03:C5:64:8B:B0:E2:C9:42:0E:B0
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942369FF2396DAFC4A3CEAC66786BEA755
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/UTgbU7LYwN2qYQPFZIuw4slCDrA.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 31.204.64.0/21 maxlen: 24
130.255.160.0/21 maxlen: 24
159.253.216.0/21 maxlen: 24
185.6.8.0/22 maxlen: 24
185.13.96.0/22 maxlen: 24
185.236.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ff:23:96:da:fc:4a:3c:ea:c6:67:86:be:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51381b53b2d8c0ddaa6103c5648bb0e2c9420eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ab:3e:a1:8f:1b:3a:64:56:ad:af:c6:ca:
c7:30:4e:e2:88:e7:62:ba:93:31:1c:0c:5c:35:d4:
41:49:d3:aa:54:a3:fa:f3:e3:c7:3b:ec:39:64:4c:
25:24:96:ae:be:f2:e0:9e:a0:5e:f8:98:2a:0d:ba:
d9:12:7f:52:10:43:78:70:ea:e7:7f:44:92:1b:8c:
95:8a:f5:79:81:b2:c1:69:df:00:70:e3:9b:f8:73:
01:86:60:18:e4:4b:a3:a4:4f:80:f2:59:c7:43:25:
29:b4:ea:e8:35:b2:ef:41:da:ec:cb:d9:e9:5f:17:
40:89:4d:c0:c7:3a:a3:8b:e0:85:ec:f2:e0:19:e5:
dd:37:f3:a3:2d:56:3c:c8:65:dd:47:30:9b:2c:28:
ec:48:5c:2a:b6:8f:7c:71:4e:95:09:35:f8:0e:17:
86:bc:3f:41:b2:78:ab:51:60:90:c6:b5:90:df:bb:
c8:d5:70:b0:7b:1f:0b:4a:1d:55:48:47:35:87:e0:
62:64:59:cc:4e:85:dd:32:a5:2a:3c:1c:30:47:9f:
0b:b2:8b:3a:f7:54:95:73:4d:33:f6:49:dd:df:70:
e1:e2:39:38:51:01:61:e2:c9:45:ce:bc:0a:dc:57:
5a:04:2b:72:04:ba:d4:10:5a:f5:af:46:69:84:6f:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:38:1B:53:B2:D8:C0:DD:AA:61:03:C5:64:8B:B0:E2:C9:42:0E:B0
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/UTgbU7LYwN2qYQPFZIuw4slCDrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.64.0/21
130.255.160.0/21
159.253.216.0/21
185.6.8.0/22
185.13.96.0/22
185.236.40.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ce:11:ca:ae:bc:ce:99:0b:23:f1:5b:ad:f1:87:73:f6:97:
2f:e6:7e:62:0f:6d:dc:29:8d:72:58:32:9d:df:a5:e8:42:49:
80:b0:0a:98:47:27:cd:dd:14:9a:c5:e4:25:1d:1a:19:6c:42:
be:f7:bd:6b:2c:5f:a9:3a:22:64:0e:14:05:f4:7f:ff:b2:21:
a6:ec:2f:f2:1c:9c:d6:15:2b:90:3a:54:21:ad:75:79:7a:f6:
ca:82:ea:16:d9:6e:70:69:06:bf:55:db:04:a9:a6:92:c5:c3:
9e:3b:bd:fc:ca:58:85:21:21:dd:71:6c:fd:29:c9:32:b5:4c:
d3:90:e8:4f:28:05:6b:e4:be:25:96:76:85:db:0c:e0:97:4a:
7a:cf:46:8c:53:06:af:ed:75:33:f9:c1:c5:e5:80:c9:5e:d7:
53:e6:3e:40:32:dd:b5:51:94:3d:bd:6c:25:14:fc:76:8e:81:
88:58:97:04:c4:d1:b9:52:14:52:34:64:d2:83:c4:5c:c2:a5:
80:2f:2c:e1:83:f4:a8:72:5a:e9:b2:d7:cf:90:b5:2d:6a:75:
25:f2:1e:2f:0f:0c:c9:a6:ac:97:eb:e3:7f:f6:62:3d:3b:72:
15:62:1c:bd:8a:17:4b:c3:6f:bd:4c:8a:b3:6c:82:38:42:73:
14:f1:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:25 2025 by rpki-client