Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/iwf8PbehDZxQZs6l5zlbzpFTiCc.roa
File: iwf8PbehDZxQZs6l5zlbzpFTiCc.roa (raw, json)
Hash identifier: aMZy822c4cnUE8bhVw3pniRRaTz//xQofSSSMN8h5Hg=
Subject key identifier: 8B:07:FC:3D:B7:A1:0D:9C:50:66:CE:A5:E7:39:5B:CE:91:53:88:27
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 1C57E2EC
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/iwf8PbehDZxQZs6l5zlbzpFTiCc.roa
Signing time: Sat 01 Jan 2022 12:54:28 +0000
ROA not before: Sat 01 Jan 2022 12:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49221
IP address blocks: 31.7.48.0/21 maxlen: 21
185.94.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475521772 (0x1c57e2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Jan 1 12:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b07fc3db7a10d9c5066cea5e7395bce91538827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:7a:b4:8f:c8:8d:53:f6:6a:e3:f0:07:bf:
d2:37:79:f6:99:b9:8a:bc:e8:27:76:0f:c9:b7:b5:
4c:7f:99:01:8c:b8:ae:b7:3c:34:87:ab:25:39:3f:
4c:4b:c2:4a:c5:e5:d7:fc:eb:f0:58:b4:21:e8:64:
db:e1:4a:4d:b0:4c:5a:30:6a:da:cc:d1:8f:be:60:
74:6b:93:d8:01:00:1a:6b:20:09:31:7c:1b:f6:28:
50:61:b9:0c:7c:58:33:80:f5:8e:95:bf:1c:4c:66:
b3:66:70:3c:80:86:12:97:a4:a6:7a:75:54:06:60:
1b:39:6b:fa:24:17:1c:87:2b:02:05:39:31:8f:6d:
dc:bd:bb:ba:6b:ef:9d:66:42:75:23:ae:ff:69:97:
11:3d:1a:33:b1:6e:53:48:1a:98:a4:bc:a2:1f:7c:
44:6c:c8:85:d4:bd:d9:49:a9:39:48:dc:d3:0a:7a:
b1:00:28:b2:4c:15:6e:97:4e:59:77:95:88:1c:cb:
85:4b:9f:6d:af:bb:1c:a9:37:37:34:0b:50:88:f9:
7a:86:bc:25:c0:88:da:ad:35:4d:1e:98:29:2b:ff:
08:83:ae:d2:e8:e0:f4:93:2e:7f:22:ad:ef:76:7a:
09:a9:be:a1:b8:16:e1:9b:c0:24:39:61:38:89:b6:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:07:FC:3D:B7:A1:0D:9C:50:66:CE:A5:E7:39:5B:CE:91:53:88:27
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/iwf8PbehDZxQZs6l5zlbzpFTiCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.48.0/21
185.94.200.0/22
Signature Algorithm: sha256WithRSAEncryption
43:41:2f:00:6f:e4:bb:d6:d6:aa:e1:8d:54:51:f9:b7:f4:ca:
54:e2:27:19:e4:ac:16:20:de:b0:d4:14:25:79:7e:14:36:93:
30:c6:47:25:da:67:42:6c:3c:70:47:58:e0:8c:20:bc:af:b2:
34:6b:89:08:21:fd:77:25:9b:e3:ec:03:6f:21:9c:a4:d5:b4:
67:b5:fe:e7:10:7e:98:e0:f2:c0:47:99:28:32:4d:13:dc:83:
47:fb:82:44:91:27:b4:4f:ac:af:85:2c:ea:7c:30:93:22:4c:
70:f9:fa:9a:8d:95:a4:8e:12:b0:2e:b9:5e:cd:3f:ce:57:74:
23:46:2d:29:8c:5a:7e:b2:9a:36:3a:39:46:76:4a:a5:85:3e:
a8:d7:b5:53:d1:6a:1c:a7:a6:36:d9:f0:02:46:d5:bb:94:1f:
7b:db:43:be:f5:e5:89:42:78:b6:2e:a4:19:ae:e3:61:9b:52:
26:1a:a1:ce:8b:18:83:96:4a:67:43:6d:a4:68:0a:64:bc:05:
41:70:34:d8:aa:f8:92:78:a1:b6:fe:1a:4a:c3:92:28:5e:de:
f4:98:fe:33:d8:84:40:f6:0e:58:5a:fb:d7:b7:bb:5d:43:05:
a5:bd:1e:3e:40:7b:81:f5:0e:3e:17:13:58:eb:78:a6:94:a8:
c4:e4:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:37:43 2025 by rpki-client