Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/DvYCTuSWzh-Zjs9ympDA72RAkoc.roa
File: DvYCTuSWzh-Zjs9ympDA72RAkoc.roa (raw, json)
Hash identifier: 8sefMbbn/sXvyQd6Xc46+wPYkUwPOtMELgJFbR+PAv8=
Subject key identifier: 0E:F6:02:4E:E4:96:CE:1F:99:8E:CF:72:9A:90:C0:EF:64:40:92:87
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 37E7E6AE
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/DvYCTuSWzh-Zjs9ympDA72RAkoc.roa
Signing time: Sat 01 Jan 2022 07:01:48 +0000
ROA not before: Sat 01 Jan 2022 07:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43847
IP address blocks: 185.58.156.0/22 maxlen: 24
31.185.104.0/21 maxlen: 24
46.182.16.0/21 maxlen: 24
2a02:2970::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937944750 (0x37e7e6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 1 07:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef6024ee496ce1f998ecf729a90c0ef64409287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:70:fc:eb:ea:89:b1:40:51:41:28:9d:9e:a7:
60:e6:d9:fc:19:a4:5e:db:85:d2:6a:aa:08:6a:6d:
d3:ce:b3:d1:65:b8:33:be:0b:6b:c8:24:39:6c:10:
a2:92:5b:5c:4f:e7:d4:2f:8b:76:61:dd:c3:02:41:
cb:84:4d:97:ff:e2:65:6e:ac:bd:0d:83:3e:cc:f2:
41:01:6b:10:bc:0c:b0:5b:53:3a:f7:f7:71:0a:ac:
a9:5d:76:90:12:23:e6:3a:c6:1f:5e:da:2c:66:5b:
fc:0c:0a:3f:90:f6:49:ac:fe:3e:79:a6:d9:72:a5:
6e:66:de:a1:f2:c1:e1:5a:0b:0a:0c:66:9d:b7:69:
a3:7d:fa:e9:93:1f:d2:2e:82:7a:09:ec:79:34:14:
ec:46:62:6b:d8:3c:44:cb:a0:9f:32:c1:2d:30:2a:
b5:85:a3:6e:8a:79:92:44:4e:2b:d9:28:1c:24:e2:
31:c9:e2:ae:57:d4:c4:03:3c:47:8f:b9:e3:fc:1e:
67:b8:a4:07:17:6a:a2:85:9d:d4:7d:18:00:8d:8f:
62:e4:c7:c5:8d:91:7f:0a:b7:63:6a:23:a1:c0:d7:
86:aa:cf:88:f9:86:30:fb:d4:98:01:3d:60:70:73:
53:a8:2b:2b:33:9c:01:66:ec:dc:1f:92:80:cb:82:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F6:02:4E:E4:96:CE:1F:99:8E:CF:72:9A:90:C0:EF:64:40:92:87
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/DvYCTuSWzh-Zjs9ympDA72RAkoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/21
46.182.16.0/21
185.58.156.0/22
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
98:69:4c:d9:60:c2:b0:f2:44:18:89:21:11:1d:81:48:c2:30:
16:64:3b:d8:16:58:f5:e0:ac:17:27:8a:f9:12:c1:3c:a3:d0:
f7:00:e0:f4:b0:84:d9:0a:51:ec:24:c0:19:d0:73:81:74:89:
b7:b6:c0:6f:5d:e6:c4:a4:da:e7:e2:5c:1a:e0:9e:56:f2:9e:
20:23:0e:10:aa:fe:e9:8a:84:8b:b4:03:ac:15:d1:37:d1:9d:
14:b5:f0:13:5a:e3:8c:22:c5:22:4b:8d:23:ea:23:42:4b:4f:
6a:da:b3:b7:80:d1:1e:d7:4b:55:f1:86:ad:20:32:13:66:0b:
c4:de:4c:d6:33:99:87:4b:47:b9:22:b7:fb:5c:41:0e:7a:1b:
7a:b7:e6:39:50:9c:04:67:d5:d0:f2:6f:fc:5f:ea:d2:50:4c:
00:04:7a:06:b1:f3:88:00:45:a2:14:ac:ef:fe:a1:d1:21:0b:
d1:72:5b:f5:37:79:15:39:fb:52:64:b2:4f:13:2c:1a:01:b7:
5b:d0:05:01:3f:f6:0d:7c:40:57:cd:26:96:58:b0:1f:81:51:
b2:51:11:53:dd:2c:96:5b:c6:be:3b:0b:01:43:8f:07:73:ad:
85:cc:35:b3:80:cc:93:88:ab:dc:93:b5:02:a0:4b:98:7e:e1:
1a:46:81:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:40 2025 by rpki-client