Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/qNE1Oc5YdEXAaCXUki-27-49n4M.roa
File: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (raw, json)
Hash identifier: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=
Subject key identifier: A8:D1:35:39:CE:58:74:45:C0:68:25:D4:92:2F:B6:EF:EE:3D:9F:83
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 019426D96C8CB536091E1AF4271E4D7208EB
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/qNE1Oc5YdEXAaCXUki-27-49n4M.roa
Signing time: Thu 02 Jan 2025 11:49:30 +0000
ROA not before: Thu 02 Jan 2025 11:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208189
IP address blocks: 31.22.12.0/22 maxlen: 24
31.22.12.0/23 maxlen: 23
31.22.14.0/23 maxlen: 23
193.17.86.0/23 maxlen: 24
193.17.86.0/24 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
212.132.160.0/20 maxlen: 20
212.132.160.0/24 maxlen: 24
212.132.163.0/24 maxlen: 24
2a04:c880::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6c:8c:b5:36:09:1e:1a:f4:27:1e:4d:72:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8d13539ce587445c06825d4922fb6efee3d9f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:51:8f:ba:e8:9b:10:85:b4:00:73:35:66:
73:c0:66:4a:6c:28:fa:c6:d9:31:45:db:48:c9:02:
6e:19:02:8e:ad:5e:8f:99:1a:fa:7a:b1:21:d9:68:
1e:99:3e:6d:fc:ea:6b:32:5a:5a:da:7e:13:f1:69:
7d:69:85:69:21:63:df:78:11:10:27:72:0f:a8:dc:
20:b3:ac:14:21:b8:90:71:12:13:3c:68:ed:51:b0:
c7:3f:ba:65:a1:47:b9:a3:67:1f:c9:f9:1c:b8:44:
fc:67:c1:fe:d3:a4:b1:b3:f2:3f:f9:b0:e9:fd:85:
50:d6:24:f0:b6:57:80:e7:17:24:4f:73:c8:d0:f5:
53:73:de:58:da:6c:89:06:aa:6e:b8:1d:0f:49:61:
76:bb:4a:7d:92:f3:ae:22:89:41:ce:08:68:21:59:
99:55:df:78:c3:70:76:6b:dc:5b:e9:e7:c1:df:70:
73:3c:50:23:cd:c6:99:3d:c7:97:b1:e5:f8:0b:a6:
d1:fc:82:9d:20:1b:9b:36:fe:20:58:35:9b:5f:09:
dc:c1:27:ab:60:f6:42:af:d0:ad:0d:01:ab:c5:be:
63:83:12:07:a7:8d:d1:60:24:dc:f7:1d:87:80:ec:
94:e0:ea:9f:e4:35:31:34:af:13:5e:7c:c9:72:3d:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:35:39:CE:58:74:45:C0:68:25:D4:92:2F:B6:EF:EE:3D:9F:83
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/qNE1Oc5YdEXAaCXUki-27-49n4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
IPv6:
2a04:c880::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
4f:32:ec:15:11:8b:a4:da:d6:61:a7:f4:9b:f8:83:df:39:ca:
52:c8:b9:b2:0b:c6:1f:83:7f:fd:c3:1b:8c:8a:ba:2d:4f:0a:
2a:88:8c:80:91:3f:6b:d6:b7:74:66:cb:ae:6b:d4:29:ae:cb:
8d:b2:cd:d8:b1:d9:24:a8:e5:8a:03:ab:3f:18:e5:32:78:c0:
c2:eb:a7:e5:6f:39:24:2b:e6:97:57:1f:8b:3b:10:54:e0:d5:
0f:d0:12:9f:97:5b:4e:bc:32:1d:c4:2b:7d:ff:92:61:7d:6f:
7d:ab:72:4a:72:05:4f:47:d9:fe:5b:93:46:eb:0a:12:50:05:
8c:87:a9:45:01:7f:77:e1:4c:53:1f:8c:1d:c0:38:23:8b:ac:
0e:d2:38:80:dc:c0:29:3c:ce:b1:c9:c1:06:5e:38:37:a9:c5:
b8:f3:cc:e5:2c:0c:2a:9f:ad:21:04:8a:20:d6:a4:d2:ec:44:
ce:0f:a0:21:bc:cb:e6:0d:cc:22:a9:e2:35:ad:ee:19:9d:85:
89:cd:34:fe:6b:51:61:45:ad:87:4f:b8:d9:ff:b6:2c:ec:5e:
29:19:16:31:60:74:bc:0e:e2:22:bb:f5:10:38:36:3e:47:2b:
17:e6:2a:ae:9d:1e:51:86:a3:8f:3a:6e:53:e1:34:0d:07:10:
b0:77:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:13 2025 by rpki-client