Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/Odv_O99K-LYqthA7SjFieqNY6uQ.roa
File: Odv_O99K-LYqthA7SjFieqNY6uQ.roa (raw, json)
Hash identifier: zW9yh8OneSqJtfLGOFpH7LemrOnCFy5Zy1c1sM28Zu4=
Subject key identifier: 39:DB:FF:3B:DF:4A:F8:B6:2A:B6:10:3B:4A:31:62:7A:A3:58:EA:E4
Certificate issuer: /CN=823c757e5ffbde563f27a95d6d97a498c312252e
Certificate serial: 148477E5
Authority key identifier: 82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/Odv_O99K-LYqthA7SjFieqNY6uQ.roa
Signing time: Sat 01 Jan 2022 03:01:47 +0000
ROA not before: Sat 01 Jan 2022 03:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4455
IP address blocks: 31.217.128.0/19 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.130.0/24 maxlen: 24
31.217.129.0/24 maxlen: 24
185.55.16.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
46.18.168.0/21 maxlen: 24
2a02:27f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344225765 (0x148477e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823c757e5ffbde563f27a95d6d97a498c312252e
Validity
Not Before: Jan 1 03:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39dbff3bdf4af8b62ab6103b4a31627aa358eae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:14:69:a0:2b:7a:81:b6:fd:0c:3f:62:e4:
49:a0:13:bd:18:6d:ce:09:f3:91:bd:3d:1a:b6:41:
e0:0d:68:ed:e4:8a:e4:5f:bd:66:6e:f1:4b:e4:54:
ed:46:c5:61:27:eb:4b:ba:a4:e4:22:78:a5:7e:cd:
d5:45:a9:1b:d8:c7:48:f6:80:63:24:bd:4a:bf:81:
30:5f:13:2d:bd:13:e0:c2:8d:b4:b7:a1:ca:da:d0:
e7:b9:d3:42:17:05:66:b6:8a:23:0b:c5:38:2a:af:
94:68:4e:5b:a0:bd:de:85:9a:88:9b:ec:c4:70:03:
07:d4:ed:78:fe:d7:c7:97:3b:a8:e5:b3:51:e4:2e:
6a:75:97:20:42:ca:1f:b0:48:c2:fe:ee:23:f7:1a:
0a:10:d7:df:03:23:61:f3:38:14:a3:ff:f4:af:e0:
c3:7c:95:52:1e:af:2e:6e:b2:7b:0b:d0:6a:4b:16:
c6:fe:c0:b9:0f:03:8f:0c:0b:01:69:7b:4d:61:7a:
0e:71:69:5b:36:a9:1b:12:c9:8f:3f:ec:f9:f9:86:
ca:3b:8e:b2:17:83:b4:24:13:f6:e1:f2:31:9a:93:
13:6f:15:36:1f:44:f2:6f:fc:f9:62:86:f7:fc:7f:
47:30:ec:60:0a:10:7a:e2:bb:4e:6a:a0:5d:cb:f4:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:FF:3B:DF:4A:F8:B6:2A:B6:10:3B:4A:31:62:7A:A3:58:EA:E4
X509v3 Authority Key Identifier:
keyid:82:3C:75:7E:5F:FB:DE:56:3F:27:A9:5D:6D:97:A4:98:C3:12:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjx1fl_73lY_J6ldbZekmMMSJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/Odv_O99K-LYqthA7SjFieqNY6uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/89fea1-0e31-40a8-bc84-fd040767e199/1/gjx1fl_73lY_J6ldbZekmMMSJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
91.196.184.0/22
185.55.16.0/22
IPv6:
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
04:b3:c7:04:5f:45:1e:87:55:7e:0e:44:af:c6:54:49:c5:93:
0d:7a:1c:b7:43:47:63:27:ca:12:83:00:99:3d:14:d7:eb:1f:
b2:b7:18:c1:39:37:6b:6f:fa:22:cd:fc:15:c6:53:58:5d:8e:
a6:97:eb:26:df:c1:5d:c5:99:95:bb:a2:9f:23:f9:42:d5:21:
33:28:41:3b:61:9b:6b:bc:26:62:39:c9:f7:97:0f:91:ba:88:
6b:4e:d7:54:ad:bb:cc:24:d8:9e:68:64:8e:3a:f2:09:c1:35:
1b:fd:73:10:86:b8:64:8b:ec:ce:4a:88:17:09:0b:3e:24:8a:
9d:6b:b7:0b:d5:28:a9:a2:23:3d:02:84:bf:ce:b7:70:97:80:
11:63:ca:69:87:37:54:db:11:4f:58:8b:9c:17:c1:20:c7:ac:
c8:d1:40:6e:69:c5:d6:69:c0:36:b3:13:78:38:d3:11:bb:96:
20:24:8f:9e:ed:c7:92:0d:75:01:12:56:96:5e:dd:e2:50:3f:
0a:64:98:3e:81:d8:36:26:c4:ee:5b:6e:9f:ac:56:1e:80:3d:
20:c1:73:c0:af:da:67:de:a7:cc:c9:06:86:b9:ce:5f:cc:c3:
0a:94:de:88:da:ca:2b:d0:ad:83:45:bb:6f:da:f3:a5:a5:c7:
6e:fb:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:11 2025 by rpki-client