Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/1OyTbfvyzmfZUNYirXuCCHsANm4.roa
File: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (raw, json)
Hash identifier: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=
Subject key identifier: D4:EC:93:6D:FB:F2:CE:67:D9:50:D6:22:AD:7B:82:08:7B:00:36:6E
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 01942068289DF8D287F49D141076FBE06EE3
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/1OyTbfvyzmfZUNYirXuCCHsANm4.roa
Signing time: Wed 01 Jan 2025 05:48:04 +0000
ROA not before: Wed 01 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.25.8.0/23 maxlen: 23
185.83.20.0/22 maxlen: 22
185.175.91.0/24 maxlen: 24
212.104.208.0/24 maxlen: 24
2a11:bd80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:28:9d:f8:d2:87:f4:9d:14:10:76:fb:e0:6e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4ec936dfbf2ce67d950d622ad7b82087b00366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:ca:be:fc:d0:7a:de:c2:be:b0:9d:46:58:
8a:24:58:37:33:a5:f7:9e:46:f1:4a:1c:f4:7b:b5:
fa:91:ba:e3:a9:49:7f:5d:54:0d:b8:2d:07:9a:2d:
4b:38:b4:c0:8d:29:60:a2:64:b8:da:99:0f:85:f0:
4e:7b:1f:af:ac:e0:78:62:83:e9:06:3c:79:f4:ab:
c9:c9:54:9b:b3:c0:6c:a8:33:0e:09:30:71:1f:ad:
60:0a:9c:72:a7:e6:de:c5:4f:08:bb:62:24:13:c9:
f8:16:de:06:87:4a:07:ca:a3:ce:7a:a6:01:4c:58:
16:a1:a9:98:8f:e3:49:0b:93:48:49:b5:da:05:69:
43:86:d0:ed:75:7e:5b:1e:77:9d:78:61:28:9d:12:
52:55:ad:85:e3:72:71:19:be:ef:e3:8b:cc:a9:c9:
78:75:15:e3:76:ed:c4:cf:d6:74:a8:2a:0d:f2:e2:
61:b2:8d:bc:2f:71:03:2e:d6:70:a0:c4:ab:cc:49:
c6:ed:2b:8d:88:01:ff:7f:ad:8e:23:b3:83:b0:22:
34:c3:a6:94:84:01:f4:72:1c:69:0c:6b:07:b0:ca:
8e:98:1d:04:6e:67:75:43:dc:28:e3:b4:1b:53:0c:
de:e1:5f:d9:a2:95:64:a7:13:f3:b8:44:a9:dc:69:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EC:93:6D:FB:F2:CE:67:D9:50:D6:22:AD:7B:82:08:7B:00:36:6E
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/1OyTbfvyzmfZUNYirXuCCHsANm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.8.0/23
185.83.20.0/22
185.175.91.0/24
212.104.208.0/24
IPv6:
2a11:bd80::/32
Signature Algorithm: sha256WithRSAEncryption
2c:f6:54:e9:57:07:2b:4f:e8:23:b0:73:c4:f9:31:b7:7b:49:
37:26:24:00:14:ac:9c:58:06:e3:de:88:6e:49:1d:c6:f2:5e:
eb:9c:b7:be:6e:54:fd:44:54:da:b3:ef:90:54:1f:95:43:29:
f1:f3:22:c4:7c:a2:21:79:67:8b:ab:61:18:d2:a5:cc:44:8e:
49:07:eb:c3:32:70:17:f0:26:05:5f:65:3d:c4:34:ed:0a:0f:
fc:e3:e7:ca:ae:e7:6b:0e:3f:98:df:cc:84:d8:96:bf:7a:13:
de:94:5a:a4:86:c3:c5:bd:69:95:7b:9d:a3:47:71:3a:9e:62:
35:8a:50:be:a6:eb:04:c7:fc:66:a5:41:80:14:f2:f8:f5:83:
b6:7e:9f:06:e3:c2:72:55:5b:b2:2b:ea:62:b3:85:aa:97:c7:
62:3e:50:ed:e7:9a:b4:e9:44:81:8b:f6:c5:eb:3b:12:e9:ce:
82:a7:ca:00:f9:56:d1:d0:d0:55:65:ee:bb:3e:54:cb:aa:8a:
cc:ec:4f:6e:82:f6:f3:fc:3f:32:1b:5b:5e:1f:46:96:8e:4d:
0b:ac:fa:78:f5:0d:55:42:9c:e4:8a:ef:23:24:af:23:b4:8a:
b0:fc:83:bf:d3:a6:ad:63:ac:52:ca:eb:64:c2:73:70:1d:79:
9a:12:ed:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:31 2025 by rpki-client