Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/fBfyAUCVVWEVEE7vFkx_5_O1idw.roa
File: fBfyAUCVVWEVEE7vFkx_5_O1idw.roa (raw, json)
Hash identifier: MYUwiQdXiZ6vp4lacQ7vLpuAZqtTuk3aa3nUBbeSOdQ=
Subject key identifier: 7C:17:F2:01:40:95:55:61:15:10:4E:EF:16:4C:7F:E7:F3:B5:89:DC
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 018BF63F8C3D018CC5A327AB1439254BF6B8
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/fBfyAUCVVWEVEE7vFkx_5_O1idw.roa
Signing time: Wed 22 Nov 2023 08:57:21 +0000
ROA not before: Wed 22 Nov 2023 08:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49360
IP address blocks: 45.90.232.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
2a0a:d3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:3f:8c:3d:01:8c:c5:a3:27:ab:14:39:25:4b:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Nov 22 08:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c17f2014095556115104eef164c7fe7f3b589dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:e1:75:6e:d6:6f:e5:12:7d:ca:73:4c:fe:
31:18:d4:70:61:59:e7:11:5d:33:ab:d4:49:d9:4c:
0f:8c:60:a7:08:6f:78:c0:c0:e0:da:08:38:e4:d0:
44:4a:82:41:7e:14:11:3f:4b:cf:8c:f7:ee:f8:47:
02:7c:b7:1b:56:a9:47:20:e1:84:03:8e:af:88:34:
d4:4f:e0:87:d3:49:32:43:44:8b:1b:92:1f:71:5c:
d5:5b:4f:26:26:ff:d0:90:00:e8:aa:c9:ff:79:2e:
23:ae:cc:ce:9e:6a:b0:f3:b9:cb:e2:0e:13:b9:65:
12:b4:b6:fd:67:61:47:57:60:c8:77:a1:9e:0f:87:
6b:25:d2:32:c1:82:c9:b8:c6:14:cc:4e:b3:29:8a:
10:2a:91:76:7a:92:72:8c:48:6c:38:9c:a0:b2:6c:
a1:6a:2b:25:12:15:27:ca:73:3b:ac:41:62:8f:c8:
9f:30:bf:c9:99:cb:bb:b0:dc:71:83:78:a9:fa:c1:
33:fd:3b:f2:c5:0d:c0:0a:c8:6c:29:af:e6:3c:9f:
9d:60:57:2e:63:0b:62:df:27:a7:31:40:5d:97:c4:
f5:5a:11:75:e1:b4:c4:28:a5:3a:9d:17:c7:60:01:
a6:4e:3a:9f:0c:b6:ef:a0:a6:e1:26:f9:6f:2b:24:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:F2:01:40:95:55:61:15:10:4E:EF:16:4C:7F:E7:F3:B5:89:DC
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/fBfyAUCVVWEVEE7vFkx_5_O1idw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.144.0/20
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
IPv6:
2a0a:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:2f:ad:03:02:26:9d:92:21:47:08:0a:95:49:16:7b:c6:53:
74:f4:43:f3:ff:3a:28:df:7c:26:20:08:49:6e:e3:a7:cb:e2:
80:cd:97:e1:5d:2e:29:26:5e:72:ea:88:a5:cb:e5:43:dd:09:
8c:c9:8d:e1:35:a6:de:c0:04:27:2d:b0:cd:c3:69:81:f0:95:
e3:07:6c:63:86:48:c8:2c:f2:91:b0:40:fd:5f:dd:0e:9d:cf:
82:68:b1:4f:02:1d:58:a4:18:67:bf:08:83:34:1c:3a:9b:24:
0f:cd:a5:65:48:d5:09:5d:e4:8e:1a:36:66:02:81:2a:5d:31:
78:72:80:1b:a6:8e:6d:96:5b:c4:a4:e9:4d:d9:e2:b4:d1:a9:
f1:93:a1:3a:66:37:c2:76:7e:52:ea:2b:14:21:42:fb:49:a2:
83:7f:88:d8:0f:86:bf:67:a6:75:ec:62:ba:3f:7f:00:d9:4d:
63:f6:69:8c:62:cd:65:52:15:26:0a:50:58:d9:0e:e4:98:f1:
66:83:87:8d:e6:f9:e0:26:35:fc:43:3c:65:2d:9d:02:a3:28:
91:83:14:a9:61:be:dd:01:4e:8d:e5:93:28:fc:13:70:58:0b:
df:3f:3d:1f:d0:27:95:c1:6c:d7:eb:f5:1e:9f:6a:9e:db:4b:
36:78:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:27 2025 by rpki-client