Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/EF0Gm0w5O5ttgFaOMKwTNJcnbhg.roa
File: EF0Gm0w5O5ttgFaOMKwTNJcnbhg.roa (raw, json)
Hash identifier: +8v6SGT8A0IUeHMlvsAFFhSnvKRnpXnxF6E+e3l05SQ=
Subject key identifier: 10:5D:06:9B:4C:39:3B:9B:6D:80:56:8E:30:AC:13:34:97:27:6E:18
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 019573A83B6585FA737725143E82B5A680B8
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/EF0Gm0w5O5ttgFaOMKwTNJcnbhg.roa
Signing time: Sat 08 Mar 2025 02:49:19 +0000
ROA not before: Sat 08 Mar 2025 02:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25577
IP address blocks: 31.3.208.0/21 maxlen: 21
31.3.208.0/24 maxlen: 24
31.3.211.0/24 maxlen: 24
31.3.212.0/23 maxlen: 23
31.3.221.0/24 maxlen: 24
31.3.223.0/24 maxlen: 24
81.27.64.0/19 maxlen: 19
82.197.72.0/22 maxlen: 22
2001:9d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:73:a8:3b:65:85:fa:73:77:25:14:3e:82:b5:a6:80:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Mar 8 02:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=105d069b4c393b9b6d80568e30ac133497276e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:62:45:18:a7:75:44:f7:60:5c:1d:26:1c:
b0:0e:35:a2:64:4c:e5:eb:7b:a3:19:c7:46:ff:e5:
c3:c5:57:05:6b:02:c0:e7:76:1b:a4:2b:1d:8a:5d:
4e:16:1f:f0:7e:f4:19:0a:a1:79:df:3e:6b:44:90:
9d:c2:e7:0d:c5:2c:2a:59:5e:a6:c7:b3:d5:de:fd:
03:41:12:5a:30:25:ef:84:c0:2c:48:22:4f:70:9f:
da:b9:73:da:ce:dc:cc:f3:b1:02:77:ac:f4:92:67:
1b:8b:20:ae:2d:be:0b:c6:d3:d9:9c:67:3d:69:7d:
f7:c6:16:d0:7a:6e:c8:ff:31:a3:31:ac:30:30:92:
be:ec:0a:ba:37:ec:9e:f1:2e:40:a7:15:62:e7:75:
db:0f:d8:0b:3f:e3:af:9c:16:f0:92:eb:2c:8d:00:
94:4a:a0:47:b3:e0:b3:cf:c8:d3:cc:4f:dd:b8:e7:
72:52:dd:e5:bc:c4:1e:39:db:9b:36:8d:90:4d:6b:
80:ba:f1:a6:78:7d:bc:d6:81:73:89:10:18:6a:97:
22:1e:46:77:8e:15:a6:df:70:d1:55:64:b6:de:72:
33:d7:de:f3:69:2c:23:61:fa:b9:df:a9:0a:75:62:
df:73:1d:d2:0e:71:75:3a:e1:22:9b:dc:c7:bd:04:
74:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:06:9B:4C:39:3B:9B:6D:80:56:8E:30:AC:13:34:97:27:6E:18
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/EF0Gm0w5O5ttgFaOMKwTNJcnbhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.208.0/21
31.3.221.0/24
31.3.223.0/24
81.27.64.0/19
82.197.72.0/22
IPv6:
2001:9d8::/32
Signature Algorithm: sha256WithRSAEncryption
96:71:3a:f2:86:c9:e3:07:b8:21:a9:cb:62:4a:90:c8:03:53:
ab:57:cb:1d:8b:ed:8d:a4:93:1a:5f:fb:cf:26:70:36:aa:79:
8e:d3:b8:2c:1a:7b:0a:a4:ac:23:f2:cd:09:e6:60:ed:0c:12:
11:b5:18:b1:9b:01:d9:7f:0d:6d:2d:47:32:df:89:bb:9e:6f:
cb:fe:2a:cc:93:c9:09:b9:79:1b:c7:6f:92:85:6f:de:9e:67:
e6:c6:8e:65:05:d5:30:6e:a9:dc:f4:11:c4:89:d6:91:51:29:
94:6e:97:45:a9:2d:54:82:0b:11:75:b8:a7:c5:ca:43:b4:6b:
ac:7e:3f:db:8b:ae:cb:77:42:6c:5b:6a:9c:87:67:72:04:19:
5f:55:26:53:b8:da:6c:7c:a8:8e:91:da:94:df:9b:49:70:dd:
b0:52:0d:8f:89:26:52:ce:e9:b4:a0:17:86:d2:41:db:c2:76:
00:09:02:05:35:f7:84:2e:da:3d:ae:f6:cd:4a:8c:58:32:0c:
5e:df:ad:b6:1a:25:2a:9e:ae:10:ac:71:d3:04:c7:44:2b:cb:
26:ba:9e:b9:1d:b8:5f:0d:a6:a6:24:4b:43:b7:6c:c3:79:8d:
2b:a9:de:38:13:ff:49:74:dd:3f:f5:ea:dc:be:dd:93:9e:a7:
e6:69:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:56 2025 by rpki-client