Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/c9lDVYQcRQdBCo43HauWZGFuClk.roa
File: c9lDVYQcRQdBCo43HauWZGFuClk.roa (raw, json)
Hash identifier: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=
Subject key identifier: 73:D9:43:55:84:1C:45:07:41:0A:8E:37:1D:AB:96:64:61:6E:0A:59
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01942747B0013E96C53CA895D5AFAD9D07D1
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/c9lDVYQcRQdBCo43HauWZGFuClk.roa
Signing time: Thu 02 Jan 2025 13:49:56 +0000
ROA not before: Thu 02 Jan 2025 13:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197746
IP address blocks: 31.22.112.0/24 maxlen: 24
31.22.113.0/24 maxlen: 24
31.22.114.0/24 maxlen: 24
31.22.115.0/24 maxlen: 24
31.22.119.0/24 maxlen: 24
185.23.88.0/24 maxlen: 24
185.23.89.0/24 maxlen: 24
2a00:6620:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b0:01:3e:96:c5:3c:a8:95:d5:af:ad:9d:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jan 2 13:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d94355841c4507410a8e371dab9664616e0a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:40:48:bb:13:f9:39:ec:da:a4:a5:ae:fe:
f6:41:41:52:bb:e1:24:33:aa:a5:b3:33:a3:5c:b2:
d8:7b:a6:07:b3:d7:2d:6c:3f:19:bf:f4:0f:35:2c:
d5:73:7b:6d:e0:a7:4f:3b:86:8a:71:ab:c8:ad:2b:
82:96:ea:69:13:74:32:63:ee:9f:e5:d0:83:7a:39:
69:4b:66:2f:77:0c:73:dd:09:e5:67:0b:62:71:30:
8c:0d:c4:e1:6c:24:71:9a:4a:64:f7:63:34:db:3e:
d5:db:b3:6a:0d:6f:c9:2a:54:90:e5:6f:eb:3e:85:
71:58:2e:a7:ef:68:aa:a9:1d:65:9b:9f:42:8e:f8:
1f:2e:36:7c:98:1e:36:82:7e:0b:86:ab:5c:44:ed:
3b:8d:8a:5e:d2:9e:49:3e:a5:55:51:ef:59:0a:76:
92:55:17:7e:0b:40:f3:c2:99:c3:4c:1f:16:3d:5d:
fd:f0:76:49:01:08:4a:5d:85:fb:d3:d0:df:21:2d:
2d:cd:7e:88:a0:9a:56:de:b6:8d:ef:ed:4c:1c:29:
00:da:01:90:cc:39:ba:83:35:22:8a:d4:1e:7a:fc:
c0:37:8b:f7:8d:d3:4c:ea:d3:eb:47:40:b1:be:6c:
ee:bf:6a:4f:96:f1:ea:c1:f2:ff:1c:ea:0d:87:84:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:43:55:84:1C:45:07:41:0A:8E:37:1D:AB:96:64:61:6E:0A:59
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/c9lDVYQcRQdBCo43HauWZGFuClk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.112.0/22
31.22.119.0/24
185.23.88.0/23
IPv6:
2a00:6620:2000::/48
Signature Algorithm: sha256WithRSAEncryption
94:b7:01:17:97:73:03:fd:e5:d0:08:16:77:66:6f:ea:b6:ff:
64:e8:57:aa:3c:75:19:21:f2:0b:5c:49:5a:64:a4:a2:bc:97:
fd:ba:e0:a7:af:10:74:54:97:d3:ea:21:54:86:70:36:6c:f9:
86:3f:59:8f:94:53:06:ce:e7:d6:14:c7:66:b2:96:53:71:d3:
a8:ae:a9:ff:70:94:c7:29:c1:ae:82:ab:3a:66:b1:f2:e3:17:
7b:1b:2c:b0:d9:40:28:05:33:8d:5f:df:7c:d5:f5:cb:b5:0e:
db:96:a2:ac:38:73:ae:8c:02:a7:dc:4b:39:a7:1b:55:f6:5e:
81:09:36:9a:d0:f5:a7:a0:d0:cd:b6:99:d2:f5:ef:0b:67:86:
68:e2:32:c1:80:4a:1d:6d:9d:cb:77:bd:c2:ee:cb:16:6c:96:
28:5c:06:fb:1b:9f:4b:27:7d:72:27:7e:30:93:e5:f9:9e:4d:
07:79:44:1d:49:5d:55:34:4c:37:70:24:13:10:18:63:c3:b9:
6c:79:0d:f8:b6:70:3f:71:1f:14:13:34:84:8a:1f:09:a4:a6:
35:84:73:7e:88:0b:4f:56:df:f1:42:4b:13:01:31:62:a3:b0:
f7:bd:e2:9d:6a:2c:9e:69:74:ef:2d:b1:63:21:98:66:28:fe:
84:83:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:12 2025 by rpki-client