Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/RLv30RgJ_glZWbiYFxuqYj4RgT0.roa
File: RLv30RgJ_glZWbiYFxuqYj4RgT0.roa (raw, json)
Hash identifier: 5iMOLDE0GsrXYUu+rAKhajAeFLdFjLlLefy9paxyVDU=
Subject key identifier: 44:BB:F7:D1:18:09:FE:09:59:59:B8:98:17:1B:AA:62:3E:11:81:3D
Certificate issuer: /CN=a16f2a8162a75524ff52783f8132c33007da4d98
Certificate serial: 01917AAE82FD62157586D67E439D82A615F3
Authority key identifier: A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/RLv30RgJ_glZWbiYFxuqYj4RgT0.roa
Signing time: Thu 22 Aug 2024 15:22:22 +0000
ROA not before: Thu 22 Aug 2024 15:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 31.22.12.0/22 maxlen: 24
193.17.86.0/23 maxlen: 24
193.17.176.0/23 maxlen: 24
212.132.160.0/19 maxlen: 24
2a04:c880::/32 maxlen: 48
2a0f:9d80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:ae:82:fd:62:15:75:86:d6:7e:43:9d:82:a6:15:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16f2a8162a75524ff52783f8132c33007da4d98
Validity
Not Before: Aug 22 15:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44bbf7d11809fe095959b898171baa623e11813d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:49:d5:a3:4f:e3:e8:41:b4:81:59:36:6a:
7f:d9:91:15:5a:e8:a1:ca:e8:d1:53:42:08:6a:87:
ef:e8:ca:37:29:5a:16:c6:b3:5e:2b:b9:9c:44:84:
d2:e1:47:5b:28:e9:f2:23:1b:83:cf:7e:69:c5:d8:
86:1c:9c:2a:e3:80:09:5d:9d:ee:17:d1:6d:49:1d:
c1:b2:21:b6:e7:a2:0e:34:43:a8:4b:85:a5:96:3f:
d8:7e:bd:67:4d:aa:5f:ae:57:c0:8a:95:86:f7:d3:
bb:6f:47:e9:19:86:1b:c2:56:23:1b:14:20:64:d1:
80:7a:f5:d3:69:e7:99:3b:69:26:ca:1d:c6:5e:02:
97:a9:0b:cf:84:83:e1:7f:49:b4:c0:ff:d5:7c:15:
7f:0b:54:ae:a9:6d:73:6b:65:30:6c:c3:6a:99:74:
2e:cd:46:a4:a1:a3:d3:a6:ac:b3:a3:c1:6a:d7:87:
7c:ac:c6:8d:77:3a:fd:3d:79:49:97:1b:bf:b2:ef:
fb:88:e0:4c:f6:57:de:f7:91:fc:82:fc:ba:51:0e:
74:d8:38:49:b4:41:cb:85:b0:ae:a0:a4:d2:6e:5c:
f9:6d:d3:b9:8a:73:a1:8a:d9:db:bf:d7:ec:0e:15:
9b:19:ae:33:48:37:78:8d:3f:19:25:5f:c1:79:23:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:F7:D1:18:09:FE:09:59:59:B8:98:17:1B:AA:62:3E:11:81:3D
X509v3 Authority Key Identifier:
keyid:A1:6F:2A:81:62:A7:55:24:FF:52:78:3F:81:32:C3:30:07:DA:4D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oW8qgWKnVST_Ung_gTLDMAfaTZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/RLv30RgJ_glZWbiYFxuqYj4RgT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4ac7e0-7b52-41ce-a3c2-4afe3ca5f1a5/1/oW8qgWKnVST_Ung_gTLDMAfaTZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.12.0/22
193.17.86.0/23
193.17.176.0/23
212.132.160.0/19
IPv6:
2a04:c880::/32
2a0f:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
0a:24:a1:c3:aa:b6:fc:5d:6b:ee:57:69:ff:3e:8b:27:0d:73:
9f:e9:cd:40:c2:5a:d7:46:72:b6:da:77:dc:b9:ef:0d:08:bb:
15:25:f9:ad:fb:46:dc:ea:52:31:69:d5:18:50:33:e2:9a:50:
93:15:9d:86:de:cc:fa:12:2e:39:16:c6:f4:55:33:8f:d6:eb:
01:99:95:06:f9:ec:e5:fb:96:7c:2e:0d:4f:72:18:45:40:0a:
2c:71:52:15:00:d4:48:9e:52:9c:f6:87:5f:38:3c:27:3a:ec:
88:45:36:c8:75:ef:c9:6f:73:98:2c:4d:ed:31:d7:16:6a:85:
77:c0:57:0b:a1:2a:52:77:0b:e3:90:4a:4b:2b:58:ee:91:32:
b7:9a:87:21:59:c4:5b:da:bf:26:57:d3:5f:91:6f:b1:20:ba:
1c:1c:19:75:a6:ec:62:6b:8d:91:da:63:b7:55:fb:f5:93:40:
c3:61:d5:d6:6f:db:3f:8d:ba:7f:1e:a1:26:95:a9:c9:96:61:
8c:fd:71:3b:cc:a0:61:6e:f0:f3:3c:8e:06:92:a5:0a:de:8e:
47:1a:8f:54:f8:b8:19:e1:3f:86:9b:24:fe:12:9e:a8:c6:e4:
d7:be:dc:24:e8:31:16:a9:16:9e:fb:af:72:7e:4e:42:a6:fb:
b0:a7:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:23 2025 by rpki-client