Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa
File: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (raw, json)
Hash identifier: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=
Subject key identifier: 83:B1:7F:16:F8:77:66:06:F2:69:EB:94:B7:05:65:B8:F8:D1:F5:F7
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0194258ECC9A050FEDBF4527AB762C776959
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa
Signing time: Thu 02 Jan 2025 05:48:22 +0000
ROA not before: Thu 02 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206192
IP address blocks: 31.169.91.0/24 maxlen: 24
185.21.4.0/24 maxlen: 24
185.33.61.0/24 maxlen: 24
185.93.249.0/24 maxlen: 24
185.193.4.0/23 maxlen: 23
185.193.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:cc:9a:05:0f:ed:bf:45:27:ab:76:2c:77:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 2 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83b17f16f8776606f269eb94b70565b8f8d1f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:12:f7:ef:9f:f1:52:24:85:a9:ae:ae:ea:
7f:91:8c:65:3c:9e:20:3f:f5:09:4a:f9:57:dc:e9:
d2:83:90:75:b4:56:95:b7:dc:85:63:e4:d6:62:7c:
76:5e:bc:2b:ad:d6:fc:a7:2b:ba:92:82:29:c9:a7:
f8:c1:e0:2d:bd:1c:91:db:21:5b:b2:09:4a:4f:30:
9f:bb:ec:9d:70:35:11:49:da:bb:02:12:88:76:20:
49:d9:39:ae:c5:a5:1f:b2:b0:1a:54:51:5c:29:cb:
87:e8:da:b1:ca:4c:81:70:d0:e3:ee:3d:a8:d7:18:
49:e4:43:ce:c0:c9:ec:17:94:50:05:ab:2c:fd:27:
70:00:14:07:31:98:c0:0e:81:91:27:8c:67:39:fd:
65:74:a9:3a:28:95:45:5c:15:da:ba:f4:10:9f:92:
9c:1c:c5:38:c6:52:be:70:71:e1:be:bb:11:6f:2a:
1b:6b:3b:24:71:6e:a9:4a:08:d7:8f:7a:23:a9:3a:
bf:20:ae:1b:ac:1c:06:fd:70:2b:5a:20:e1:f0:3c:
0a:6a:f5:b5:df:69:90:52:45:c9:9f:47:e3:6d:53:
f3:12:53:3b:87:85:41:48:9f:55:ff:9d:e9:04:d5:
3c:57:82:29:67:8b:81:4d:c0:31:56:35:ef:f0:a8:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:7F:16:F8:77:66:06:F2:69:EB:94:B7:05:65:B8:F8:D1:F5:F7
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.91.0/24
185.21.4.0/24
185.33.61.0/24
185.93.249.0/24
185.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:7c:3a:a7:0e:2a:26:88:00:e5:9a:69:04:2f:8e:51:6a:67:
a3:df:be:60:ad:80:f4:a7:ce:1b:d4:2e:4e:f2:35:c3:d4:6a:
5f:1c:48:81:a6:7c:af:18:20:b8:d7:84:06:64:95:51:30:a0:
9d:14:0c:14:90:11:eb:c8:51:b4:99:e4:2f:45:13:c7:07:8d:
63:32:31:bf:8f:4e:1b:cc:4f:b6:71:30:d7:03:1d:c9:c4:cf:
c4:9c:04:09:eb:9b:54:6e:c9:0f:0f:f7:33:6b:29:c7:ae:b6:
98:20:fc:84:92:33:29:5c:61:b7:62:22:5f:5b:33:35:4e:d4:
e3:ff:c2:8d:b5:65:21:60:2b:d5:7f:55:62:96:b7:e4:ef:e4:
b1:99:80:3d:a7:99:dc:5e:17:2c:73:0b:5e:53:17:e7:e7:14:
75:90:90:aa:dc:73:de:02:25:c1:22:fc:d6:1a:f4:d4:98:9c:
56:1d:26:39:4a:cb:e6:11:c4:2e:51:85:f5:07:8e:30:0f:62:
c6:5a:62:cb:c0:90:b5:62:72:cc:ab:39:6f:bf:08:ba:bc:36:
de:76:b5:70:1c:7e:a8:4e:1e:9e:01:1c:e4:99:c7:5a:b0:ab:
e2:1a:94:6c:ca:ad:d6:b7:b8:d2:6d:dc:48:86:55:62:61:81:
37:82:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:53:53 2025 by rpki-client