Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/kxZGr0wxISybkJXuB-72u3H2hYc.roa
File: kxZGr0wxISybkJXuB-72u3H2hYc.roa (raw, json)
Hash identifier: oCqiWBEnlai060zgLnSdRmM0Glh4zo/5GEwbCYPuJDg=
Subject key identifier: 93:16:46:AF:4C:31:21:2C:9B:90:95:EE:07:EE:F6:BB:71:F6:85:87
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 01949DDCE3BB7AE884FB1F494B020A40D556
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/kxZGr0wxISybkJXuB-72u3H2hYc.roa
Signing time: Sat 25 Jan 2025 14:28:06 +0000
ROA not before: Sat 25 Jan 2025 14:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43847
IP address blocks: 31.185.104.0/23 maxlen: 23
46.182.16.0/23 maxlen: 23
46.182.18.0/23 maxlen: 23
46.182.20.0/23 maxlen: 23
46.182.23.0/24 maxlen: 24
2a02:2970::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:dc:e3:bb:7a:e8:84:fb:1f:49:4b:02:0a:40:d5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 25 14:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=931646af4c31212c9b9095ee07eef6bb71f68587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:5b:8a:ce:29:a6:b2:94:2d:8f:2a:2f:11:
6f:e3:6d:8a:92:23:d5:51:7b:7e:67:6a:3c:99:1a:
9b:70:b1:8b:84:0f:1d:f4:4e:e9:91:97:e5:68:1f:
ed:d4:ed:7b:76:a5:cf:29:9d:d5:8b:5b:df:f9:20:
dc:45:f9:b8:b6:c3:6d:07:42:44:c6:ad:52:63:09:
7d:f5:c4:20:1e:be:5f:2f:99:ff:06:34:ee:4f:38:
44:cb:a1:12:b2:92:6c:0a:ee:50:fa:f2:25:18:75:
6e:92:f6:47:93:ff:15:f3:4a:9a:c7:63:e5:13:c1:
7d:68:67:ce:e4:60:9c:23:25:1a:06:49:93:87:a0:
83:50:84:c3:b0:2f:7e:87:65:a5:35:ff:b7:44:d1:
f2:ee:99:5c:53:0a:00:3f:11:b4:a8:12:17:db:de:
b1:ea:d9:f9:dc:53:64:91:8e:1b:a5:c0:fe:6a:23:
57:f4:f2:48:0e:03:75:9b:05:2e:b8:6c:82:a6:0b:
ab:8c:7c:b7:86:e4:3b:1e:94:36:85:da:d3:6f:d0:
ee:1c:37:cb:45:c4:63:f0:e1:44:c6:9e:d3:5f:95:
bb:bd:3c:63:ac:fe:ee:41:6c:f4:a6:72:a7:dc:96:
c5:a0:7b:09:f8:77:e1:fd:87:a7:42:30:4b:0f:5a:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:46:AF:4C:31:21:2C:9B:90:95:EE:07:EE:F6:BB:71:F6:85:87
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/kxZGr0wxISybkJXuB-72u3H2hYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/23
46.182.16.0-46.182.21.255
46.182.23.0/24
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
27:45:0e:b1:49:e9:4d:cb:e6:00:15:b8:ab:36:94:0e:1a:c2:
0e:5d:c8:41:54:07:0f:13:ec:c1:14:4c:ce:b0:7e:1b:3d:aa:
ae:6d:d6:af:92:27:29:09:b5:63:eb:94:0b:18:1c:50:eb:21:
46:70:ef:c4:71:25:df:4b:4e:22:8b:49:02:5a:18:9b:be:a3:
c7:f0:4a:df:93:21:88:cd:fb:45:c3:27:a9:9f:9a:21:71:c8:
f8:06:1c:af:b9:31:ee:bc:e1:49:68:9a:93:9a:bf:e7:c8:ed:
df:cf:06:22:0a:2c:3a:8a:4b:a3:60:c8:fe:95:2c:07:98:0f:
a7:09:4d:eb:cd:e9:e4:fb:ed:b4:41:1b:8b:40:48:66:09:80:
10:7e:19:68:6c:0a:2a:9a:a6:ab:ee:9e:3c:30:bf:d2:48:ea:
31:80:6c:25:19:f5:c8:01:b5:a7:e4:c7:1f:de:d0:42:8c:05:
f4:50:a2:9a:88:2e:c5:5b:b8:01:75:44:b7:ae:5c:58:ca:32:
a5:f0:b1:8d:de:17:3e:ed:ca:ec:68:47:e8:a0:23:8d:10:df:
96:f0:ef:c3:29:38:64:27:4b:08:e7:40:d1:f4:eb:fe:4d:ea:
8f:cb:c1:36:6a:54:02:0d:d0:8a:6f:10:9e:39:13:a5:36:bc:
25:4a:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:50:50 2025 by rpki-client