Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/g7eO-DE2Uamte_BtGrwgXuN4l5g.roa
File: g7eO-DE2Uamte_BtGrwgXuN4l5g.roa (raw, json)
Hash identifier: 0pjaEubJrMyeKI/e85TecGPEAzY9X1cN0k+BYLlrbYc=
Subject key identifier: 83:B7:8E:F8:31:36:51:A9:AD:7B:F0:6D:1A:BC:20:5E:E3:78:97:98
Certificate issuer: /CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Certificate serial: 065AE156
Authority key identifier: B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/g7eO-DE2Uamte_BtGrwgXuN4l5g.roa
Signing time: Mon 09 May 2022 05:50:42 +0000
ROA not before: Mon 09 May 2022 05:50:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60422
IP address blocks: 188.116.39.0/24 maxlen: 24
185.31.76.0/22 maxlen: 22
2a00:b920::/40 maxlen: 40
2a00:b920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106619222 (0x65ae156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b287ff2a733e33beaf53494a90eec152bbc758bc
Validity
Not Before: May 9 05:50:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83b78ef8313651a9ad7bf06d1abc205ee3789798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7a:fb:98:2c:9c:c5:a4:a4:a3:9f:56:ab:86:
4a:44:aa:dc:71:79:29:12:f9:ab:ce:40:f7:b2:ba:
b5:5a:8f:99:6e:99:e9:f2:cf:38:f4:86:10:88:3c:
a2:87:da:35:00:39:46:23:8e:73:9e:6e:2c:f1:da:
7a:e5:8e:75:a0:3a:4a:b1:e3:21:8c:9b:e8:4a:52:
4e:2b:10:84:92:76:e0:c5:fa:e3:d3:e2:54:7e:3d:
f5:2a:ed:eb:f5:03:e4:fa:ea:63:fc:ac:4c:3f:0a:
93:bf:e2:ad:51:57:25:34:3e:30:8f:a6:bf:fa:17:
de:12:c7:83:c8:4c:7d:7c:fd:6c:a0:7b:81:1f:a4:
9a:fb:cf:8b:20:c3:6b:3f:e1:2f:40:5a:26:ef:4b:
62:32:9c:3b:9b:36:06:8e:2d:a3:27:93:c5:a5:5c:
8f:69:44:fb:97:e3:e1:8f:99:15:a5:c7:3c:c8:76:
86:13:1b:7b:2b:95:d4:70:6f:bf:a1:c2:4d:24:d0:
5f:bf:0d:b9:91:4f:42:73:1e:fa:60:91:55:e6:58:
49:e6:8f:96:16:51:78:e8:59:69:37:11:de:21:b5:
15:78:27:75:73:85:29:67:0d:c8:f8:46:28:18:8a:
d8:7f:69:1a:02:18:b7:05:b7:2e:6f:92:d3:4e:9b:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:8E:F8:31:36:51:A9:AD:7B:F0:6D:1A:BC:20:5E:E3:78:97:98
X509v3 Authority Key Identifier:
keyid:B2:87:FF:2A:73:3E:33:BE:AF:53:49:4A:90:EE:C1:52:BB:C7:58:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sof_KnM-M76vU0lKkO7BUrvHWLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/g7eO-DE2Uamte_BtGrwgXuN4l5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cb2151-05ca-4a76-859f-4f5ec0a7e006/1/sof_KnM-M76vU0lKkO7BUrvHWLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.76.0/22
188.116.39.0/24
IPv6:
2a00:b920::/32
Signature Algorithm: sha256WithRSAEncryption
aa:40:56:d0:c5:01:8c:10:79:48:8d:30:fe:0a:30:fb:f2:8a:
48:fa:16:82:69:27:4c:b9:d3:e9:c7:0f:69:39:5c:c7:2b:d2:
4f:eb:f8:09:ca:49:91:30:b9:a7:76:9b:2e:4b:4e:ef:4a:a4:
a7:82:68:bb:e3:7f:b9:e8:0a:a0:12:7c:f2:04:bc:8a:4d:a1:
13:fb:97:88:9e:72:e0:21:5b:71:5d:64:ca:a6:17:e1:dc:8c:
9a:6f:2d:d8:51:a7:49:48:ae:f9:a8:3d:66:32:5a:ef:7f:f1:
40:65:63:d4:d2:1c:7d:dd:b3:bf:a2:2d:02:19:6a:dd:6d:fd:
03:cb:2a:87:58:f7:7e:d2:cc:a7:e1:7a:c5:16:a6:07:06:a6:
7e:c9:95:5c:0f:c3:c2:72:3f:38:40:4c:bf:8e:62:0c:30:d8:
70:9a:94:05:14:fc:bc:36:ea:90:57:dc:ed:13:64:d9:9c:53:
36:7c:26:c3:3f:c0:a4:77:cb:1a:cb:dc:8c:8d:94:24:2b:4a:
07:9f:7c:ad:15:a8:4d:a8:1a:df:f0:ef:c0:6a:02:44:75:40:
15:0d:27:89:18:4f:83:37:10:e1:44:07:a7:f6:e3:91:ff:5e:
4e:5e:b6:ee:30:15:b3:48:c5:d0:d4:32:e4:b2:22:a7:7b:a0:
3b:c9:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:02 2025 by rpki-client