Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa
File: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (raw, json)
Hash identifier: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=
Subject key identifier: 3B:51:98:56:1C:45:4B:43:3B:1F:6D:07:A2:1D:40:B5:BD:DE:2D:A1
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 0194244599FAF744713506CD45F5AAB20E9E
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa
Signing time: Wed 01 Jan 2025 23:48:48 +0000
ROA not before: Wed 01 Jan 2025 23:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39869
IP address blocks: 31.6.64.0/21 maxlen: 21
89.107.152.0/21 maxlen: 21
91.188.96.0/19 maxlen: 19
178.19.96.0/20 maxlen: 20
185.24.216.0/22 maxlen: 22
185.230.108.0/22 maxlen: 22
212.59.224.0/19 maxlen: 19
2a02:2430::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:99:fa:f7:44:71:35:06:cd:45:f5:aa:b2:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Jan 1 23:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b5198561c454b433b1f6d07a21d40b5bdde2da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:61:5b:8e:c0:b3:49:dc:9e:6c:25:67:08:ec:
46:52:e3:9f:35:5b:14:d4:ab:c9:3a:d4:14:ce:8c:
1f:9e:c5:69:22:ec:fd:00:eb:76:fc:c8:33:0d:93:
64:23:cc:77:30:3e:73:a4:3a:19:1e:18:57:0e:11:
70:39:5f:12:04:2f:2c:e9:85:74:28:92:bf:77:c3:
14:14:14:f7:cf:ac:0b:53:c6:ff:f1:1c:f0:d7:9c:
ee:43:eb:6e:cd:c0:9e:75:76:cb:32:a6:93:9f:06:
fd:68:e4:04:9f:b7:e8:f3:a6:7b:2f:d4:1a:04:19:
91:14:61:d9:87:3e:21:d8:6c:ae:3b:77:ca:e1:70:
c8:4e:47:65:22:c7:33:42:04:c7:bf:f1:d2:66:34:
01:91:98:ec:d2:66:97:13:f5:91:59:6f:89:73:a9:
3c:b2:81:79:05:c7:7c:04:40:a4:c3:5a:8b:d9:3a:
02:b7:db:a9:9d:27:76:7e:17:5b:59:ed:9c:ac:97:
de:f1:51:08:30:f3:da:75:b9:8a:9a:24:2b:02:67:
b6:c3:59:62:d7:c1:57:68:e6:7a:e1:18:dd:22:43:
1f:f7:d9:12:27:94:ca:bc:9c:e4:bd:3d:b7:1d:35:
c3:6b:88:29:2e:ae:59:df:72:4a:bf:04:98:6c:63:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:98:56:1C:45:4B:43:3B:1F:6D:07:A2:1D:40:B5:BD:DE:2D:A1
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.64.0/21
89.107.152.0/21
91.188.96.0/19
178.19.96.0/20
185.24.216.0/22
185.230.108.0/22
212.59.224.0/19
IPv6:
2a02:2430::/32
Signature Algorithm: sha256WithRSAEncryption
b9:c3:47:38:b7:2c:2b:d8:7f:6c:e5:1b:0c:4a:f0:72:64:2a:
73:8b:2d:47:ab:21:c0:db:a3:dc:68:85:30:fe:4c:a6:9c:1a:
a7:cd:00:5d:b3:bf:e0:a8:a5:cf:2d:35:1e:2d:18:72:12:92:
d3:87:63:cc:e0:91:e3:ae:e1:71:82:b4:92:d8:4f:85:47:ad:
ad:a9:6f:23:37:fc:ee:14:2f:be:45:73:13:68:cc:36:ae:1a:
b2:3b:37:52:e2:ba:5b:49:7c:74:9a:ef:45:54:2f:58:4e:5d:
73:7e:9f:e9:d7:da:2e:8c:55:be:ba:b1:c1:5b:c8:f3:63:be:
fe:24:30:8b:1d:df:1d:ac:9c:5e:5b:60:f6:a9:4b:7d:af:6f:
78:c8:9b:09:6e:10:75:87:26:20:b0:41:82:95:3c:29:7b:80:
c7:25:c1:68:1e:2a:e4:a0:fa:b3:6a:cf:90:91:26:85:ef:91:
d5:31:5a:36:b0:da:cc:74:d5:a7:fb:6a:6d:23:47:a1:e0:36:
ef:92:4c:05:fa:dd:fa:f6:ab:f3:6f:b0:75:78:82:a9:26:16:
c3:1a:69:f4:3b:0f:65:1c:91:7f:6a:e1:e5:7c:6b:d0:76:e6:
83:42:df:e3:23:7a:18:ef:39:16:9c:16:fa:d2:f9:c8:dc:10:
9e:fb:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:56:50 2025 by rpki-client