Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/vVfd546sPuNt5HAwREz0XRLlbJQ.roa
File: vVfd546sPuNt5HAwREz0XRLlbJQ.roa (raw, json)
Hash identifier: thRMOMMG20mZv90Wlyr8npSKbZlDwTSe/qe1hsf90YM=
Subject key identifier: BD:57:DD:E7:8E:AC:3E:E3:6D:E4:70:30:44:4C:F4:5D:12:E5:6C:94
Certificate issuer: /CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Certificate serial: 018570D53327FA321C90A499912B74A93E59
Authority key identifier: E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/vVfd546sPuNt5HAwREz0XRLlbJQ.roa
Signing time: Mon 02 Jan 2023 04:54:58 +0000
ROA not before: Mon 02 Jan 2023 04:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34412
IP address blocks: 185.49.231.0/24 maxlen: 24
185.226.140.0/24 maxlen: 24
185.226.143.0/24 maxlen: 24
185.226.141.0/24 maxlen: 24
185.226.142.0/24 maxlen: 24
31.25.91.0/24 maxlen: 24
31.25.90.0/24 maxlen: 24
2a10:5740:1::/48 maxlen: 48
2a10:5740:2::/48 maxlen: 48
2a10:5740::/48 maxlen: 48
2a10:5740:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:33:27:fa:32:1c:90:a4:99:91:2b:74:a9:3e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Validity
Not Before: Jan 2 04:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd57dde78eac3ee36de47030444cf45d12e56c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:38:71:f8:a4:3c:18:47:00:90:c5:62:f6:
c3:ae:e0:12:fa:de:30:0c:45:8d:f7:44:dc:cf:77:
26:9d:78:34:99:9b:33:71:1e:f4:c7:64:50:d2:c8:
44:46:f5:98:17:57:ef:66:0f:75:5f:a5:77:ed:06:
e5:b1:26:45:2c:9d:f0:6d:0d:2a:c2:4f:2d:e1:7e:
80:87:9d:aa:90:8d:bc:6c:6a:97:f0:1b:df:10:50:
73:f4:67:f7:35:6d:86:48:06:5c:8e:df:8b:41:44:
9d:ce:e5:d5:75:6b:67:d0:be:53:58:96:5d:64:51:
9d:95:17:5b:eb:ed:ed:60:23:f3:8f:5c:de:7f:a0:
10:f8:93:6e:dd:65:62:4b:a1:0d:b5:35:d4:d7:11:
ca:cc:b2:cb:f5:63:08:93:13:69:47:64:38:5d:51:
1e:0c:c9:72:3a:01:1c:ed:1d:85:9e:52:5c:a9:99:
0e:5e:04:cf:cf:7c:95:06:b4:d3:cc:27:05:03:65:
90:4f:43:a7:fb:b8:f1:84:f7:bb:c1:76:10:3e:ed:
09:05:68:38:c1:78:ad:9b:28:1b:bf:67:56:8c:05:
62:83:07:c9:93:17:6b:53:dd:54:2c:33:69:ff:7c:
a1:fc:b1:d6:8b:d0:89:b9:66:4d:29:75:91:a4:42:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:57:DD:E7:8E:AC:3E:E3:6D:E4:70:30:44:4C:F4:5D:12:E5:6C:94
X509v3 Authority Key Identifier:
keyid:E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/vVfd546sPuNt5HAwREz0XRLlbJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.90.0/23
185.49.231.0/24
185.226.140.0/22
IPv6:
2a10:5740::/46
Signature Algorithm: sha256WithRSAEncryption
a4:b5:fb:d5:0b:31:29:f4:37:68:87:67:69:5e:b8:71:b7:c0:
d6:2d:63:41:26:97:ad:c3:3d:50:25:df:da:04:84:7e:ba:36:
20:8d:ea:18:23:d6:b5:d1:3b:82:09:16:ae:83:94:03:a0:de:
da:ce:6e:77:49:e6:d5:2b:74:c7:2d:ab:46:8c:59:97:96:80:
0f:8a:49:9a:e2:b8:71:f2:77:1d:2a:6d:04:82:1a:26:3c:5b:
b9:2b:88:bb:c9:73:47:04:00:51:3f:3f:e1:40:c5:f4:d7:d4:
a3:c3:a3:5f:e9:f6:5a:d9:7d:83:8f:ee:db:8f:4e:80:f7:9a:
8b:44:65:81:11:58:dc:28:85:45:0f:b2:d0:28:de:c4:d2:70:
97:8e:f3:7a:c2:be:79:99:a4:7c:84:15:29:26:a2:3c:7e:44:
26:46:bf:3f:0c:5b:65:61:3c:db:27:27:b8:3e:75:b7:c6:c0:
bc:26:9d:f8:1d:3e:12:7f:3d:82:d9:4c:5b:74:44:c7:fa:f7:
c0:48:5e:50:92:42:66:67:8b:f7:d1:6d:9f:de:37:50:9a:82:
b5:6e:85:89:67:3f:0e:92:d8:04:63:9c:58:b2:1a:79:f4:e8:
63:bb:20:9b:b9:f1:b8:3b:7f:14:03:85:0c:7b:85:19:18:71:
14:bc:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 14:40:24 2023 by rpki-client on console-fra.rpki-client.org