Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/31TXgbpJR6i0rA6W0Ge4HlNqC5o.roa
File: 31TXgbpJR6i0rA6W0Ge4HlNqC5o.roa (raw, json)
Hash identifier: FsWvYeoj1nB5pQkZ0zSKe6tWv7kWe8WeTHOyxTIcUDU=
Subject key identifier: DF:54:D7:81:BA:49:47:A8:B4:AC:0E:96:D0:67:B8:1E:53:6A:0B:9A
Certificate issuer: /CN=b9205ccee6691af500b96a732fa386dbf97f0a67
Certificate serial: 01856F39207051C22C182901FF1B99641148
Authority key identifier: B9:20:5C:CE:E6:69:1A:F5:00:B9:6A:73:2F:A3:86:DB:F9:7F:0A:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSBczuZpGvUAuWpzL6OG2_l_Cmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/31TXgbpJR6i0rA6W0Ge4HlNqC5o.roa
Signing time: Sun 01 Jan 2023 21:24:52 +0000
ROA not before: Sun 01 Jan 2023 21:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207185
IP address blocks: 185.157.4.0/22 maxlen: 22
185.157.4.0/24 maxlen: 24
185.157.5.0/24 maxlen: 24
185.157.6.0/24 maxlen: 24
185.157.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:20:70:51:c2:2c:18:29:01:ff:1b:99:64:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9205ccee6691af500b96a732fa386dbf97f0a67
Validity
Not Before: Jan 1 21:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df54d781ba4947a8b4ac0e96d067b81e536a0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:ea:15:12:8b:02:56:99:94:4f:72:5b:02:
55:0e:07:1f:1c:af:20:74:ef:c7:3c:4c:31:98:71:
97:f7:a2:0d:93:04:0b:13:02:3a:08:56:b1:fe:18:
b5:f0:2e:56:7a:ac:89:f1:3d:a6:6e:5b:01:a0:93:
96:b0:b1:79:7c:14:e9:c8:6e:ed:f4:0d:94:2f:79:
1c:58:f2:08:78:0d:c7:41:e5:f4:26:3d:c5:bd:4e:
ba:d8:8d:79:86:28:3c:6f:89:3a:eb:32:4b:eb:29:
38:ec:0a:46:79:8c:3f:65:1f:23:50:83:19:c7:9c:
02:87:a1:e6:29:9b:33:54:d0:04:51:e2:f4:83:cc:
af:16:bb:1d:4b:08:d3:7a:35:4c:01:57:12:45:3e:
cd:eb:d4:13:e3:73:ee:02:6e:2a:f8:1a:36:b8:b0:
5c:97:47:92:bb:43:29:28:e3:77:d7:a5:ba:78:86:
13:0d:78:f4:f8:7b:1b:2b:5f:20:cc:9e:b3:fd:9e:
d8:1f:21:04:f5:69:f8:01:1d:f2:a3:96:98:bc:f1:
14:0c:9d:66:66:84:42:ed:0e:3a:72:5b:71:23:14:
ba:67:24:39:a9:50:2d:25:47:d1:bf:39:54:71:2f:
cc:32:c5:a1:2c:05:e4:c8:02:f4:bb:63:4c:b1:d3:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:D7:81:BA:49:47:A8:B4:AC:0E:96:D0:67:B8:1E:53:6A:0B:9A
X509v3 Authority Key Identifier:
keyid:B9:20:5C:CE:E6:69:1A:F5:00:B9:6A:73:2F:A3:86:DB:F9:7F:0A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSBczuZpGvUAuWpzL6OG2_l_Cmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/31TXgbpJR6i0rA6W0Ge4HlNqC5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7d3b5f-42ee-4c89-b802-4b6babecfaad/1/uSBczuZpGvUAuWpzL6OG2_l_Cmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.4.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:a1:ed:d4:90:e1:83:da:01:91:7c:b8:1a:80:3b:ab:c3:c5:
60:63:94:5b:b9:b0:d4:a0:6c:f6:74:d0:bd:ef:94:e4:88:28:
24:89:1f:2f:83:dc:c9:b1:53:98:f8:e2:39:8a:f7:e2:ac:93:
22:ff:fa:d7:3b:42:38:88:2b:28:e3:c3:c7:a4:8c:70:75:f9:
b0:cd:e8:e0:29:35:69:90:4f:84:78:e6:32:7d:c4:37:af:b6:
3f:59:74:7e:09:58:95:ed:72:57:79:87:b9:97:66:12:4e:dc:
b7:60:d6:58:fa:58:ed:0f:ce:d2:96:65:50:17:75:52:ff:b0:
dc:30:17:cb:7b:81:be:82:df:07:1d:85:b9:b8:c1:e8:74:ae:
21:b4:ce:f8:ed:34:0e:66:e0:e2:d9:e2:d5:af:29:cd:4a:dd:
d0:91:5a:88:93:ff:1a:58:f3:fb:c0:00:9e:65:bb:7f:7d:7e:
3c:77:d3:8e:48:41:a9:4f:40:b5:a6:e9:1d:22:ea:93:07:70:
85:d5:e8:99:13:45:bc:5e:08:42:5a:99:50:d9:aa:b7:49:7a:
e1:f4:10:d2:ea:9c:b8:7d:ea:88:9f:c6:0d:94:d1:b2:0f:4a:
f9:68:d7:6e:22:65:19:12:fa:f7:10:e0:bc:27:3a:0a:2e:96:
24:84:81:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:47 2025 by rpki-client