Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/sV0m4N8Br3pPDquUJBmjAQgHL0g.roa
File: sV0m4N8Br3pPDquUJBmjAQgHL0g.roa (raw, json)
Hash identifier: VJweGL4d8CAXgupjfX4RTXTmthfciAdDc4KlfQ/1C84=
Subject key identifier: B1:5D:26:E0:DF:01:AF:7A:4F:0E:AB:94:24:19:A3:01:08:07:2F:48
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 018CC3B6B67617755DD6F99BF39071C5B0A5
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/sV0m4N8Br3pPDquUJBmjAQgHL0g.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31742
IP address blocks: 185.119.20.0/22 maxlen: 22
93.191.24.0/21 maxlen: 21
46.255.248.0/21 maxlen: 21
212.85.252.0/22 maxlen: 22
83.137.224.0/21 maxlen: 21
2a00:d300::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b6:76:17:75:5d:d6:f9:9b:f3:90:71:c5:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b15d26e0df01af7a4f0eab942419a30108072f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:7f:5a:ee:84:f0:36:26:db:cd:4b:7b:82:
ae:15:3b:23:fe:97:29:ed:55:c8:66:88:c0:41:6d:
93:27:be:96:18:28:e4:a5:93:ae:06:5d:bf:d1:ed:
5f:8b:be:74:e3:5c:24:b3:e9:33:51:54:da:48:45:
fc:c1:c2:07:c3:87:6f:64:64:7f:6d:00:3e:bf:de:
b0:bd:63:b3:ca:1a:5b:ac:7c:63:6a:fb:10:31:86:
4c:1c:be:9b:8c:dd:94:a7:df:1d:12:e5:cc:59:fe:
e4:dd:54:ca:aa:43:6a:0d:93:24:f1:68:7d:7c:bc:
c3:3b:7f:9a:63:62:ab:41:6b:d6:e7:7f:ed:88:e5:
48:01:bf:44:13:64:59:8a:85:ab:9c:75:5a:53:af:
97:18:d0:9e:ae:41:25:ad:6f:3c:20:fa:e1:2a:2c:
11:cc:71:7b:e2:d6:ad:b8:3d:f1:a5:34:e8:4d:16:
d3:fd:d1:68:ea:52:93:4d:a4:7f:0f:f6:37:a1:13:
38:1e:d6:f4:d5:a5:4f:ce:93:ef:f4:27:da:74:84:
9e:78:60:c9:03:79:1e:e2:e1:07:03:5c:8f:8f:92:
5c:41:7b:cc:f2:33:84:6b:44:ac:cf:86:34:6d:71:
a2:0e:ac:4b:f0:f1:cd:91:e3:a1:5c:cb:16:6e:00:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:26:E0:DF:01:AF:7A:4F:0E:AB:94:24:19:A3:01:08:07:2F:48
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/sV0m4N8Br3pPDquUJBmjAQgHL0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.248.0/21
83.137.224.0/21
93.191.24.0/21
185.119.20.0/22
212.85.252.0/22
IPv6:
2a00:d300::/32
Signature Algorithm: sha256WithRSAEncryption
78:be:92:43:71:5b:c2:34:05:07:e9:14:e8:e8:39:79:6a:61:
7d:5b:a0:13:df:09:9f:6d:3d:09:df:f8:16:0e:42:f6:d3:cc:
e1:3c:1e:64:dc:1f:fa:eb:1b:69:b7:91:fe:47:31:f1:6a:ef:
d8:a6:83:c1:75:c5:27:ba:62:aa:31:56:9f:64:b6:d3:89:6e:
aa:ab:36:93:2e:7c:9c:0b:e0:7a:fa:8a:b1:7e:37:5d:a8:47:
3e:eb:25:68:03:e3:12:dc:ed:0b:20:71:3b:42:a8:ba:bc:df:
0e:a7:11:91:c2:7e:48:6a:23:28:74:c7:17:a2:82:c6:62:d3:
08:fe:c1:49:e2:4d:ac:a4:e7:30:e1:0a:e8:6f:31:cd:98:2d:
b4:33:33:04:c8:c1:34:c8:c3:3a:63:01:22:7e:71:55:a5:f2:
7b:1e:47:d5:0d:30:05:26:01:ae:a5:72:1a:80:cb:51:8b:48:
77:c8:7b:a3:60:c3:20:86:6a:89:d7:2f:88:e1:37:be:f4:5e:
b7:ca:eb:4e:1c:d7:2a:8a:cc:e0:ee:60:ed:24:29:79:f6:8e:
2c:d7:f3:d0:e3:af:a1:1c:4e:26:04:73:35:33:9d:c8:d5:d5:
49:32:45:c6:06:65:72:a8:22:81:62:8d:dd:17:23:3c:51:50:
3e:51:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:11 2025 by rpki-client