Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa
File: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (raw, json)
Hash identifier: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=
Subject key identifier: 38:63:60:48:19:D2:E4:B2:FD:5E:FE:35:EB:AC:68:48:D8:F6:42:09
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 019493D5BFF5C7F72D04B69D423296C07684
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa
Signing time: Thu 23 Jan 2025 15:44:06 +0000
ROA not before: Thu 23 Jan 2025 15:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213538
IP address blocks: 31.135.0.0/24 maxlen: 24
64.43.92.0/24 maxlen: 24
77.36.64.0/24 maxlen: 24
77.36.88.0/24 maxlen: 24
91.200.134.0/24 maxlen: 24
91.237.92.0/24 maxlen: 24
91.245.90.0/24 maxlen: 24
91.246.217.0/24 maxlen: 24
93.120.33.0/24 maxlen: 24
93.120.72.0/24 maxlen: 24
176.96.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:d5:bf:f5:c7:f7:2d:04:b6:9d:42:32:96:c0:76:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 23 15:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3863604819d2e4b2fd5efe35ebac6848d8f64209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9a:bb:08:5f:83:f5:0a:44:4a:86:31:3a:14:
31:b2:a1:0c:de:7e:10:3b:a9:97:c4:82:c7:fa:7b:
51:6d:79:f9:a5:e4:a0:b0:0c:8a:c2:a3:1a:0a:f7:
3e:56:bd:94:6a:97:7a:e9:9c:59:07:b2:87:52:e1:
53:b3:b3:5a:e0:46:43:6a:ae:ac:e3:56:e2:e1:3e:
03:7c:fc:dd:a5:f6:3c:36:a0:cd:ff:e4:8d:0b:e9:
fb:ee:b0:d2:d1:49:35:56:c5:a7:6e:9e:a1:1f:d4:
6b:7b:ad:dc:35:5d:21:69:9f:95:20:f5:5f:5c:d9:
d8:4a:92:46:61:d2:a0:46:8a:26:e9:7b:90:98:5c:
56:b5:ad:9c:28:39:e8:a7:ff:f8:f4:8c:63:2f:d6:
80:6d:d5:1f:02:c6:be:b5:8c:87:3d:99:5d:08:b1:
db:f2:e8:ad:ba:fa:03:21:7a:ac:b2:23:b7:a4:1a:
00:0a:c7:b5:a2:5d:18:26:a3:b7:9e:6c:1e:79:c7:
c8:b7:82:8b:e5:6d:14:f7:95:0b:32:11:9b:5e:7b:
b7:cf:49:92:b5:86:fe:8b:c4:04:dc:da:3e:1c:07:
21:66:e1:7e:aa:ce:0e:95:b9:00:af:31:12:0b:a0:
76:79:15:5e:aa:06:be:7e:4b:bb:e5:f9:b5:9a:01:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:60:48:19:D2:E4:B2:FD:5E:FE:35:EB:AC:68:48:D8:F6:42:09
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.0.0/24
64.43.92.0/24
77.36.64.0/24
77.36.88.0/24
91.200.134.0/24
91.237.92.0/24
91.245.90.0/24
91.246.217.0/24
93.120.33.0/24
93.120.72.0/24
176.96.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ce:a3:ad:06:a8:72:8b:b7:b5:07:f9:b0:37:b1:f2:b0:a7:
2c:23:9b:42:c6:bd:d0:d9:57:b0:59:02:23:5b:dd:6a:cc:7b:
7a:4b:c3:1a:98:9f:69:3e:a8:cd:a0:63:a5:40:5f:f4:05:87:
18:a4:d3:13:a2:ac:60:58:ba:6d:eb:7f:00:0a:ac:43:52:d3:
e3:07:33:26:d1:24:24:2a:ac:25:77:7a:41:91:a0:9e:ac:91:
e6:aa:20:7a:5d:89:01:9a:31:a6:ba:52:ad:88:69:21:15:f9:
65:dc:b3:ad:2b:33:59:9c:24:27:fb:69:e9:8f:e6:1d:0e:d1:
a0:80:78:6e:14:78:2a:d9:0c:e8:92:3b:98:e0:f7:03:0a:56:
14:f9:60:10:39:39:cc:5b:e2:9b:48:27:83:0f:54:a7:bd:7d:
8e:a2:61:eb:cf:eb:a3:66:31:df:3d:d7:0e:93:e6:4e:88:e2:
3d:73:a8:e3:01:50:3c:97:62:18:9c:c5:66:f2:82:55:a5:49:
b7:58:d9:15:5a:30:18:d3:7f:1e:a8:0b:03:8c:1d:43:d4:11:
32:24:5c:3c:ab:b7:18:52:79:3a:43:ca:d0:7e:b0:b7:26:c0:
24:f1:c1:0a:41:24:90:06:f3:99:98:bc:69:8c:e7:38:d0:ca:
df:e9:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:47 2025 by rpki-client