Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa
File: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (raw, json)
Hash identifier: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=
Subject key identifier: 60:A2:9C:0E:6F:9E:43:DC:7B:FE:D8:FB:9E:1B:25:4D:11:83:04:0C
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0194221F8456E28C02A22F3D90531FC7DBD8
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49100
IP address blocks: 31.130.176.0/22 maxlen: 22
31.130.176.0/24 maxlen: 24
31.130.177.0/24 maxlen: 24
31.130.178.0/24 maxlen: 24
31.130.179.0/24 maxlen: 24
31.130.180.0/24 maxlen: 24
31.130.184.0/21 maxlen: 21
31.130.184.0/24 maxlen: 24
31.130.185.0/24 maxlen: 24
31.130.186.0/24 maxlen: 24
31.130.187.0/24 maxlen: 24
31.130.188.0/24 maxlen: 24
31.130.189.0/24 maxlen: 24
31.130.190.0/24 maxlen: 24
31.130.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:56:e2:8c:02:a2:2f:3d:90:53:1f:c7:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60a29c0e6f9e43dc7bfed8fb9e1b254d1183040c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:0d:ff:31:4e:e1:20:7b:43:e2:51:c4:03:
32:59:57:86:a1:6d:d6:c1:a8:8d:82:67:c2:b4:bd:
1c:73:25:f3:7f:7f:22:4d:43:46:8b:ae:f4:49:62:
f9:a5:42:2d:16:b7:ae:cd:e2:97:7b:ce:79:9c:28:
65:5a:3d:a7:0b:e2:bc:88:ce:b8:ba:58:0e:11:cd:
8e:c9:7c:6f:f7:63:5e:04:93:5e:80:40:d3:5f:ce:
eb:ca:3a:b9:39:1e:d6:c5:79:25:f2:52:11:a1:85:
f1:43:0e:96:85:38:ed:e5:bb:b1:a5:10:ef:f1:a7:
54:ea:07:43:28:2c:25:70:f2:10:48:50:87:51:4d:
19:a0:c5:d0:88:f0:3b:19:72:fe:c0:48:bd:3e:0d:
97:ac:9e:87:6d:e2:b6:29:87:5a:06:9e:55:6b:9d:
9b:26:04:a4:7c:0d:87:31:e2:b7:30:e3:b3:e1:76:
e0:ea:d8:a6:f3:ab:f7:0d:15:da:66:b4:54:e1:2f:
aa:1f:bc:12:9c:1e:8f:3a:fe:58:a3:d3:05:82:4a:
72:2f:e9:4e:56:60:61:b6:8f:10:ca:c7:3d:20:31:
cb:9e:c9:a8:5a:c8:64:a8:80:d3:ff:a7:5d:26:a9:
3b:64:71:17:09:b4:c4:a4:d0:00:40:68:6a:0e:3d:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:9C:0E:6F:9E:43:DC:7B:FE:D8:FB:9E:1B:25:4D:11:83:04:0C
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.176.0-31.130.180.255
31.130.184.0/21
Signature Algorithm: sha256WithRSAEncryption
63:ef:84:6e:bd:66:15:57:98:a3:a3:d6:8e:52:dd:b6:17:a9:
1b:f2:92:84:8a:ef:d6:e2:0d:6f:51:35:39:e3:26:e1:6c:14:
db:f6:77:33:ed:05:26:08:71:c4:87:62:da:b0:c2:09:50:0a:
51:fd:bf:18:18:77:f5:f3:57:2b:cc:46:7f:d0:a8:9f:04:71:
09:7e:e4:2d:82:da:0a:86:c8:b5:4f:ba:d6:69:8c:e5:8c:6e:
64:c1:af:40:79:a1:17:e9:79:02:bc:b1:91:05:f9:fe:44:0d:
22:ab:4e:33:fb:cb:d6:55:74:bb:10:8d:80:db:38:3c:48:b0:
70:0f:1a:8c:04:00:04:25:62:ef:b6:31:3d:53:23:29:f2:36:
09:45:86:d6:f3:6a:e0:6b:c7:0d:ac:c6:a8:db:3c:2f:5c:9b:
db:cc:16:bf:e8:21:54:62:19:11:a8:55:d3:f4:58:b0:fd:7b:
fe:0e:61:21:70:ee:d3:cf:bb:af:3b:3a:0e:0c:83:b7:88:39:
c0:85:6c:8e:b3:8c:33:f7:3c:45:53:ec:6d:21:38:4b:77:c0:
60:8a:b9:55:c4:b4:1d:90:29:78:11:3a:61:6b:86:8c:e2:ae:
9a:21:39:e8:b7:0b:4f:79:30:0e:19:6e:8e:6c:71:20:f3:72:
a1:8d:06:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:06:18 2025 by rpki-client