Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/g4Chy_l8lrfuc_lKDKlA8lvh818.roa
File: g4Chy_l8lrfuc_lKDKlA8lvh818.roa (raw, json)
Hash identifier: RDR5JI2ijaAHUcDzFI/yIDjbLt8wDeikrLdX1McWokU=
Subject key identifier: 83:80:A1:CB:F9:7C:96:B7:EE:73:F9:4A:0C:A9:40:F2:5B:E1:F3:5F
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 018CC8DE9EBF8901B070B1646AF388E9EC39
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/g4Chy_l8lrfuc_lKDKlA8lvh818.roa
Signing time: Tue 02 Jan 2024 06:31:21 +0000
ROA not before: Tue 02 Jan 2024 06:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198188
IP address blocks: 185.220.17.0/24 maxlen: 24
185.220.16.0/24 maxlen: 24
185.220.18.0/24 maxlen: 24
185.220.19.0/24 maxlen: 24
31.186.104.0/24 maxlen: 24
31.186.105.0/24 maxlen: 24
31.186.108.0/24 maxlen: 24
31.186.109.0/24 maxlen: 24
31.186.106.0/24 maxlen: 24
31.186.107.0/24 maxlen: 24
31.186.111.0/24 maxlen: 24
31.186.110.0/24 maxlen: 24
2a0b:ea40::/32 maxlen: 32
2a0b:ea41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:9e:bf:89:01:b0:70:b1:64:6a:f3:88:e9:ec:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Jan 2 06:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8380a1cbf97c96b7ee73f94a0ca940f25be1f35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:3c:b3:7f:c9:e0:ad:d2:df:63:f5:44:e7:
e0:1c:62:31:2c:ee:31:4d:bd:da:99:ea:f3:18:ba:
9d:3d:fb:f5:af:4e:29:65:32:98:25:11:bb:74:35:
58:ab:f8:32:a6:04:43:51:16:36:9d:e0:89:8b:fb:
cf:25:b0:6c:d6:d0:22:d2:d4:40:81:cf:92:c4:02:
e0:21:9c:1d:53:55:01:b9:49:8a:18:2e:ad:68:fd:
e7:c3:1d:2d:10:d0:d4:5d:45:ff:e5:db:d0:21:27:
60:32:7a:bd:3e:5f:db:1d:2a:b7:7b:66:5f:70:2f:
f9:c8:27:19:f7:47:fe:a0:d8:c0:45:1e:7c:54:11:
8e:09:2d:15:09:e4:10:d6:55:77:ea:cf:ab:89:d0:
6b:65:51:f3:3b:ed:51:06:89:ba:13:4d:05:42:bc:
94:08:84:a6:e6:56:c0:87:06:89:75:50:fd:05:4a:
74:a9:26:9d:87:a7:45:f3:f5:f2:31:7a:72:1b:83:
a7:55:6a:3e:e3:d2:8a:c9:ae:a1:60:6d:6d:54:32:
18:5b:bd:0b:10:51:fb:2a:9e:81:21:07:fe:3a:9a:
74:76:5b:33:82:93:4e:1c:67:74:31:85:4b:09:61:
87:ff:6c:b1:7c:c6:a7:0d:d8:d6:26:34:7c:96:8a:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:80:A1:CB:F9:7C:96:B7:EE:73:F9:4A:0C:A9:40:F2:5B:E1:F3:5F
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/g4Chy_l8lrfuc_lKDKlA8lvh818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.104.0/21
185.220.16.0/22
IPv6:
2a0b:ea40::/31
Signature Algorithm: sha256WithRSAEncryption
0a:18:9c:3b:9e:1f:d4:aa:8a:82:c3:01:be:23:ff:dc:94:b9:
55:d0:ad:a2:b5:af:f6:2a:b9:a6:3c:0d:03:1c:ff:29:23:63:
1f:55:d2:9a:64:0e:a3:43:2d:89:4a:ee:e4:f9:e9:ec:1c:de:
a8:44:b0:a2:df:b8:6a:c5:3e:17:c2:18:37:7d:50:61:80:f3:
18:d8:95:c2:02:3e:a4:4b:1f:eb:e3:3e:26:13:29:16:5b:50:
5a:5a:a4:57:c5:3d:76:75:53:da:ec:ef:0d:ad:c4:ac:0c:c2:
59:fb:c1:74:ab:69:30:a6:90:cf:29:97:af:24:97:f4:59:f0:
c7:28:1b:54:10:f9:f6:e4:d0:e9:c1:80:4b:f1:4c:cf:4a:60:
cf:af:88:3d:6e:1d:b7:50:b3:4f:6e:da:aa:7c:20:73:f0:42:
41:7e:01:d5:53:99:2c:4c:e4:45:fc:77:11:88:6e:1b:96:0b:
58:d4:ee:1d:22:6e:46:8b:c1:75:8d:69:35:e5:59:48:a9:82:
c5:09:65:49:9c:2d:9d:99:63:ce:0d:8e:a4:94:f9:06:e5:52:
ae:c7:f9:b7:2b:0a:f8:b2:2f:92:16:65:a9:52:9b:9d:00:d4:
22:ee:46:bc:42:65:4a:6b:0d:8a:bd:2d:55:eb:2a:e6:df:86:
02:b6:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:42 2025 by rpki-client