Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa
File: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (raw, json)
Hash identifier: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=
Subject key identifier: 29:BC:77:FF:BA:06:6E:00:B0:4B:91:EC:E2:86:3D:B9:5D:F6:B9:C7
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0194221FE183C01B56DC6D197605C3B10D3C
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8251
IP address blocks: 31.47.96.0/20 maxlen: 20
78.108.96.0/20 maxlen: 20
81.201.48.0/21 maxlen: 21
81.201.48.175/32 maxlen: 32
81.201.56.0/21 maxlen: 21
185.99.64.0/22 maxlen: 22
212.79.96.0/20 maxlen: 20
2a01:490::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e1:83:c0:1b:56:dc:6d:19:76:05:c3:b1:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29bc77ffba066e00b04b91ece2863db95df6b9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:3b:79:c9:31:bd:7e:f0:f3:29:50:4e:d2:
45:75:ca:86:a0:74:3a:76:24:6c:fe:ce:60:78:bf:
fc:22:15:fc:ed:2e:f3:f4:11:4a:b9:e5:f9:cf:f1:
a2:a9:09:3c:a6:50:e8:43:88:91:1d:3c:33:8d:5b:
5e:a1:ac:30:c0:87:9f:1a:1d:a1:cb:0f:73:54:37:
94:c8:07:7e:5a:91:88:4b:af:1a:a0:69:3f:e6:0e:
5c:e6:d5:6b:22:4a:ae:50:e9:d3:e0:54:c3:9e:4e:
97:15:1c:c0:df:06:e3:09:af:82:f8:73:94:da:cd:
cb:9f:f7:09:64:8e:13:80:67:c0:a6:23:08:d3:53:
07:59:86:2d:f6:5a:d6:9c:26:77:51:af:7c:f0:1a:
25:61:b6:e8:35:c6:93:3b:63:88:41:9d:6a:17:c4:
3c:38:f1:bc:3b:52:0d:40:55:54:8a:fe:eb:88:c5:
15:e4:fa:20:5b:dc:df:8e:31:01:c8:04:77:2c:b7:
98:bf:0e:12:22:86:4d:dc:e1:de:6c:d4:69:0b:e6:
10:d8:36:91:00:f5:f8:11:84:0c:f2:17:97:60:89:
28:13:bf:3a:eb:63:25:c9:37:d8:a4:b7:a1:c1:aa:
de:3c:0e:de:8e:cf:37:66:2c:dd:f7:4b:e9:19:d3:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BC:77:FF:BA:06:6E:00:B0:4B:91:EC:E2:86:3D:B9:5D:F6:B9:C7
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.96.0/20
78.108.96.0/20
81.201.48.0/20
185.99.64.0/22
212.79.96.0/20
IPv6:
2a01:490::/32
Signature Algorithm: sha256WithRSAEncryption
24:77:a8:ef:1e:5f:f1:8f:24:08:a1:ec:b0:04:16:67:81:7d:
72:c3:26:a9:97:98:ff:c8:db:ca:f8:cc:1d:09:15:29:d9:92:
5b:d9:1f:22:93:59:7e:eb:3f:4e:60:6c:c9:3b:52:e6:e4:65:
ff:9b:88:a6:55:2b:ba:a9:fb:c2:e9:17:d2:ad:c5:5e:92:61:
71:da:03:7f:e7:87:77:42:c3:7f:f8:fd:fb:fb:fe:a4:12:0a:
7c:49:d4:85:3f:09:ec:72:2a:65:a7:11:f5:9b:52:b9:ae:79:
72:6f:52:d0:25:0b:ff:65:d4:92:c1:24:f9:41:ab:3d:6f:47:
89:f6:33:7d:e0:df:2b:65:6b:82:31:15:5b:4f:e6:d0:d1:77:
7b:4a:38:7e:8f:11:d9:93:a5:0c:ef:61:27:ab:ef:e8:6c:c6:
89:6d:95:38:ce:8e:2d:24:c4:f7:c1:74:9b:47:ad:42:12:3b:
dd:f6:8f:98:94:b1:7f:cc:15:5e:a1:76:56:40:ef:52:41:f2:
d6:e8:38:78:99:ce:18:79:ce:4f:6b:8d:3c:65:27:44:57:03:
85:d9:cf:5a:5a:ef:2e:b8:f8:c4:e5:1c:40:09:91:a8:9e:bc:
b1:67:33:4d:67:06:2c:da:a7:68:42:df:90:f3:6d:86:b1:5b:
62:df:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:49 2025 by rpki-client