Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/K4Tw9bnSx08y1w5lH53MGGZPvIY.roa
File: K4Tw9bnSx08y1w5lH53MGGZPvIY.roa (raw, json)
Hash identifier: vKCwIzLo/ENbjsQg8Z3UNy6wWT723LWINLnxyGO7Hsk=
Subject key identifier: 2B:84:F0:F5:B9:D2:C7:4F:32:D7:0E:65:1F:9D:CC:18:66:4F:BC:86
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 01856D6F69770F8F68712F7DA277FCE5F64E
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/K4Tw9bnSx08y1w5lH53MGGZPvIY.roa
Signing time: Sun 01 Jan 2023 13:04:56 +0000
ROA not before: Sun 01 Jan 2023 13:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49221
IP address blocks: 31.7.48.0/21 maxlen: 21
185.94.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:69:77:0f:8f:68:71:2f:7d:a2:77:fc:e5:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Jan 1 13:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b84f0f5b9d2c74f32d70e651f9dcc18664fbc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:55:36:ae:96:6e:0c:7e:0e:45:b5:bf:ae:
f1:24:89:64:db:62:50:19:87:7d:95:c7:8c:01:78:
9b:16:2c:d2:2f:4f:ba:55:fd:e8:61:fe:82:4a:e8:
90:49:2e:ef:1f:19:c2:f5:ad:a2:f6:c4:cf:01:29:
34:14:db:5a:8e:ec:7f:e7:a0:cb:c9:ca:7a:4a:fc:
78:6d:7c:46:84:dc:20:9f:34:64:e3:24:48:05:a7:
5b:5c:96:40:33:60:b7:fe:2f:19:76:63:73:c6:02:
06:e0:9a:26:c4:67:8d:a0:eb:a2:2c:41:71:19:ac:
52:53:9f:38:05:1f:19:8f:3c:82:5b:3f:96:d2:4e:
c6:b9:4f:fe:47:fd:ac:28:fe:72:05:e0:dd:35:96:
b9:60:97:6c:40:42:d6:22:0a:0d:b6:2b:cc:00:d6:
54:da:da:e3:7a:93:0d:9c:6c:42:4e:be:ef:33:7c:
0b:c4:c3:f3:e4:89:1a:17:f3:7a:a2:6b:78:7b:df:
1d:6a:7e:9e:db:4a:c8:ee:03:5f:4f:66:a7:33:72:
2e:69:33:b9:5c:16:79:87:0a:74:3d:68:75:d8:e8:
99:e0:1b:32:7b:e8:04:3a:12:05:32:ef:11:d1:c7:
ae:bb:ba:91:6e:22:48:d0:0a:9a:0c:e4:91:5d:c5:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:F0:F5:B9:D2:C7:4F:32:D7:0E:65:1F:9D:CC:18:66:4F:BC:86
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/K4Tw9bnSx08y1w5lH53MGGZPvIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.48.0/21
185.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:40:fc:5e:10:8b:7a:e1:48:0f:b0:45:b7:38:73:5a:9e:91:
7b:cd:31:30:7a:97:7b:aa:16:34:5a:a0:76:6e:06:bd:40:31:
b2:b5:93:f8:8f:a4:c2:ec:78:cd:8c:66:f7:c5:41:7d:a6:0f:
01:11:3d:b8:b1:f2:e4:01:92:7a:0d:20:76:ea:54:11:9d:86:
13:79:20:4f:80:13:a9:e5:4b:0d:62:e0:18:22:10:75:fb:00:
c6:74:33:79:ad:88:7c:5d:f3:9f:0a:5b:0c:1d:5c:3d:ea:33:
e3:63:db:28:d5:59:78:7a:3a:4b:5d:35:02:85:72:67:91:f9:
76:78:e4:d2:5a:21:cf:0d:e7:8d:30:4c:8b:d4:3e:0c:4a:13:
a4:92:03:e6:d2:ab:64:85:37:bb:d6:07:9c:6c:31:f4:00:cb:
73:26:87:38:26:0e:88:6d:6d:4f:61:fd:2d:db:15:07:12:45:
ad:6f:82:31:5b:26:49:8c:80:3c:ad:00:9e:9b:96:7f:5c:c8:
d2:7c:67:09:a9:68:38:6b:7d:54:64:5e:af:6e:5f:10:94:79:
ee:9b:18:fc:9e:c6:0b:13:1b:fb:01:51:ec:38:8a:06:10:59:
6c:5b:1c:5c:ad:5b:da:94:31:d5:90:58:b2:ef:de:f3:ce:79:
df:95:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:42 2025 by rpki-client