Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa
File: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (raw, json)
Hash identifier: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=
Subject key identifier: 27:56:35:B2:BF:F3:72:1B:B7:67:85:CC:2E:A3:BE:3A:F2:BC:50:F6
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019424B3BECBEC7A62C0681DAB892B2EE45E
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49814
IP address blocks: 31.24.24.0/21 maxlen: 21
91.226.73.0/24 maxlen: 24
176.65.32.0/19 maxlen: 19
2a00:9700::/32 maxlen: 32
2a00:9700::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:be:cb:ec:7a:62:c0:68:1d:ab:89:2b:2e:e4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=275635b2bff3721bb76785cc2ea3be3af2bc50f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:0b:9b:61:7d:1d:ce:93:64:ed:8f:ce:32:
54:86:9f:e7:c3:51:7e:dd:11:af:80:c0:20:6d:54:
9a:ed:c7:70:74:ca:59:38:19:37:39:37:ac:45:21:
9c:31:67:ff:11:42:f2:3a:76:7c:64:c2:1e:d7:01:
61:55:82:cc:c4:ba:2c:21:f1:1f:f2:70:ef:02:90:
8f:82:ae:59:c1:68:0f:d9:3b:40:1a:f2:14:54:38:
75:73:03:64:47:00:f8:d5:f6:44:df:f0:00:4b:c0:
bd:dd:90:66:7a:a7:74:00:86:35:78:07:89:74:81:
61:e1:be:6c:f7:6b:1a:c4:8e:23:a9:dd:63:25:3c:
16:93:9f:4d:f0:36:1c:5c:82:9b:a7:2e:9e:d4:af:
62:b9:18:9e:1c:5a:9d:fc:ca:85:b0:cd:5d:49:b8:
f9:22:61:7d:3f:43:4d:23:50:23:cd:26:85:fa:de:
88:e9:04:3d:a6:82:e0:c8:93:f6:b6:41:46:4f:0f:
95:01:71:a6:67:15:c7:3a:1d:75:98:a4:fa:87:cc:
30:8b:82:d8:c0:21:48:3e:d3:23:d5:4a:71:d0:76:
45:98:93:22:6b:0e:ca:20:4a:3a:22:46:f7:14:c2:
26:fc:b8:50:00:76:5f:68:cb:f3:c0:50:7f:c1:e5:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:56:35:B2:BF:F3:72:1B:B7:67:85:CC:2E:A3:BE:3A:F2:BC:50:F6
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.24.0/21
91.226.73.0/24
176.65.32.0/19
IPv6:
2a00:9700::/32
Signature Algorithm: sha256WithRSAEncryption
97:4d:39:e1:fd:81:3d:90:a5:16:60:e0:2d:53:01:b3:47:3d:
92:a6:64:7f:31:fd:6a:ab:3d:32:29:fd:6b:dc:b3:21:87:8d:
d0:ed:33:34:b7:be:e4:73:3e:b7:cf:b9:19:36:ca:70:37:22:
aa:41:71:0e:41:5e:fa:2e:9c:70:22:32:97:2f:94:0e:62:8b:
14:5d:a7:61:7c:17:be:de:ae:3f:43:b8:53:e4:f5:86:85:90:
97:d8:63:e9:0f:0e:04:29:b7:89:8d:b5:e5:bd:5c:5d:f4:9d:
2e:c9:c0:b3:c1:43:d2:f4:76:08:89:e4:2a:de:da:3c:69:a4:
b2:7f:ea:ad:c8:62:b7:99:ff:97:25:32:a3:4f:a4:20:d3:cf:
85:cc:c4:2f:95:44:4e:13:4c:5a:6e:82:66:78:89:a7:80:c5:
38:00:11:2d:04:95:97:99:55:35:29:38:b7:de:28:92:de:3e:
72:f0:87:66:3b:d5:91:44:97:ef:66:ef:66:c2:1d:47:cd:c8:
ed:b3:94:ed:c3:a1:2b:26:bd:0c:fc:2e:95:0b:2e:ec:10:ea:
ef:1d:b6:5d:b8:32:4a:6a:e7:20:d8:b4:74:61:87:4e:d8:38:
cb:7b:b5:94:4c:fc:f5:7e:18:91:1e:98:e2:85:e5:47:09:20:
aa:e5:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:05 2025 by rpki-client