Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqr0XkYm9sffOzCs0oJ_3IPzMZE.roa
File: Qqr0XkYm9sffOzCs0oJ_3IPzMZE.roa (raw, json)
Hash identifier: 8968r6dTTNYDADTMyLpU+oQYIQlIjjoAygx91s9W8DI=
Subject key identifier: 42:AA:F4:5E:46:26:F6:C7:DF:3B:30:AC:D2:82:7F:DC:83:F3:31:91
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195943C3B928F94F0C6C6C00CB1C8E2301D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqr0XkYm9sffOzCs0oJ_3IPzMZE.roa
Signing time: Fri 14 Mar 2025 10:38:50 +0000
ROA not before: Fri 14 Mar 2025 10:38:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.200.0/24 maxlen: 24
31.56.202.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.215.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.57.255.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:94:3c:3b:92:8f:94:f0:c6:c6:c0:0c:b1:c8:e2:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 14 10:38:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42aaf45e4626f6c7df3b30acd2827fdc83f33191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:d0:c3:84:9a:a7:ce:35:f7:0b:88:8b:59:
37:f8:62:76:05:08:04:63:40:9c:2d:d7:c9:86:fc:
e2:b3:d5:e8:60:42:93:9b:df:ef:01:2e:33:15:f6:
6d:1b:df:d0:aa:ce:1a:66:d3:dd:5e:7c:4e:d8:7a:
8f:6a:12:92:b3:eb:0b:18:b3:c5:fb:fa:be:4c:7a:
10:d5:34:7c:9f:b5:c7:15:97:d4:8a:1b:71:fe:96:
42:bd:13:7a:be:30:dc:ab:a3:8d:ec:d8:81:06:03:
30:b1:af:fd:cf:5a:06:1c:1d:16:60:7a:a6:59:81:
36:43:14:d6:ef:97:a0:49:e1:09:ab:26:9f:43:73:
9b:54:52:55:78:c2:4d:97:d5:68:38:de:6b:6a:50:
37:23:ec:2f:b4:3d:dc:06:6b:ae:61:09:48:03:01:
0f:44:a9:bc:5c:1e:98:10:de:f5:45:8f:26:9e:65:
be:0f:4a:fe:48:01:2a:6b:6b:1c:f0:9c:3c:72:b8:
f9:01:bf:8f:af:16:0f:45:69:3e:49:93:58:e0:05:
ba:dd:e5:13:78:ed:4c:1f:20:ae:4b:69:eb:5d:ad:
7d:67:15:ae:2b:79:e3:da:a7:2e:b0:f4:b3:5f:7c:
d8:8b:05:11:88:b6:47:76:7f:e2:36:b4:d9:70:70:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:F4:5E:46:26:F6:C7:DF:3B:30:AC:D2:82:7F:DC:83:F3:31:91
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqr0XkYm9sffOzCs0oJ_3IPzMZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.200.0/24
31.56.202.0/24
31.57.104.0/24
31.57.181.0/24
31.57.188.0/24
31.57.215.0/24
31.57.219.0/24
31.57.221.0/24
31.57.252.0/23
31.57.255.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
59:9c:f5:d0:7e:ff:f1:d5:91:3a:3b:26:a3:16:0d:d3:a7:00:
9c:ad:98:c1:64:33:7c:fc:9c:80:be:fc:d9:62:e5:d7:71:3c:
c8:f3:29:fc:6c:99:5e:b5:f0:a8:11:47:57:cd:29:42:bc:6e:
67:ed:ec:9c:ca:35:37:89:d6:e8:fb:4a:fd:00:ac:e8:f8:5f:
b9:99:f5:90:61:3d:73:19:69:91:37:a6:d7:57:e3:ad:46:3a:
7d:fc:9b:d9:37:ff:7d:a9:7b:ba:75:28:df:ca:36:91:61:cf:
c5:0f:ad:36:3f:ca:f7:bd:fb:8c:71:7b:81:d7:bc:18:08:3e:
af:2e:12:5b:52:b6:9c:42:91:9c:05:55:59:29:00:ed:87:80:
13:be:e0:5d:bc:bb:e6:3f:f8:f0:95:8f:36:95:ce:03:d6:de:
df:31:9a:69:57:28:04:8b:d7:4e:2f:90:94:ac:4b:d8:8c:ef:
91:f5:71:bf:e2:5c:4d:ec:3a:fe:95:62:3a:e7:51:05:77:6d:
18:a5:1e:3f:2c:06:ad:17:01:c3:c5:cf:ca:ac:76:31:02:c3:
a0:f6:93:08:30:e0:0d:6e:96:4f:1d:76:9e:7e:20:66:4d:87:
b6:69:27:58:bd:15:c0:0a:79:8b:45:a5:15:48:29:16:c3:db:
68:3a:75:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:00:47 2025 by rpki-client