Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/4amot-q9WGbsvGY4o35XiO5GMaA.roa
File: 4amot-q9WGbsvGY4o35XiO5GMaA.roa (raw, json)
Hash identifier: TxVz2ImZdI9RosL6u7n8kKdIdL3QeRac6b1/odT1tY0=
Subject key identifier: E1:A9:A8:B7:EA:BD:58:66:EC:BC:66:38:A3:7E:57:88:EE:46:31:A0
Certificate issuer: /CN=d8aa1c7a68b220441ab5f1b375b223de8c614e79
Certificate serial: 0185A7522815CE54CE14773DC871709A9BA2
Authority key identifier: D8:AA:1C:7A:68:B2:20:44:1A:B5:F1:B3:75:B2:23:DE:8C:61:4E:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KocemiyIEQatfGzdbIj3oxhTnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/4amot-q9WGbsvGY4o35XiO5GMaA.roa
Signing time: Thu 12 Jan 2023 18:50:57 +0000
ROA not before: Thu 12 Jan 2023 18:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48882
IP address blocks: 91.218.16.0/22 maxlen: 22
95.215.50.0/24 maxlen: 24
95.215.51.0/24 maxlen: 24
95.215.48.0/24 maxlen: 24
95.215.49.0/24 maxlen: 24
31.133.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a7:52:28:15:ce:54:ce:14:77:3d:c8:71:70:9a:9b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aa1c7a68b220441ab5f1b375b223de8c614e79
Validity
Not Before: Jan 12 18:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1a9a8b7eabd5866ecbc6638a37e5788ee4631a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:d3:60:a8:58:2f:50:89:30:04:ab:68:e9:
b8:14:3b:d7:6e:f5:a3:58:c0:7a:07:cd:02:7e:4d:
02:9b:e8:6b:47:5d:b0:d4:77:a6:cf:52:ab:38:b5:
b2:49:aa:15:7b:38:18:45:ba:41:8b:d4:33:cc:2b:
89:6e:28:e9:0c:12:33:26:b7:96:f3:53:0f:49:79:
fb:6e:f4:07:59:c1:21:3c:8a:1e:07:a0:bf:fa:68:
da:42:ea:11:1f:5b:11:57:7e:dc:a7:a6:0b:90:dd:
df:22:91:3b:33:cd:c9:47:39:54:79:0d:1e:84:4f:
ce:14:39:81:a2:36:cf:a4:86:a6:0a:38:11:0e:42:
95:b4:5f:ee:ea:21:70:cf:92:92:74:00:39:39:20:
bf:bd:b4:2c:e8:52:aa:55:8a:5e:84:1f:55:dd:ce:
1a:58:26:57:17:5c:0c:b9:76:d0:7c:90:39:30:0e:
ba:69:45:b7:96:85:67:75:63:90:7e:dc:f6:8b:71:
15:45:43:6d:f0:58:e5:7d:3f:94:ea:b8:13:4f:f0:
5f:ec:cb:cb:fb:e6:64:5d:25:ba:f2:84:bc:9c:26:
dc:9a:9e:ef:24:60:e9:b1:a3:f9:71:8d:90:19:c8:
8e:75:62:28:27:d2:c6:5d:a7:5e:48:8a:ea:c9:cf:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A9:A8:B7:EA:BD:58:66:EC:BC:66:38:A3:7E:57:88:EE:46:31:A0
X509v3 Authority Key Identifier:
keyid:D8:AA:1C:7A:68:B2:20:44:1A:B5:F1:B3:75:B2:23:DE:8C:61:4E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KocemiyIEQatfGzdbIj3oxhTnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/4amot-q9WGbsvGY4o35XiO5GMaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/db2bd4-af34-441d-8ca9-9f7ed5ca675e/1/2KocemiyIEQatfGzdbIj3oxhTnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.64.0/20
91.218.16.0/22
95.215.48.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:26:93:9a:e2:9b:2e:52:6e:ac:e5:d1:81:fc:0b:03:29:c6:
26:4f:2d:92:8e:06:63:47:f9:84:78:9d:3a:e2:86:8f:a8:c3:
83:37:86:0a:59:92:16:10:4a:f7:8f:c3:38:02:60:8c:e2:60:
96:01:26:ec:4a:e2:27:a4:67:5f:67:75:db:73:2c:df:85:75:
06:0e:2e:df:1e:98:a2:95:98:0f:cc:45:5a:21:3c:5f:2d:a9:
d2:e6:a1:4a:80:e5:57:58:26:7f:1d:9f:ca:e6:af:33:38:a3:
1b:a2:9d:9d:51:84:40:71:56:42:a8:6d:a2:eb:f5:7f:0c:6f:
01:44:01:b7:56:d2:c4:97:2f:99:58:00:1f:45:41:7e:be:5b:
d7:92:57:e7:0e:fa:74:8d:aa:a5:83:5c:fe:31:b3:83:76:d6:
65:a7:b0:7c:a0:95:c0:30:05:6b:a0:91:65:87:79:91:0a:b7:
2d:fb:a0:aa:35:0f:a4:ab:ba:90:26:96:ad:18:fd:ae:19:d1:
4b:f8:c0:43:6f:60:67:18:d3:bf:33:fa:8d:65:47:28:59:20:
f5:4a:72:be:9a:60:63:61:1c:79:5c:cd:8d:68:bf:ae:f3:54:
c1:5a:76:2a:f9:69:e0:7c:2c:b0:12:f8:89:26:3b:94:29:57:
e7:6d:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:20 2025 by rpki-client