Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BJJ4-wGcftG-CM06ruw8Q39Jpug.roa
File: BJJ4-wGcftG-CM06ruw8Q39Jpug.roa (raw, json)
Hash identifier: lWAuAzEMAIE/MRMmIOpVMRX3wstO8SKY1YlP1IBhmfI=
Subject key identifier: 04:92:78:FB:01:9C:7E:D1:BE:08:CD:3A:AE:EC:3C:43:7F:49:A6:E8
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0194258F917F419E24BFA92E00215E4B86C5
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BJJ4-wGcftG-CM06ruw8Q39Jpug.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205655
IP address blocks: 31.135.6.0/24 maxlen: 24
64.43.65.0/24 maxlen: 24
64.43.74.0/23 maxlen: 23
91.224.40.0/24 maxlen: 24
91.245.90.0/24 maxlen: 24
176.103.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:7f:41:9e:24:bf:a9:2e:00:21:5e:4b:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049278fb019c7ed1be08cd3aaeec3c437f49a6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:05:44:f8:85:c7:b3:07:0c:87:e7:63:37:
a3:02:eb:0e:cd:c2:8b:92:57:32:9d:c1:26:86:c6:
32:63:3c:b9:53:99:94:fa:62:a0:2e:e0:3a:73:5d:
71:65:b8:11:84:c9:75:de:e4:7c:c5:18:01:14:36:
2b:c7:40:84:5c:79:a5:ea:7f:3e:28:8d:ed:f5:46:
12:d3:63:c7:a8:13:b7:ba:41:34:72:e0:7d:27:c9:
12:44:c9:c7:50:a2:98:df:e7:3c:48:4d:20:cf:e5:
6a:23:85:10:5e:a1:04:f0:6e:e0:3a:9f:22:bd:6c:
d3:d7:6d:9b:dd:0c:46:f7:38:14:a7:ad:63:4e:c0:
ed:77:f5:9a:72:33:0a:68:1e:ef:55:6a:c5:38:49:
d7:1d:3e:f0:fd:96:4d:d7:2c:03:96:c4:68:11:4a:
bf:72:81:6a:e8:f0:dc:dd:5f:3e:bd:0f:40:b7:39:
aa:9d:42:44:c4:2c:ee:e8:e3:b2:ae:07:87:8d:03:
9a:71:69:c2:e7:7c:f7:47:c6:79:ab:b2:35:62:ee:
05:d8:23:c4:33:06:51:53:6e:0a:52:ac:90:ec:42:
28:57:92:ac:4d:f4:84:6c:4f:f4:31:bc:ac:b6:e7:
70:90:31:7f:87:12:fe:b1:f4:b5:12:b5:52:79:32:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:92:78:FB:01:9C:7E:D1:BE:08:CD:3A:AE:EC:3C:43:7F:49:A6:E8
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/BJJ4-wGcftG-CM06ruw8Q39Jpug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.6.0/24
64.43.65.0/24
64.43.74.0/23
91.224.40.0/24
91.245.90.0/24
176.103.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a3:97:f3:9f:06:98:ee:e8:a2:6b:77:cb:f0:82:fd:f2:af:
12:84:c5:2f:e0:d3:4f:f9:72:c5:6c:b7:c0:e2:2b:b3:81:14:
d9:7f:4e:6a:fd:aa:56:68:7c:84:ce:31:15:0f:10:e6:62:e8:
cc:a8:fe:14:ad:05:62:3b:4c:86:2b:ee:cf:0a:d9:c2:cb:7c:
72:f2:21:72:b6:f4:f4:ff:5d:14:0c:81:54:c5:62:6d:2d:62:
b6:16:ed:8e:39:0c:03:9e:82:06:de:c3:5c:5f:d6:89:cd:8b:
59:c8:9e:f0:d4:a8:c4:4d:ef:b6:57:91:8f:7e:76:04:6f:42:
4a:d6:13:0f:7e:49:8b:d3:af:02:bc:e1:34:e5:cc:89:0a:3b:
e8:76:11:80:df:d5:46:42:fa:3e:e1:b6:76:31:84:67:75:bb:
4c:9c:fd:cf:d4:45:12:9d:71:b9:2c:e9:26:63:e1:38:fe:99:
2c:99:88:d9:b4:44:30:d3:69:01:e5:aa:44:0a:9d:b4:05:09:
2a:15:4e:bb:f5:c9:4e:5e:39:b9:6b:1e:06:f4:3b:b5:2d:a0:
63:7b:2f:40:7d:69:40:1d:d0:8a:3b:c8:b5:35:3c:47:f1:0c:
67:df:54:b2:47:dd:2b:53:50:3f:78:e9:dc:25:b6:f9:7d:00:
8d:24:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:06 2025 by rpki-client