Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/6Dfr7PCATT782PK0cNXuPS4UpkE.roa
File: 6Dfr7PCATT782PK0cNXuPS4UpkE.roa (raw, json)
Hash identifier: gWItXugkEme86JWp4/Vqc7O2xVb7mxhV4PjnjzOXSc0=
Subject key identifier: E8:37:EB:EC:F0:80:4D:3E:FC:D8:F2:B4:70:D5:EE:3D:2E:14:A6:41
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 0284E5BE
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/6Dfr7PCATT782PK0cNXuPS4UpkE.roa
Signing time: Tue 15 Feb 2022 05:40:00 +0000
ROA not before: Tue 15 Feb 2022 05:40:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.1.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
31.44.151.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
31.44.159.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42263998 (0x284e5be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Feb 15 05:40:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e837ebecf0804d3efcd8f2b470d5ee3d2e14a641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:1d:68:6a:4a:df:3d:42:d2:13:11:cd:25:
78:92:fb:2b:ec:c9:76:0c:95:fe:02:8e:12:42:53:
8a:14:43:fa:af:18:58:5d:c8:4e:ab:a4:41:5b:ff:
9b:8a:13:12:77:d5:69:6a:c7:d5:fd:a2:29:a3:2b:
8b:cc:73:ca:17:87:95:a2:8d:65:d0:c5:97:57:9c:
66:17:fa:41:d2:67:ed:3a:7f:20:45:0d:e6:70:a4:
24:9a:ad:65:8e:74:fc:6f:5b:06:65:df:03:e7:a8:
93:1e:77:ef:89:d7:0a:36:1c:03:99:e2:97:4a:29:
07:1d:ae:7c:7d:51:fa:b0:e4:0a:ee:17:4e:d5:ec:
9e:12:d5:6e:5a:a8:93:70:34:fd:af:f6:e0:be:21:
ad:02:9c:63:12:08:b0:48:8c:7e:50:6f:a8:cc:4d:
42:de:d2:27:57:d8:83:5e:ad:7a:2d:64:38:0b:3e:
41:c9:80:07:5a:1b:51:c0:b4:3f:7a:1e:45:65:aa:
5d:b4:3a:99:43:87:88:41:df:d9:36:42:29:1c:21:
02:81:c6:ad:ed:68:54:31:06:84:a2:3c:c0:ac:88:
f2:0f:63:df:5d:f3:68:84:e8:bd:3b:6f:e1:ad:70:
14:54:e7:e2:98:5a:af:ea:2a:3a:b0:20:52:10:36:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:37:EB:EC:F0:80:4D:3E:FC:D8:F2:B4:70:D5:EE:3D:2E:14:A6:41
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/6Dfr7PCATT782PK0cNXuPS4UpkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/22
31.44.151.0-31.44.153.255
31.44.159.0/24
31.222.97.0/24
31.222.100.0/23
31.222.109.0-31.222.110.255
31.222.112.0/24
31.222.114.0/23
31.222.117.0/24
31.222.121.0/24
31.222.123.0-31.222.125.255
178.239.240.0/23
178.239.249.0-178.239.250.255
178.239.254.0/24
185.30.197.0/24
185.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:17:8b:1a:32:a5:3f:39:c3:19:f7:f0:ce:b6:71:1f:c6:5b:
29:e5:9b:29:0d:f5:92:e3:5b:c4:d4:d7:e1:3e:10:75:bf:46:
b0:7c:e7:29:de:ef:41:6c:b4:66:00:1a:f2:cc:91:d5:24:0a:
8b:64:2d:6c:41:5b:60:9e:d7:d7:82:72:47:c6:d5:b0:38:60:
de:53:4b:bf:1e:1f:e9:ad:23:0e:ca:c2:8b:61:16:cc:5a:50:
5c:1a:75:f2:53:7a:6b:cc:9b:30:1a:61:a7:15:35:89:71:44:
7e:24:c4:46:c9:90:99:d8:e1:5c:32:36:32:9b:67:7b:4a:bd:
93:18:ab:92:c8:ec:7d:9f:cb:c0:5d:62:6c:35:56:ca:43:f9:
c8:33:94:b7:39:03:f9:0a:ef:4e:3a:7c:33:29:09:f6:0b:3c:
69:d4:02:70:41:9d:d9:d0:62:0b:fb:19:db:b2:1c:ba:94:3f:
c3:7a:73:d8:58:f9:23:de:b0:be:cf:e9:4b:c3:e0:94:0e:0c:
72:b7:0e:5f:db:1f:6c:77:37:d4:5b:30:ef:91:c0:e5:ac:a2:
16:b5:18:af:73:12:34:04:af:95:82:1d:40:94:03:68:47:c6:
8f:5e:70:bd:28:8e:4d:8a:0e:1b:57:2c:47:78:8e:ea:87:65:
e1:a5:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:16 2025 by rpki-client