Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/kDftkP-w1YBe-HJAv5LXS10Il0Q.roa
File: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (raw, json)
Hash identifier: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=
Subject key identifier: 90:37:ED:90:FF:B0:D5:80:5E:F8:72:40:BF:92:D7:4B:5D:08:97:44
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 0194228DB9BEAB283248F2ED9C542CB823A4
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/kDftkP-w1YBe-HJAv5LXS10Il0Q.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199370
IP address blocks: 31.193.104.0/22 maxlen: 24
185.16.164.0/22 maxlen: 24
185.16.164.0/23 maxlen: 23
185.16.164.0/24 maxlen: 24
185.16.165.0/24 maxlen: 24
185.16.166.0/23 maxlen: 23
185.16.166.0/24 maxlen: 24
185.16.167.0/24 maxlen: 24
2a03:d6c0::/32 maxlen: 32
2a03:d6c0::/34 maxlen: 34
2a03:d6c0:4000::/34 maxlen: 34
2a03:d6c0:8000::/34 maxlen: 34
2a03:d6c0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:b9:be:ab:28:32:48:f2:ed:9c:54:2c:b8:23:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9037ed90ffb0d5805ef87240bf92d74b5d089744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:55:09:ae:62:77:f7:1e:b4:a5:a7:6e:0b:
6d:72:9a:ae:05:98:c2:97:ca:2e:f5:7d:2e:16:34:
db:9a:42:a3:be:c3:e7:84:88:0c:6a:a4:8f:ea:f9:
b2:68:cf:c5:55:98:9f:c2:cf:f0:49:e3:c5:14:0e:
a3:9d:6e:4f:6b:2f:26:b3:75:45:ba:da:05:a5:91:
b5:22:3d:2b:3d:88:b2:38:d2:a1:38:e5:fd:2b:e2:
f4:67:d4:12:92:b1:ef:87:b6:6b:0f:f2:58:07:43:
af:50:6b:b3:83:31:ea:46:59:57:bd:3a:22:b2:30:
31:18:1c:2d:dc:5a:e8:ac:b4:c1:36:e0:4a:f6:3c:
5d:f4:6a:8a:d5:53:80:45:f8:43:4e:c8:58:df:4c:
c2:db:f1:e2:8d:f8:b7:67:80:5b:4b:a4:3a:ad:25:
35:fb:c8:c9:12:ff:1c:52:fe:b2:d0:cb:1a:71:f5:
7a:88:43:e9:aa:b1:71:74:61:28:05:7a:fe:a4:45:
06:b3:e3:f3:26:69:45:b9:ad:12:7e:04:90:13:bd:
ed:92:b3:7a:28:08:7e:8f:0d:73:9a:e4:ce:79:e4:
d3:cd:df:71:e7:47:57:52:01:14:e3:7e:89:67:f0:
23:e0:20:2f:74:b3:5d:a1:7d:8a:6d:47:33:b1:73:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:ED:90:FF:B0:D5:80:5E:F8:72:40:BF:92:D7:4B:5D:08:97:44
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/kDftkP-w1YBe-HJAv5LXS10Il0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.104.0/22
185.16.164.0/22
IPv6:
2a03:d6c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:45:97:1f:dc:97:6b:b4:0f:c8:6c:2f:77:bb:fa:a2:82:45:
b4:16:73:53:10:28:ac:63:34:e2:5d:23:92:27:7c:92:48:b6:
c9:1f:38:65:5b:12:07:30:d9:83:28:e4:5a:6f:d3:10:ad:b6:
60:82:71:7c:6f:ce:d1:2b:67:be:42:af:49:e8:1a:e0:28:27:
7e:33:da:79:d0:bf:39:e4:40:04:f8:bf:0b:42:de:70:01:7a:
f1:f7:6f:59:d2:a8:72:d7:60:6e:35:6f:ac:ac:71:cc:23:57:
44:a0:ec:0f:e4:62:e7:39:8f:c8:b7:ba:42:1e:8c:dc:a0:20:
99:d6:e7:c7:35:2b:e6:54:a7:e0:99:d9:fd:c8:90:b7:01:1a:
91:d2:fe:ed:37:ed:88:57:7a:09:e0:67:fd:fc:9e:b7:a7:94:
7b:c5:84:84:54:85:05:f5:66:3c:b2:f8:99:45:76:af:6f:24:
f0:55:f8:10:5c:fa:22:ea:09:10:6b:1a:6b:f2:b0:8f:8c:37:
c8:e2:4a:b9:5d:d8:f8:d5:3f:aa:33:d8:4f:e9:df:63:e8:e0:
18:01:ae:a8:d6:b9:65:e3:fd:22:e7:72:89:52:7c:d7:ab:9d:
1e:76:da:cf:54:ca:5a:52:f1:b1:6b:0e:3c:9e:f6:dc:cf:56:
30:b2:ee:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:29 2025 by rpki-client