Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/V024GRLlMxzyRrCg_GLrYLyR1jc.roa
File: V024GRLlMxzyRrCg_GLrYLyR1jc.roa (raw, json)
Hash identifier: S0VvD9Gc5LggxY1QSL2ugW3AMEHyKi0zuy0KR5ERevM=
Subject key identifier: 57:4D:B8:19:12:E5:33:1C:F2:46:B0:A0:FC:62:EB:60:BC:91:D6:37
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 029F36AE
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/V024GRLlMxzyRrCg_GLrYLyR1jc.roa
Signing time: Sat 01 Jan 2022 02:53:15 +0000
ROA not before: Sat 01 Jan 2022 02:53:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.11.40.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
37.251.200.0/21 maxlen: 24
46.19.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
37.251.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43988654 (0x29f36ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=574db81912e5331cf246b0a0fc62eb60bc91d637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:a6:0c:0e:6d:9f:92:7e:49:03:7e:7d:7b:
31:53:c3:f5:84:df:e0:d7:91:e5:36:b0:7c:69:6b:
61:b8:d2:11:72:df:a3:fe:f9:ea:58:36:90:fb:21:
6c:4f:0a:97:b4:2d:d0:44:cb:fe:35:70:b2:e1:f5:
03:8b:50:e1:c5:4d:fc:d0:30:34:bd:7f:7c:39:61:
bd:07:6c:8f:ff:8f:31:1d:8f:e9:6f:90:13:2a:44:
06:41:5f:59:81:88:33:84:79:82:cd:b9:53:47:9f:
af:6f:23:35:fa:2d:2f:cc:a7:14:47:55:0a:1a:2d:
39:fd:00:52:9e:37:a9:58:52:49:87:c0:91:88:0d:
5e:be:d3:ce:04:73:44:0e:f2:59:8b:95:d2:8a:56:
76:6a:ec:5d:27:39:27:2c:ee:d9:65:e5:57:78:e6:
37:66:4a:42:bb:13:12:26:17:37:29:85:ca:c2:a1:
47:22:99:fa:13:ea:c3:4c:d0:fb:b2:d3:82:c7:23:
54:16:28:c9:ff:6c:14:82:56:d3:8d:4e:da:22:8a:
6d:12:31:0d:fd:a2:12:b0:1d:fa:ed:a3:0e:a4:c3:
c2:b4:ed:94:5b:89:a0:f6:42:e1:a0:83:ed:82:70:
54:e4:d1:9b:35:0a:68:05:27:20:00:95:59:ab:31:
c0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:B8:19:12:E5:33:1C:F2:46:B0:A0:FC:62:EB:60:BC:91:D6:37
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/V024GRLlMxzyRrCg_GLrYLyR1jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.19.104.0/21
46.231.104.0/21
62.122.40.0/21
94.24.64.0/21
141.136.16.0/20
Signature Algorithm: sha256WithRSAEncryption
53:5a:22:74:bd:2f:62:0a:17:5a:55:35:77:f3:73:2c:23:b7:
90:54:51:c5:d3:9a:8c:74:a2:17:c6:04:cd:ca:bc:4e:a1:85:
be:cc:2a:e2:a4:59:8e:cd:7c:04:d1:63:dd:e3:b6:67:23:ec:
61:1a:d6:99:27:1a:b4:2b:f7:b1:9c:e6:14:f9:d5:e6:ee:2c:
55:4b:42:82:d7:c8:62:3c:04:a9:29:07:75:bf:66:02:bd:b1:
f5:de:ba:ea:48:8f:f1:36:0f:2e:c3:ff:5d:8d:c3:b0:ae:33:
1b:a0:7c:da:e5:38:fd:8a:de:f1:34:66:d7:c3:d9:10:68:8a:
92:3a:e6:8e:c8:64:b5:bd:15:39:d3:bf:ee:16:a7:d7:dc:bb:
70:fd:db:52:7b:d9:e6:88:1a:ad:59:84:d6:60:1c:a1:a3:bb:
6d:8e:a5:c8:4c:89:30:80:0d:9c:24:0f:64:f6:69:83:37:1a:
d7:54:e1:8f:59:c7:98:4a:f6:a2:0a:12:09:95:3f:fb:af:b6:
0a:d1:c9:36:9e:7e:f7:e6:f7:0f:ab:f9:b9:a7:a0:8f:d7:8a:
68:1f:90:18:48:d4:e6:07:1e:60:82:f0:c9:c2:01:ce:dd:ae:
d6:5e:6c:5f:ca:08:34:f8:4d:a2:cd:20:67:9e:36:0c:79:dc:
b4:31:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:04:01 2025 by rpki-client