Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/BqT_zHeeWQLEscmXDYSo2bW_5hY.roa
File: BqT_zHeeWQLEscmXDYSo2bW_5hY.roa (raw, json)
Hash identifier: DjY7R/bkgsCT9jACm60nVer0BD9WjC1RQXTotru/rr8=
Subject key identifier: 06:A4:FF:CC:77:9E:59:02:C4:B1:C9:97:0D:84:A8:D9:B5:BF:E6:16
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01941F8C7E660FE2BA70CC5FC57BA6EB4791
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/BqT_zHeeWQLEscmXDYSo2bW_5hY.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7e:66:0f:e2:ba:70:cc:5f:c5:7b:a6:eb:47:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a4ffcc779e5902c4b1c9970d84a8d9b5bfe616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:3b:10:e3:ff:c4:43:5e:e6:c2:85:6a:b7:
66:09:6e:fc:88:e8:df:fc:90:32:2e:a0:2f:18:34:
31:a0:dd:a5:d7:80:49:54:98:2e:d5:23:4a:c2:da:
72:08:f5:26:b3:18:70:53:be:90:5c:36:77:e1:ae:
90:37:bf:12:cc:03:38:0b:7a:18:2e:e2:49:41:dd:
5d:e5:f9:7e:d8:a0:df:1d:dd:14:1c:b0:95:1c:d7:
38:47:30:b0:fc:43:4b:70:07:6f:6c:81:d5:fa:64:
91:fe:c1:e9:e1:64:cc:2b:16:ff:d3:90:5b:ce:49:
0d:b4:58:12:a6:79:53:f4:33:b6:46:16:23:06:30:
b6:08:c1:79:41:14:62:91:bb:38:05:c2:d9:4f:0d:
f8:31:dc:04:ad:7d:92:32:d7:21:e5:0e:7f:d4:2f:
5c:47:9c:72:c1:99:f1:eb:0c:1b:23:53:fe:59:69:
76:72:f4:34:c9:7f:f6:2e:c6:40:d4:75:44:ce:c3:
78:2f:57:c6:59:6e:0f:5e:ca:28:c0:3d:81:d0:8f:
6e:e3:0b:98:fd:42:6e:c3:50:56:ff:c8:5f:88:78:
93:3d:ce:4e:98:64:70:82:26:0b:fa:60:d3:b9:09:
eb:e2:1f:64:67:88:e4:ee:66:93:ad:be:fd:b5:d3:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:FF:CC:77:9E:59:02:C4:B1:C9:97:0D:84:A8:D9:B5:BF:E6:16
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/BqT_zHeeWQLEscmXDYSo2bW_5hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:50:54:27:88:d8:d6:ff:7c:2f:db:9f:f5:14:13:20:1e:0c:
06:e7:52:b7:df:92:cc:d8:e7:cc:4d:a9:30:25:b6:ac:bb:65:
5c:82:84:4e:28:23:1e:85:7d:de:72:fb:76:77:0f:51:2c:8f:
0c:99:83:b5:82:aa:34:47:90:39:4c:db:58:cc:2c:86:c9:1f:
73:8f:38:6c:2c:31:e5:7f:49:56:e2:82:fb:f5:95:dd:f8:c4:
a5:ec:34:01:7c:4d:cc:dc:68:88:d5:e0:2d:1f:a5:99:b1:71:
4e:05:f8:92:0f:7f:fe:48:95:fe:21:71:dd:6f:74:83:92:c9:
8e:46:9c:df:f6:2e:fa:e4:64:80:be:3d:c0:c4:7e:47:e0:53:
a1:ea:cb:a5:ce:c6:b1:aa:23:d3:b4:1f:9f:57:2b:f3:9f:5f:
1b:5e:94:3e:35:5e:77:04:f0:1d:77:2c:dc:45:1a:9d:a5:32:
33:93:09:1e:b5:5e:d6:21:e4:8e:9e:17:4a:b8:3a:78:90:57:
5f:19:97:e1:ec:c2:75:f9:aa:c6:00:1b:b6:da:79:7e:e0:54:
2d:be:89:e5:63:05:19:0b:8b:81:11:d8:be:2d:7d:52:dc:01:
de:94:c8:cf:28:ba:8d:8b:34:6b:fe:9f:77:3e:84:66:93:c7:
91:a0:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:14:14 2025 by rpki-client