Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/DBze0gTqh5SDOw7x6hoGuoE8yr4.roa
File: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (raw, json)
Hash identifier: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=
Subject key identifier: 0C:1C:DE:D2:04:EA:87:94:83:3B:0E:F1:EA:1A:06:BA:81:3C:CA:BE
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 0194252097A952A0F410D4A317605D06C0B6
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/DBze0gTqh5SDOw7x6hoGuoE8yr4.roa
Signing time: Thu 02 Jan 2025 03:48:00 +0000
ROA not before: Thu 02 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133499
IP address blocks: 31.14.219.0/24 maxlen: 32
31.14.236.0/23 maxlen: 32
77.95.116.0/22 maxlen: 32
78.138.16.0/24 maxlen: 32
78.138.30.0/24 maxlen: 32
89.32.129.0/24 maxlen: 32
89.34.7.0/24 maxlen: 32
89.41.62.0/24 maxlen: 32
89.44.115.0/24 maxlen: 32
89.44.245.0/24 maxlen: 32
94.176.163.0/24 maxlen: 32
94.176.216.0/22 maxlen: 32
94.177.52.0/22 maxlen: 32
103.204.212.0/22 maxlen: 32
185.221.221.0/24 maxlen: 32
185.223.58.0/23 maxlen: 32
185.225.104.0/22 maxlen: 32
185.243.108.0/22 maxlen: 32
188.214.93.0/24 maxlen: 32
188.241.146.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:97:a9:52:a0:f4:10:d4:a3:17:60:5d:06:c0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 2 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c1cded204ea8794833b0ef1ea1a06ba813ccabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:ab:7b:56:9d:93:6e:43:65:9c:82:08:20:
15:4d:fc:ef:33:bf:93:95:94:e4:bb:75:92:83:fc:
b3:ad:62:79:93:ef:e8:40:a2:79:66:c3:92:21:27:
4d:ce:d9:e2:15:18:1c:19:b3:f4:90:5d:08:3a:5e:
da:47:fd:42:a9:78:39:45:d8:65:b0:12:71:3a:ce:
75:f7:2a:e8:f0:22:d0:d1:96:15:e8:c5:35:d9:95:
de:1f:ef:23:79:84:17:3b:f2:1c:35:10:7d:2f:7f:
ff:20:4e:ce:9b:0d:db:02:84:e5:06:ad:cd:56:7e:
02:a4:94:68:0f:46:c4:80:31:ff:7c:01:7d:31:b8:
33:28:f6:8c:f8:e7:b7:12:2c:56:32:59:29:85:93:
f0:94:72:9f:8e:29:b6:1e:49:56:e0:70:05:71:7d:
71:15:9b:4f:ef:d3:3b:f9:76:b3:fe:c4:ca:3c:29:
c7:a5:6f:57:e8:b8:f9:69:ba:99:3a:0e:ed:90:c3:
07:c3:e9:fe:1b:b7:f2:eb:34:36:8a:ea:ca:41:f4:
1e:03:2a:68:25:67:d0:ba:b1:4e:5a:24:03:d0:c2:
e5:d8:ee:5c:19:87:4f:b5:82:ce:9e:85:db:81:3c:
96:37:06:99:67:3b:cf:ff:a6:27:b5:21:74:ac:aa:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1C:DE:D2:04:EA:87:94:83:3B:0E:F1:EA:1A:06:BA:81:3C:CA:BE
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/DBze0gTqh5SDOw7x6hoGuoE8yr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.219.0/24
31.14.236.0/23
77.95.116.0/22
78.138.16.0/24
78.138.30.0/24
89.32.129.0/24
89.34.7.0/24
89.41.62.0/24
89.44.115.0/24
89.44.245.0/24
94.176.163.0/24
94.176.216.0/22
94.177.52.0/22
103.204.212.0/22
185.221.221.0/24
185.223.58.0/23
185.225.104.0/22
185.243.108.0/22
188.214.93.0/24
188.241.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c9:8f:24:2b:f7:f6:41:5e:82:0c:3a:c6:1b:8e:55:03:d7:
d4:26:13:91:fd:31:48:6f:52:03:f1:76:51:1c:61:bd:18:5f:
f9:86:d2:73:b4:bc:40:49:11:b6:01:59:6d:11:c8:06:1f:1b:
d5:21:e6:2a:cf:19:5f:3e:6b:83:02:55:84:31:b6:98:fc:27:
e0:c6:7a:e2:c9:93:71:be:bb:a8:5f:ac:ad:39:df:d7:b3:55:
11:99:8e:e3:fc:d7:a5:5d:ac:d0:ab:a6:a0:37:8b:95:b4:2c:
c0:cf:9e:c4:e7:35:83:58:7f:c5:9b:0d:73:3b:db:1f:62:d3:
a8:e8:12:6e:cd:0d:b6:b2:1a:38:84:25:ca:7d:93:b3:73:e4:
de:1e:23:53:ab:6c:43:ab:41:f5:13:57:3a:dd:6b:2e:fb:84:
fe:85:cc:89:48:c7:b6:02:20:c5:f2:e8:80:f0:ea:b6:02:a0:
d7:1e:79:46:e6:22:b1:66:fb:f4:c8:c8:16:77:9c:44:87:71:
12:51:37:05:9c:de:61:fb:9c:c3:ec:43:ba:92:f3:b0:ae:b1:
d1:92:f9:86:8e:ab:86:3c:54:2e:10:b3:8d:1c:08:ee:1a:b1:
da:4e:b7:8a:de:20:8e:c7:c1:74:97:a9:6f:c8:53:19:4d:91:
58:f8:3c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:50:15 2025 by rpki-client