Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yoyK0IhGyZBI-YjOkWJATLNkBiU.roa
File: yoyK0IhGyZBI-YjOkWJATLNkBiU.roa (raw, json)
Hash identifier: Pe1PL4NKJvsbFR0jngimAfzhmlOHgrqwCwyorcUoSTQ=
Subject key identifier: CA:8C:8A:D0:88:46:C9:90:48:F9:88:CE:91:62:40:4C:B3:64:06:25
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244519CF85CE55C1F8EA1EBD660EFC4D
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yoyK0IhGyZBI-YjOkWJATLNkBiU.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 31.216.57.0/24 maxlen: 24
31.216.63.0/24 maxlen: 24
77.87.120.0/24 maxlen: 24
84.246.84.0/24 maxlen: 24
84.246.86.0/24 maxlen: 24
84.246.87.0/24 maxlen: 24
84.246.106.0/24 maxlen: 24
84.246.109.0/24 maxlen: 24
87.236.151.0/24 maxlen: 24
88.151.15.0/24 maxlen: 24
89.107.14.0/24 maxlen: 24
89.107.15.0/24 maxlen: 24
89.248.70.0/24 maxlen: 24
91.190.153.0/24 maxlen: 24
91.246.34.0/24 maxlen: 24
91.246.48.0/24 maxlen: 24
91.246.53.0/24 maxlen: 24
91.246.54.0/24 maxlen: 24
91.247.161.0/24 maxlen: 24
91.247.162.0/24 maxlen: 24
91.247.165.0/24 maxlen: 24
91.247.166.0/24 maxlen: 24
91.247.167.0/24 maxlen: 24
91.247.173.0/24 maxlen: 24
91.247.183.0/24 maxlen: 24
93.157.104.0/24 maxlen: 24
93.157.109.0/24 maxlen: 24
109.94.161.0/24 maxlen: 24
109.94.163.0/24 maxlen: 24
109.107.136.0/24 maxlen: 24
109.107.141.0/24 maxlen: 24
109.107.142.0/24 maxlen: 24
109.107.144.0/24 maxlen: 24
109.107.147.0/24 maxlen: 24
109.107.148.0/24 maxlen: 24
109.205.184.0/24 maxlen: 24
109.205.188.0/24 maxlen: 24
176.97.199.0/24 maxlen: 24
176.97.203.0/24 maxlen: 24
176.97.208.0/24 maxlen: 24
176.97.222.0/24 maxlen: 24
176.97.223.0/24 maxlen: 24
176.116.3.0/24 maxlen: 24
193.160.219.0/24 maxlen: 24
193.163.22.0/24 maxlen: 24
194.26.224.0/24 maxlen: 24
194.105.60.0/24 maxlen: 24
194.107.92.0/24 maxlen: 24
212.52.25.0/24 maxlen: 24
212.52.26.0/24 maxlen: 24
217.198.176.0/24 maxlen: 24
217.198.178.0/24 maxlen: 24
217.198.179.0/24 maxlen: 24
217.198.180.0/24 maxlen: 24
217.198.181.0/24 maxlen: 24
217.198.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:19:cf:85:ce:55:c1:f8:ea:1e:bd:66:0e:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca8c8ad08846c99048f988ce9162404cb3640625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:bc:2c:03:19:76:6b:27:eb:6f:02:51:2c:
68:9f:8e:1d:3f:8c:e7:5f:4a:8d:dc:d5:29:0a:b3:
3a:f9:4c:7c:c1:30:c8:34:02:f5:94:16:7f:39:21:
96:a4:f0:b5:b6:64:be:ed:38:90:27:13:f2:a9:50:
c3:3f:42:d7:a6:c6:1c:1c:69:b4:55:8e:64:32:b1:
9e:07:d5:e2:72:09:37:4d:b5:92:75:be:10:d4:8d:
52:f9:92:ea:3a:97:7c:84:e6:fd:e1:a7:92:e3:a1:
00:06:4f:52:65:9b:ca:96:e9:6d:c0:9b:7c:74:94:
6f:d3:96:2c:ba:61:4d:c6:fb:64:ff:72:34:16:21:
c6:c9:1c:90:b7:7b:91:d1:c4:ff:2b:3e:ca:e7:2d:
72:60:48:84:1c:f3:dd:7f:b0:55:34:36:a3:7d:2f:
ad:d8:66:22:d2:03:ae:af:7f:76:39:d0:a0:18:2f:
1a:23:6f:70:ce:43:bb:89:f7:d9:c2:6a:d7:5f:05:
11:62:19:cb:7c:53:3e:af:71:41:5c:42:3d:31:22:
16:1d:5c:6e:06:ca:a9:50:2a:c3:af:84:89:10:57:
8c:6b:0b:d0:43:7a:6b:37:69:e5:76:bd:3c:1b:c9:
71:ad:8b:8b:74:3d:05:a1:27:ba:d0:57:9a:c1:56:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8C:8A:D0:88:46:C9:90:48:F9:88:CE:91:62:40:4C:B3:64:06:25
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/yoyK0IhGyZBI-YjOkWJATLNkBiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.57.0/24
31.216.63.0/24
77.87.120.0/24
84.246.84.0/24
84.246.86.0/23
84.246.106.0/24
84.246.109.0/24
87.236.151.0/24
88.151.15.0/24
89.107.14.0/23
89.248.70.0/24
91.190.153.0/24
91.246.34.0/24
91.246.48.0/24
91.246.53.0-91.246.54.255
91.247.161.0-91.247.162.255
91.247.165.0-91.247.167.255
91.247.173.0/24
91.247.183.0/24
93.157.104.0/24
93.157.109.0/24
109.94.161.0/24
109.94.163.0/24
109.107.136.0/24
109.107.141.0-109.107.142.255
109.107.144.0/24
109.107.147.0-109.107.148.255
109.205.184.0/24
109.205.188.0/24
176.97.199.0/24
176.97.203.0/24
176.97.208.0/24
176.97.222.0/23
176.116.3.0/24
193.160.219.0/24
193.163.22.0/24
194.26.224.0/24
194.105.60.0/24
194.107.92.0/24
212.52.25.0-212.52.26.255
217.198.176.0/24
217.198.178.0-217.198.182.255
Signature Algorithm: sha256WithRSAEncryption
97:a8:52:9c:6d:53:8c:d4:68:5b:53:fb:89:8a:3a:02:23:b7:
cc:c6:66:77:c5:43:40:c7:59:e5:a3:98:6c:08:36:9c:be:7e:
ea:1d:3f:89:a0:ac:a9:8e:43:ff:44:25:9c:6e:90:8d:26:9b:
e4:14:27:0c:c7:55:21:b2:15:a3:83:1e:02:dd:9c:1d:ad:c9:
8d:6c:58:ae:a9:0e:42:12:2a:be:fc:95:ac:c6:7d:9e:ef:c4:
73:70:28:13:d1:2d:c3:74:04:91:6e:5d:ef:b8:ba:f9:4b:c5:
35:52:c5:fd:9b:3e:70:a6:e2:fa:7c:a3:19:04:61:0d:12:0c:
10:4f:a3:08:f0:03:15:42:1d:b1:70:d2:98:1c:c6:aa:54:75:
ec:0d:fa:d5:fe:8d:0b:ec:7f:5c:bf:92:ee:23:ab:b3:26:db:
d5:09:77:74:f2:cc:81:33:fc:3d:78:2c:57:bb:05:11:6a:bc:
bb:ca:52:91:2f:a3:34:12:9f:3f:4c:d4:ac:33:49:1c:ab:cc:
de:4d:d7:12:93:42:33:6d:70:0e:61:5f:1d:bc:bd:3f:aa:14:
98:24:81:6c:62:0f:b1:f8:01:69:60:31:f5:ba:d6:5e:b9:8f:
6f:1c:6c:ae:8c:19:f7:11:f1:f7:26:a1:9e:08:55:a0:dd:51:
49:15:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:42 2025 by rpki-client