Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/8rY_Pyoij0haF_n8Y5VZa6AYEw4.roa
File: 8rY_Pyoij0haF_n8Y5VZa6AYEw4.roa (raw, json)
Hash identifier: EkR/EqKS17Gki5OHBuqoAnF9hJA+NfAIfdycspJO0uQ=
Subject key identifier: F2:B6:3F:3F:2A:22:8F:48:5A:17:F9:FC:63:95:59:6B:A0:18:13:0E
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA92CBFB667C5EC930ACCCB1E193ADE2
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/8rY_Pyoij0haF_n8Y5VZa6AYEw4.roa
Signing time: Thu 12 Dec 2024 11:13:22 +0000
ROA not before: Thu 12 Dec 2024 11:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208189
IP address blocks: 31.22.12.0/22 maxlen: 24
31.22.12.0/23 maxlen: 23
31.22.14.0/23 maxlen: 23
193.17.86.0/23 maxlen: 24
193.17.86.0/24 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
212.132.160.0/20 maxlen: 20
212.132.160.0/24 maxlen: 24
212.132.163.0/24 maxlen: 24
2a04:c880::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:92:cb:fb:66:7c:5e:c9:30:ac:cc:b1:e1:93:ad:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 11:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2b63f3f2a228f485a17f9fc6395596ba018130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:81:93:b2:b6:5a:7d:02:b4:23:6b:5b:4c:
5b:eb:7b:86:de:0e:d4:df:c4:8c:5a:db:70:10:4f:
ec:46:36:03:b3:c9:17:45:d0:9d:32:61:ae:a6:82:
c2:5e:68:65:d5:22:a4:4e:64:61:d7:e1:ec:95:5f:
65:ef:56:5a:84:f3:b0:a0:a4:4e:92:0b:d5:47:a6:
96:dd:12:ed:e1:6e:f4:a0:ac:00:ed:c2:0e:da:91:
cd:cb:18:7d:98:1b:57:58:87:6f:ca:44:f8:78:b3:
63:89:02:83:62:8e:bd:dc:78:0f:23:1c:5f:28:20:
60:2e:72:4b:f2:af:a1:1b:03:d3:74:2c:d5:0b:5b:
76:78:d1:bf:94:d1:e9:7f:f2:90:f7:be:36:8c:ba:
54:df:7e:14:3a:d2:68:dc:80:ce:da:8d:d1:bf:f2:
25:2d:e1:34:d5:83:eb:b6:a7:13:73:79:73:15:a2:
64:6c:d3:d3:ca:eb:47:de:13:e2:57:37:d0:ea:74:
a4:c6:f2:16:28:04:dd:0a:67:2a:1f:27:e6:9a:cb:
3b:7e:f5:89:d4:85:22:47:4d:4f:53:62:aa:ce:1c:
3d:12:c7:05:19:f5:cf:88:c8:5f:eb:49:e7:f4:47:
65:b6:e4:78:e9:4e:18:59:9f:e1:5a:0b:69:99:5d:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:3F:3F:2A:22:8F:48:5A:17:F9:FC:63:95:59:6B:A0:18:13:0E
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/8rY_Pyoij0haF_n8Y5VZa6AYEw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
IPv6:
2a04:c880::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
96:a9:15:d0:be:ba:e5:2f:da:34:1f:6d:6b:bf:d3:6e:ff:e7:
6f:40:9c:d4:1f:f5:4a:2a:e7:13:81:34:ea:cf:51:49:6e:95:
f2:ab:ca:23:7a:16:bd:9b:98:bb:35:76:04:69:07:01:27:ca:
98:29:53:64:a5:cb:11:29:76:c8:70:49:71:a1:8e:35:b7:bf:
ca:31:14:82:ae:14:2b:03:30:c0:33:c6:0d:e6:9d:2e:0a:9e:
cf:f6:d4:32:8a:59:c3:46:53:8e:28:cc:76:43:ea:4e:fd:f0:
00:57:2f:91:b6:ea:c6:28:83:6d:e7:b1:3a:e8:a3:b4:c7:89:
ef:ad:de:95:a2:08:97:db:14:1d:67:90:4d:36:19:a8:48:0e:
89:5a:1c:7c:a6:53:a8:48:ad:c4:a6:60:cd:70:ab:ed:ac:92:
65:d6:f4:cd:51:56:c3:80:75:f5:b8:e9:b5:f0:56:fb:d9:93:
a1:b4:67:16:0d:76:87:85:f3:a5:7d:ce:02:a2:d8:49:10:f5:
3c:ad:48:f1:9c:7d:23:0d:7f:04:9c:a7:16:fd:35:68:4e:11:
3d:41:9a:b4:db:64:86:c1:ee:66:2d:2b:83:82:b1:62:6f:7e:
9a:0a:6f:78:36:6b:98:5e:64:68:6f:4d:20:5e:4d:18:be:60:
f9:0d:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:42 2025 by rpki-client