Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/OelWgxZyI7_ZRF_-XMf7bZooL5I.roa
File: OelWgxZyI7_ZRF_-XMf7bZooL5I.roa (raw, json)
Hash identifier: BifitWmmIOb4eZWcf2Qlsgv0SmjFwvoJThXaToiSZVg=
Subject key identifier: 39:E9:56:83:16:72:23:BF:D9:44:5F:FE:5C:C7:FB:6D:9A:28:2F:92
Certificate issuer: /CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Certificate serial: 019422FC16682D739D46E4F037EB2D28AFA0
Authority key identifier: 8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/OelWgxZyI7_ZRF_-XMf7bZooL5I.roa
Signing time: Wed 01 Jan 2025 17:48:53 +0000
ROA not before: Wed 01 Jan 2025 17:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44851
IP address blocks: 31.41.16.0/22 maxlen: 24
185.176.216.0/22 maxlen: 24
185.204.164.0/22 maxlen: 22
185.204.164.0/23 maxlen: 23
185.204.164.0/24 maxlen: 24
185.204.165.0/24 maxlen: 24
185.204.166.0/23 maxlen: 23
185.204.166.0/24 maxlen: 24
185.204.167.0/24 maxlen: 24
2a0a:2280::/29 maxlen: 48
2a0a:fd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:16:68:2d:73:9d:46:e4:f0:37:eb:2d:28:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8baa27f9c2ef7bf4809ad42ae589101b73e98927
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e95683167223bfd9445ffe5cc7fb6d9a282f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:32:25:d1:eb:d8:ef:3d:d7:f3:f0:61:93:
a5:8b:4a:b9:a8:1a:c4:b8:7b:51:ae:9a:34:54:18:
28:23:c2:df:30:1f:31:1d:97:1a:36:79:53:1d:7d:
c8:55:2c:60:e4:23:5f:a9:65:6b:d1:c3:ca:87:2a:
5b:c9:cd:89:c3:84:ea:66:98:bb:6d:b6:99:80:c2:
49:5d:66:b3:5f:75:3d:91:03:4c:6a:4c:fe:1c:a5:
87:6c:83:54:51:61:b4:97:fb:4e:7c:4b:22:7c:1d:
3e:a2:6b:f7:72:09:6f:22:39:47:6c:c6:0c:43:cf:
d0:c6:0c:c3:18:ec:05:44:79:7f:a3:29:c7:61:cb:
cf:08:c4:53:92:35:06:4c:35:5c:82:6e:8a:bc:e3:
f2:27:ce:71:87:d4:ba:e3:ab:bb:a3:85:00:3b:f3:
42:7b:5b:5f:de:ed:3c:7d:68:f3:c7:63:a9:5c:af:
80:e1:49:0f:b6:9e:76:7f:4b:cd:f3:9d:43:3c:c6:
65:72:ed:55:5a:3a:b6:74:31:31:4f:1c:d5:32:cb:
f4:ca:73:ac:93:00:f6:bb:1b:df:39:97:87:23:46:
db:16:3f:54:5c:20:f7:76:d7:e1:c6:12:6d:81:0d:
f2:27:95:09:48:20:e6:0b:9e:bd:4b:ca:e8:89:65:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:56:83:16:72:23:BF:D9:44:5F:FE:5C:C7:FB:6D:9A:28:2F:92
X509v3 Authority Key Identifier:
keyid:8B:AA:27:F9:C2:EF:7B:F4:80:9A:D4:2A:E5:89:10:1B:73:E9:89:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6on-cLve_SAmtQq5YkQG3PpiSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/OelWgxZyI7_ZRF_-XMf7bZooL5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc36f9-1669-4929-8e61-edfd3f83345b/1/i6on-cLve_SAmtQq5YkQG3PpiSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.16.0/22
185.176.216.0/22
185.204.164.0/22
IPv6:
2a0a:2280::/29
2a0a:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
09:f4:fe:f9:da:99:db:d2:bd:99:91:d0:f8:5e:06:d9:07:ca:
12:a9:84:22:aa:e9:66:0d:10:51:f3:22:29:17:d6:0f:1e:ac:
0e:e3:13:87:c2:3b:b6:5a:ee:5f:94:3f:77:30:ff:45:36:3d:
9b:9e:0c:02:ea:54:97:85:ff:f6:5e:e0:92:35:c7:0c:2c:af:
7d:8a:e7:dd:97:f9:3b:39:8f:43:70:a2:5c:23:83:66:5a:19:
ef:9d:97:63:af:1d:95:aa:9c:7a:e0:3b:36:6e:00:06:a6:c4:
3e:fb:69:43:06:f4:1d:c0:30:32:0f:a2:a5:c9:18:cc:a6:3d:
bf:42:fc:0d:c5:a9:8e:96:cb:2d:b2:a9:6d:10:16:74:74:05:
77:79:f4:d1:aa:ec:c5:05:c8:0f:cc:d4:d2:be:de:07:7b:c3:
0c:57:b8:0d:76:3d:79:86:7e:d4:79:d7:13:30:83:20:5c:c5:
9a:a0:e9:53:c8:e9:75:0a:97:a8:cf:da:a2:d2:f7:67:75:f9:
e4:27:6a:68:57:ed:93:7e:d5:ac:7e:46:db:52:08:f3:ec:ef:
13:18:a1:6a:09:63:39:01:e0:83:fe:1e:45:c2:c5:c0:be:7f:
8d:65:82:45:49:d4:77:67:09:95:e8:15:48:29:0b:c5:aa:de:
85:5a:25:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:17 2025 by rpki-client