Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Vy4jyjN923zk-5ALaspW3JqzJRs.roa
File: Vy4jyjN923zk-5ALaspW3JqzJRs.roa (raw, json)
Hash identifier: QEvDTQInERWJT2oqozomstyVxNh5g9xOHI5POHOwW/E=
Subject key identifier: 57:2E:23:CA:33:7D:DB:7C:E4:FB:90:0B:6A:CA:56:DC:9A:B3:25:1B
Certificate issuer: /CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Certificate serial: 018571D7B9BE41FCA708BE74EF4E6DC93844
Authority key identifier: 19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Vy4jyjN923zk-5ALaspW3JqzJRs.roa
Signing time: Mon 02 Jan 2023 09:37:21 +0000
ROA not before: Mon 02 Jan 2023 09:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208121
IP address blocks: 185.231.142.0/24 maxlen: 24
185.231.140.0/24 maxlen: 24
185.231.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:b9:be:41:fc:a7:08:be:74:ef:4e:6d:c9:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1974ba0b871fff7187d3fefe66c29fc703086d2d
Validity
Not Before: Jan 2 09:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=572e23ca337ddb7ce4fb900b6aca56dc9ab3251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:d1:5b:fc:ce:1a:8b:6a:ce:1f:94:57:93:
a3:a8:2b:fa:58:5c:e1:7d:da:45:43:fc:a7:68:dd:
a9:0a:2d:f2:9d:4d:00:b9:20:65:24:a5:e9:8b:dc:
4a:f2:66:76:d0:23:f7:31:5a:ea:b5:69:a1:47:3b:
2a:a9:e2:b9:04:34:0e:32:24:93:f5:8d:8a:52:c4:
b4:d7:2a:e3:cd:ba:84:79:5b:3c:1b:0e:6a:58:30:
bd:9d:36:4b:77:c7:fe:92:c5:13:84:44:a0:4f:a7:
e9:a1:1b:d6:e7:65:da:19:28:e1:32:4a:7c:7a:d5:
10:81:45:cf:cc:fe:be:44:39:65:89:db:37:a2:2e:
16:87:d1:c7:3c:1c:1e:76:54:0c:45:c0:2c:98:a0:
36:52:bc:a6:f9:36:f7:b3:f2:fc:ee:de:c9:2e:6a:
3e:6d:57:60:2d:c5:30:51:fe:3a:38:9f:c8:f7:86:
60:71:47:1a:96:04:f4:88:25:40:f2:d8:6d:b2:c5:
bf:26:81:83:21:71:b8:fc:38:e0:f8:ce:b1:a4:6d:
01:5e:d5:f4:3d:9d:22:7f:32:1d:0b:86:9e:ee:56:
92:13:e9:d0:4f:63:a7:d9:de:5b:a0:69:c5:3a:ef:
96:10:5f:65:71:1d:16:82:bc:87:1f:04:16:d5:77:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2E:23:CA:33:7D:DB:7C:E4:FB:90:0B:6A:CA:56:DC:9A:B3:25:1B
X509v3 Authority Key Identifier:
keyid:19:74:BA:0B:87:1F:FF:71:87:D3:FE:FE:66:C2:9F:C7:03:08:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Vy4jyjN923zk-5ALaspW3JqzJRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/GXS6C4cf_3GH0_7-ZsKfxwMIbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.140.0-185.231.142.255
Signature Algorithm: sha256WithRSAEncryption
23:f1:8e:dd:2d:da:2f:18:16:44:aa:39:39:6c:03:0d:a2:5f:
4f:ea:b2:1b:bc:ae:2b:d1:ae:44:2a:17:60:fb:9c:27:03:af:
11:8a:df:5f:c8:fb:2e:a6:50:02:fa:f0:3c:20:15:f9:01:a1:
f7:d3:5c:af:f9:f5:38:e1:49:1c:ca:e2:1f:b1:4a:4f:89:9a:
cd:5e:32:63:0f:7f:d0:cf:73:73:7c:61:59:c9:3c:0a:ea:c3:
90:96:e5:81:de:08:ae:c1:92:33:35:6a:8a:b3:55:e6:6e:69:
51:dc:16:7a:48:a0:d1:d9:dc:d8:c1:d9:e6:86:80:78:82:7a:
e3:e8:15:ce:3d:c5:c1:04:cd:73:db:40:9e:6e:64:99:90:57:
29:5f:8c:26:25:c1:7d:f4:07:64:27:fa:1b:85:df:a1:44:8e:
62:a6:bc:2b:90:d0:c0:5e:f5:ca:e7:1e:9f:7a:bf:45:32:db:
92:65:e9:67:63:4b:5d:89:cd:85:07:fc:d9:6c:47:e0:4d:54:
f4:07:2b:f5:41:0b:df:7d:3d:4b:94:52:68:03:68:2f:e5:7b:
3c:65:9b:1d:0f:47:b6:b4:05:80:66:65:09:51:39:96:f3:30:
27:bb:19:9a:9d:21:9e:f9:d9:af:40:58:c7:d8:33:48:1e:e0:
3b:d9:d5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:47 2025 by rpki-client