Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/wXYrr5S6sLNczud4QNKL5j-Xgqk.roa
File: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (raw, json)
Hash identifier: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=
Subject key identifier: C1:76:2B:AF:94:BA:B0:B3:5C:CE:E7:78:40:D2:8B:E6:3F:97:82:A9
Certificate issuer: /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial: 019426D992A631C4B1B6057E670ADBC6A861
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/wXYrr5S6sLNczud4QNKL5j-Xgqk.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56837
IP address blocks: 31.22.16.0/24 maxlen: 24
31.22.20.0/22 maxlen: 22
86.39.64.0/20 maxlen: 20
2a00:6ec0:100::/40 maxlen: 40
2a00:6ec0:300::/40 maxlen: 40
2a00:6ec0:400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:92:a6:31:c4:b1:b6:05:7e:67:0a:db:c6:a8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1762baf94bab0b35ccee77840d28be63f9782a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:de:43:3c:39:ca:48:ae:c4:37:6d:10:3c:
80:f3:b2:d0:32:9b:57:2c:a5:02:50:91:08:93:e0:
27:be:ff:e3:95:f5:da:db:53:97:f9:4a:1d:71:3f:
e2:d5:91:f6:68:98:2e:f2:a2:fe:39:67:72:36:1e:
7f:db:73:4c:5a:28:c1:8b:2f:1f:b8:18:d1:32:1c:
d0:af:35:93:67:69:0c:c8:f5:cb:18:b5:6f:0f:fa:
1b:7c:c8:d1:68:77:bc:5c:66:ca:eb:00:26:ef:41:
b3:8e:6a:3a:81:4f:cd:8c:12:59:d6:db:4c:af:8f:
7c:13:06:bd:da:59:ae:da:93:f1:75:52:f8:f6:84:
39:e0:1b:04:b0:61:ad:d1:60:42:73:8f:db:99:d4:
54:ee:45:35:e2:d6:91:04:59:46:ca:2d:94:ae:78:
7c:68:0c:dd:c9:7e:64:94:bd:d3:7d:63:d2:56:99:
c7:18:c1:95:46:a0:1f:ad:5c:a7:c6:8c:b6:35:04:
60:fd:08:b0:07:79:85:24:04:2e:12:b8:a9:a3:76:
87:14:b3:8a:0e:14:bc:49:47:f4:15:d7:a6:42:53:
d0:0d:96:1a:2f:24:4a:e6:ca:bb:ee:fe:bf:08:f9:
ed:34:3a:41:07:a7:f9:48:ea:b7:80:f1:30:a0:56:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:76:2B:AF:94:BA:B0:B3:5C:CE:E7:78:40:D2:8B:E6:3F:97:82:A9
X509v3 Authority Key Identifier:
keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/wXYrr5S6sLNczud4QNKL5j-Xgqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.16.0/24
31.22.20.0/22
86.39.64.0/20
IPv6:
2a00:6ec0:100::/40
2a00:6ec0:300::-2a00:6ec0:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:bc:f8:55:05:be:f7:c0:2d:a7:72:9f:b8:48:e7:33:a6:22:
da:b1:75:eb:1f:4e:76:ae:f1:3f:f2:b1:b6:6f:40:96:be:41:
c1:f0:7e:e8:e7:27:b6:fe:33:93:bb:b3:a8:1a:96:3a:d8:39:
98:c7:af:70:bf:62:71:c0:ca:de:68:4b:ec:1b:c1:2d:61:72:
c9:e4:29:ef:86:f6:26:f6:da:ed:10:03:45:22:5b:f2:1a:f6:
26:ce:07:ec:ea:c3:c6:4e:e2:a6:92:85:51:e8:13:6c:12:d7:
b6:07:6a:6b:6f:62:c1:48:33:88:99:f0:c6:69:d8:88:1f:db:
4b:59:f7:76:56:0d:59:c5:f4:0c:27:37:d5:5c:42:41:45:ea:
7e:10:b9:12:b4:b7:0e:e4:4d:18:2c:b9:9c:4d:d7:93:be:f6:
a3:8a:9c:2a:24:ca:8f:25:95:93:05:6f:8b:d9:23:db:a4:99:
b5:c2:ba:11:d9:23:87:59:59:87:31:07:ec:62:11:f9:ba:5e:
f4:e1:82:56:aa:d3:4c:1b:1c:04:16:cf:51:6d:74:38:fc:26:
47:da:8d:cc:ce:25:31:a6:09:1a:8e:b4:f5:83:1d:fa:68:40:
84:47:a2:2c:ef:b1:ed:94:de:63:34:16:6a:74:0e:79:d7:8f:
1f:02:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:08 2025 by rpki-client