Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/El8gKK_EkYumRQbSIHn8Op4CqP0.roa
File: El8gKK_EkYumRQbSIHn8Op4CqP0.roa (raw, json)
Hash identifier: /OYLyTBF1jIEKhN2sG2bBS59VO+ViGQAW+puDdd9i+o=
Subject key identifier: 12:5F:20:28:AF:C4:91:8B:A6:45:06:D2:20:79:FC:3A:9E:02:A8:FD
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 0194A63A4E5688A135D52960D15A6B1E9303
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/El8gKK_EkYumRQbSIHn8Op4CqP0.roa
Signing time: Mon 27 Jan 2025 05:27:06 +0000
ROA not before: Mon 27 Jan 2025 05:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 31.185.106.0/24 maxlen: 24
31.185.107.0/24 maxlen: 24
31.185.108.0/24 maxlen: 24
31.185.109.0/24 maxlen: 24
46.182.22.0/24 maxlen: 24
185.58.156.0/24 maxlen: 24
185.58.157.0/24 maxlen: 24
185.58.158.0/24 maxlen: 24
185.58.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:3a:4e:56:88:a1:35:d5:29:60:d1:5a:6b:1e:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 27 05:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125f2028afc4918ba64506d22079fc3a9e02a8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:44:19:16:cb:81:cb:ae:e2:e7:dd:c1:a6:59:
72:24:fd:39:d3:da:7f:a8:6d:c8:68:70:85:fc:50:
22:a6:21:a3:9b:0c:35:53:04:50:2c:2b:cc:bc:69:
47:f3:9b:21:ed:f0:5c:8b:21:36:77:1f:62:ee:7b:
d1:0c:2f:1f:6d:ed:c1:15:5e:ef:ea:95:3b:3a:b2:
6f:a2:0c:70:a9:b6:48:b9:5e:bf:d6:a6:3b:c1:34:
fb:30:30:db:e8:8a:36:b9:f8:dc:40:29:b6:29:b7:
c7:76:a1:8a:6f:ae:7e:39:25:88:81:5b:a4:a1:ca:
81:6d:27:d6:44:cc:78:86:db:21:eb:fa:4c:84:0f:
c2:be:56:ff:be:db:6e:4f:d5:27:0b:21:6c:9e:cf:
fc:a2:7a:91:1e:13:e8:5a:0b:84:e4:1c:0f:0b:ea:
fd:7b:de:1b:6d:49:64:4f:f5:3c:ff:2a:87:ca:ef:
9a:dc:10:a1:3f:dd:24:69:c0:e0:ce:6d:38:32:cb:
8b:d0:1f:a4:40:66:9b:a0:52:c2:35:d9:55:a5:71:
4c:8a:0d:54:c5:77:d7:05:56:1c:a7:ee:df:52:ee:
3a:a5:84:08:14:8b:6b:cb:a3:f4:3d:32:45:81:e3:
b8:5b:b7:a9:10:d9:e0:3c:31:f4:51:a2:f6:16:7d:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:20:28:AF:C4:91:8B:A6:45:06:D2:20:79:FC:3A:9E:02:A8:FD
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/El8gKK_EkYumRQbSIHn8Op4CqP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.106.0-31.185.109.255
46.182.22.0/24
185.58.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:1e:94:ae:7f:4a:af:f1:66:9b:50:bc:2f:cd:b0:6c:92:96:
f3:89:02:a7:a4:9c:32:ea:c7:aa:ce:88:2d:81:fc:6c:79:50:
ff:80:e7:87:d2:48:83:07:8e:38:1b:4f:9b:17:f2:69:4f:98:
89:a0:39:d5:a0:8d:2f:a5:24:13:59:21:ed:50:ef:bb:7e:0b:
f9:4c:2e:a3:8c:68:45:4c:d0:5f:f6:ce:c3:bb:63:33:a3:9b:
0d:28:2e:c8:e0:ee:d5:18:1b:62:40:54:3a:77:32:cd:94:7b:
70:bc:b0:9d:a0:6d:45:7c:ab:16:31:1f:2e:8e:2e:99:ed:72:
2b:b3:67:b0:5f:89:1b:0c:37:99:79:66:9f:85:bf:03:95:d9:
02:3e:e3:df:24:af:52:5b:2d:96:5e:ee:bb:22:4a:e5:f1:9d:
47:35:1e:5b:04:50:68:ce:1b:53:a8:69:70:b3:06:f4:31:4d:
5e:c4:6b:9b:f9:05:cd:da:00:9b:08:0c:37:d6:71:97:24:93:
32:da:d0:ea:1d:c9:c7:31:4b:09:36:ce:ba:57:04:10:59:93:
e1:09:34:6a:18:9f:3e:81:20:f7:84:e0:ee:24:fc:a9:87:b8:
66:9a:05:7a:3d:14:53:05:2e:1f:b6:64:4d:a3:fa:e4:9b:78:
60:60:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:57:05 2025 by rpki-client