Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/0kF2AtN_Lj_VKlregr3aspYcjS4.roa
File: 0kF2AtN_Lj_VKlregr3aspYcjS4.roa (raw, json)
Hash identifier: cyLyFKH6wMND5GI88Q2dE2d2folpls+7wrjCkJ/UXy0=
Subject key identifier: D2:41:76:02:D3:7F:2E:3F:D5:2A:5A:DE:82:BD:DA:B2:96:1C:8D:2E
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D98C939B6FC30EEB7E12EBCFE7B688
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/0kF2AtN_Lj_VKlregr3aspYcjS4.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202103
IP address blocks: 31.134.64.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
176.39.0.0/19 maxlen: 20
176.39.48.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:93:9b:6f:c3:0e:eb:7e:12:eb:cf:e7:b6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2417602d37f2e3fd52a5ade82bddab2961c8d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e6:02:fd:d1:a1:f2:dc:c4:31:b1:e0:45:a3:
06:23:3a:64:87:5c:21:b8:8b:f1:72:ba:7d:ac:99:
1a:81:ba:9f:6f:06:c1:3f:b3:33:ac:d3:31:48:0a:
58:4d:2b:f0:7f:32:06:f2:a6:0d:dd:66:12:58:76:
23:26:f2:44:58:b3:f8:29:c9:bc:e8:f3:58:a8:05:
17:87:d2:f3:27:fd:d3:7b:37:eb:1e:6b:ca:26:40:
b8:89:5f:8d:5d:37:20:51:9c:cc:d4:b7:fc:be:6b:
0b:be:22:1b:29:1b:b0:62:48:5f:69:83:13:cb:ba:
52:b2:e2:10:6c:4f:04:16:2f:89:fc:1d:a2:5e:23:
d4:a6:4d:30:b7:93:14:62:8c:a6:e1:5e:cd:ac:94:
4b:5b:0d:2a:cc:12:ae:6a:8c:51:91:0c:ac:05:66:
90:eb:8e:92:70:58:c6:b2:8e:28:89:56:53:b4:fd:
24:43:9f:04:e1:2d:76:16:69:b6:2d:a4:f7:e7:25:
74:02:21:64:d3:0b:3d:a8:8e:b2:4a:c1:c3:c5:65:
42:1d:e0:57:b9:97:31:b8:18:2b:03:99:54:91:bc:
91:a3:3b:ae:fb:34:40:09:21:d4:ea:70:4e:e6:e4:
66:c7:d1:09:63:80:b6:ff:4c:1f:09:fc:7f:8a:b6:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:41:76:02:D3:7F:2E:3F:D5:2A:5A:DE:82:BD:DA:B2:96:1C:8D:2E
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/0kF2AtN_Lj_VKlregr3aspYcjS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
176.39.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:5e:3c:37:e9:a6:9f:09:63:0a:f7:1d:18:19:b4:df:39:d4:
15:6a:06:cf:5b:31:0b:fc:63:38:2c:1c:c1:9b:52:ec:df:26:
ce:8d:a0:00:8f:f8:47:d8:b1:86:1f:95:7c:ff:cf:4a:79:9c:
01:01:da:90:80:f2:bc:7d:2d:6d:6a:03:61:42:78:b4:f8:b4:
0e:c7:85:10:65:b4:14:a2:34:74:1a:b4:85:5b:ce:78:45:13:
b4:6c:f8:5a:4a:b2:55:72:7b:13:ac:c1:9e:d7:e6:91:14:27:
a7:20:46:81:a5:25:0b:85:6e:2d:c4:dd:e2:f5:e9:e9:29:d7:
0c:60:b6:5c:1a:7e:76:31:58:20:50:1b:85:23:c4:19:a8:d7:
92:84:b7:d8:26:a1:25:77:05:03:d6:57:76:a3:17:bd:17:9a:
ca:ee:0d:52:45:05:22:59:68:1a:a5:3d:6a:fa:df:f0:f3:cc:
5f:14:58:54:f0:49:5a:f3:a7:1b:43:54:27:ce:a6:a4:b9:62:
e6:91:22:bf:61:cb:c1:0c:31:aa:77:3f:01:1c:e4:6d:df:ea:
28:d7:37:60:06:17:7a:3e:9f:ae:73:9c:38:cc:86:56:67:73:
b7:d1:5f:3c:a1:31:ae:1b:1e:92:ac:df:b8:9d:4d:6b:cf:9e:
16:39:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:29 2025 by rpki-client