Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/3mDkk34bJb4gY0sfEjaxzHdFLc8.roa
File: 3mDkk34bJb4gY0sfEjaxzHdFLc8.roa (raw, json)
Hash identifier: 5VHWD5VB51eHKwZNQXM0xdI8gW8CMenbRBsvmiBljiA=
Subject key identifier: DE:60:E4:93:7E:1B:25:BE:20:63:4B:1F:12:36:B1:CC:77:45:2D:CF
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 019427B584140FEF7CA134E2AF1DDF965862
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/3mDkk34bJb4gY0sfEjaxzHdFLc8.roa
Signing time: Thu 02 Jan 2025 15:49:54 +0000
ROA not before: Thu 02 Jan 2025 15:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30893
IP address blocks: 31.22.91.0/24 maxlen: 24
31.22.94.0/24 maxlen: 24
185.231.100.0/22 maxlen: 24
195.47.238.0/24 maxlen: 24
2a0c:5700::/29 maxlen: 48
2a0c:5700:3133::/48 maxlen: 48
2a0c:5700:5353::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:84:14:0f:ef:7c:a1:34:e2:af:1d:df:96:58:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 2 15:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de60e4937e1b25be20634b1f1236b1cc77452dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:3d:c7:43:b2:37:c8:13:f1:e3:6f:95:38:
0c:6b:7b:b8:ed:dc:13:a2:50:44:03:31:c7:a2:6d:
ae:9c:13:0f:02:03:59:cd:8b:65:5a:14:45:cc:cf:
80:cf:46:b4:f1:d0:96:f4:5d:5f:dd:15:47:41:54:
b5:cd:d7:aa:56:4c:07:1d:38:e0:b1:ff:3d:55:f5:
b5:1f:c6:26:24:79:c1:e2:2e:86:1c:23:13:19:bf:
87:e3:f2:5d:62:6e:20:63:2c:f8:69:9d:dd:4d:43:
a0:3f:51:2c:c1:c5:1a:3b:23:26:7d:fb:2b:b3:60:
3e:56:9e:98:3d:be:08:15:83:d2:94:4a:94:1a:ec:
04:6b:47:a5:6d:12:bf:38:ea:ab:56:96:bb:3c:02:
94:a5:08:9b:c5:35:6a:0e:1b:c1:71:1b:eb:84:b7:
88:f4:40:fc:44:98:d1:97:0f:08:15:9e:ec:19:df:
3b:59:e0:04:1c:b0:2e:69:70:67:bd:20:16:38:94:
50:02:45:c9:8e:f1:31:18:2d:9e:df:89:b5:88:34:
a5:8c:4c:ea:77:11:f7:3c:b9:86:09:1d:c0:a9:40:
46:b4:17:dc:7a:6f:94:82:53:23:01:3d:04:70:c2:
6b:d6:b4:06:42:ef:76:57:5a:f2:c4:66:bb:26:03:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:E4:93:7E:1B:25:BE:20:63:4B:1F:12:36:B1:CC:77:45:2D:CF
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/3mDkk34bJb4gY0sfEjaxzHdFLc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.91.0/24
31.22.94.0/24
185.231.100.0/22
195.47.238.0/24
IPv6:
2a0c:5700::/29
Signature Algorithm: sha256WithRSAEncryption
8a:e0:5f:92:4b:ec:61:b2:2e:2b:c8:fa:6d:d4:da:8e:db:fc:
fd:58:f8:bb:ff:9a:a5:96:8a:4d:05:dd:32:06:70:24:31:a6:
b3:13:0a:82:c6:44:c7:43:a5:d0:a7:90:82:fd:79:54:68:ba:
fc:67:4a:7b:9b:a1:a7:4f:a3:e2:65:c7:bf:91:23:e2:8f:9a:
56:cf:c0:fa:7a:a2:2a:f5:3b:61:29:df:8f:d1:d6:dc:b7:1b:
5b:8b:8b:53:3e:38:a5:99:04:91:37:d7:4f:59:90:53:79:ef:
b0:4a:19:28:06:ab:5a:94:00:16:3a:17:24:81:c0:69:39:29:
61:22:8e:47:22:71:c0:f6:88:71:8f:b0:e8:f9:48:56:d7:10:
00:b5:2a:4c:f3:f4:4e:d2:76:6d:98:d6:a6:f6:2e:aa:f0:c6:
0b:d8:bd:8a:73:3b:45:f5:f4:6e:72:4b:9f:0f:1f:b6:37:88:
6c:7f:7e:6c:53:15:fc:3e:19:c6:35:01:14:4f:0c:c6:c1:7b:
8e:bf:39:fd:24:63:e8:81:48:f8:a1:34:6d:de:af:23:cb:ad:
5e:04:b4:d6:af:86:0f:5b:fa:33:a0:de:0e:ba:0e:4b:17:e8:
45:bb:81:1b:86:37:a7:a1:c9:c1:c4:1f:64:71:69:c0:fa:40:
42:77:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:47:59 2025 by rpki-client