Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/o9IncMeHSMz3mrSJeF9aMdkFAcU.roa
File: o9IncMeHSMz3mrSJeF9aMdkFAcU.roa (raw, json)
Hash identifier: KamLMqMs7PVReutKf0aHBQwg2azCb9n4pFhxDQwK6vA=
Subject key identifier: A3:D2:27:70:C7:87:48:CC:F7:9A:B4:89:78:5F:5A:31:D9:05:01:C5
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D71B12BC51F619D87A49FB01E9A0DF
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/o9IncMeHSMz3mrSJeF9aMdkFAcU.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30282
IP address blocks: 31.186.224.0/24 maxlen: 24
31.186.230.0/24 maxlen: 24
31.186.240.0/23 maxlen: 23
31.186.242.0/23 maxlen: 23
31.186.246.0/23 maxlen: 23
31.186.252.0/22 maxlen: 22
77.242.204.0/22 maxlen: 22
95.172.78.0/23 maxlen: 23
95.172.88.0/23 maxlen: 23
95.172.90.0/23 maxlen: 23
2a02:b50:4000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1b:12:bc:51:f6:19:d8:7a:49:fb:01:e9:a0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d22770c78748ccf79ab489785f5a31d90501c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:c2:3b:87:4e:88:f5:6a:97:e2:f0:75:b3:
a7:dc:95:7f:08:f5:13:b3:71:f9:66:70:da:38:ff:
4c:d7:0f:b1:2f:9e:21:aa:54:e6:36:ee:06:ea:9c:
a7:a4:cb:ee:c7:1b:9b:37:d7:1f:0e:32:08:92:4e:
16:6f:82:3c:ab:a2:5e:14:e5:6e:89:7c:b3:aa:c7:
ab:d7:c9:84:cf:91:6e:5b:43:aa:43:f0:fb:1a:4f:
3d:76:26:61:b8:8e:4a:9f:52:b5:fe:ed:f3:e0:ff:
31:93:f0:da:67:71:08:b1:f1:b1:54:da:bd:78:7d:
a2:e8:9b:10:0c:66:de:ea:6c:3f:08:03:89:a0:c0:
a3:9f:ea:3b:13:50:55:4b:7a:29:2d:22:b5:5e:1a:
11:fc:8e:08:79:52:a5:6f:63:d0:84:53:2a:21:cc:
d8:1e:f0:91:f9:20:20:e6:ff:2c:ca:e0:5a:6d:e0:
55:14:2d:6b:4a:19:df:97:73:10:ea:d0:93:30:8a:
85:90:4d:8c:99:4b:db:33:87:5f:53:2d:58:d2:bf:
0e:51:c9:81:2f:91:51:a5:e1:1d:e1:c0:59:09:58:
0e:7c:bf:8c:b6:26:c6:b5:e6:bf:ed:60:eb:37:26:
00:41:7f:f8:16:0c:72:04:7d:59:ea:0d:8a:32:f4:
b9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:27:70:C7:87:48:CC:F7:9A:B4:89:78:5F:5A:31:D9:05:01:C5
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/o9IncMeHSMz3mrSJeF9aMdkFAcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.224.0/24
31.186.230.0/24
31.186.240.0/22
31.186.246.0/23
31.186.252.0/22
77.242.204.0/22
95.172.78.0/23
95.172.88.0/22
IPv6:
2a02:b50:4000::/34
Signature Algorithm: sha256WithRSAEncryption
1a:fb:2d:37:b1:cf:5b:f8:c9:8d:22:c3:79:4d:19:51:59:ce:
3f:3b:1f:66:f9:16:d3:03:17:a4:e4:8b:2e:e0:00:c7:46:82:
16:6c:f2:5b:75:41:54:73:6a:d9:2e:a5:81:b1:58:bb:36:5a:
b1:a8:11:28:11:42:cd:dc:d8:10:00:22:2c:cc:62:0d:c5:80:
89:ba:35:08:49:b2:67:50:21:fa:f1:c3:32:a7:99:03:43:41:
8b:0d:44:47:3e:16:36:ef:de:82:b9:4b:f4:18:c9:3f:7b:85:
16:04:45:72:f8:70:9f:bf:ea:ca:4c:a2:f8:11:1d:d7:55:fb:
24:c8:51:b6:1e:0a:c0:cd:ca:c8:97:b7:ea:08:cc:ec:8e:cc:
fd:b0:82:65:34:a3:8f:86:ea:52:64:96:76:d3:a9:d9:d7:ba:
52:8c:7d:59:31:29:d0:81:09:38:97:6b:38:09:ab:0d:c4:b3:
b7:e4:a0:51:74:a5:4f:ff:a3:f4:47:f2:e5:4f:da:2e:ce:e6:
6a:60:e0:7c:eb:db:55:4f:7f:6f:46:12:87:b8:61:d0:0c:a1:
ee:ef:41:f4:07:12:04:f7:1f:a6:19:d5:d9:22:83:e3:e9:bc:
4c:8e:d6:1e:da:88:b4:6a:ee:22:7f:8e:d9:2c:66:6b:25:05:
52:12:66:ad
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAZQj1xsSvFH2Gdh6SfsB6aDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjUwMTAxMjE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2QyMjc3MGM3ODc0OGNjZjc5YWI0ODk3ODVmNWEzMWQ5MDUwMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnCO4dOiPVql+LwdbOn3JV/CPUT
s3H5ZnDaOP9M1w+xL54hqlTmNu4G6pynpMvuxxubN9cfDjIIkk4Wb4I8q6JeFOVu
iXyzqser18mEz5FuW0OqQ/D7Gk89diZhuI5Kn1K1/u3z4P8xk/DaZ3EIsfGxVNq9
eH2i6JsQDGbe6mw/CAOJoMCjn+o7E1BVS3opLSK1XhoR/I4IeVKlb2PQhFMqIczY
HvCR+SAg5v8syuBabeBVFC1rShnfl3MQ6tCTMIqFkE2MmUvbM4dfUy1Y0r8OUcmB
L5FRpeEd4cBZCVgOfL+MtibGtea/7WDrNyYAQX/4FgxyBH1Z6g2KMvS5kQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFKPSJ3DHh0jM95q0iXhfWjHZBQHFMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvbzlJbmNNZUhTTXozbXJTSmVGOWFNZGtGQWNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDA2BAIAATAwAwQAH7rgAwQA
H7rmAwQCH7rwAwQBH7r2AwQCH7r8AwQCTfLMAwQBX6xOAwQCX6xYMA4EAgACMAgD
BgYqAgtQQDANBgkqhkiG9w0BAQsFAAOCAQEAGvstN7HPW/jJjSLDeU0ZUVnOPzsf
ZvkW0wMXpOSLLuAAx0aCFmzyW3VBVHNq2S6lgbFYuzZasagRKBFCzdzYEAAiLMxi
DcWAibo1CEmyZ1Ah+vHDMqeZA0NBiw1ERz4WNu/egrlL9BjJP3uFFgRFcvhwn7/q
ykyi+BEd11X7JMhRth4KwM3KyJe36gjM7I7M/bCCZTSjj4bqUmSWdtOp2de6Uox9
WTEp0IEJOJdrOAmrDcSzt+SgUXSlT/+j9Efy5U/aLs7mamDgfOvbVU9/b0YSh7hh
0Ayh7u9B9AcSBPcfphnV2SKD4+m8TI7WHtqItGruIn+O2SxmayUFUhJmrQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:25 2025 by rpki-client