Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/egnrXyyNbGvpg6aIGoEfRznijCU.roa
File: egnrXyyNbGvpg6aIGoEfRznijCU.roa (raw, json)
Hash identifier: 4f5nrivsxBbMxXIQjQ1VQo/t3u3N6GzzpzWYXL7wFf8=
Subject key identifier: 7A:09:EB:5F:2C:8D:6C:6B:E9:83:A6:88:1A:81:1F:47:39:E2:8C:25
Certificate issuer: /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial: 01942067BB14F7640C3CBBF4C978FDABE06A
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/egnrXyyNbGvpg6aIGoEfRznijCU.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211090
IP address blocks: 31.14.228.0/24 maxlen: 24
91.239.119.0/24 maxlen: 24
185.253.76.0/24 maxlen: 24
185.253.77.0/24 maxlen: 24
185.253.78.0/24 maxlen: 24
185.253.79.0/24 maxlen: 24
2a10:f1c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bb:14:f7:64:0c:3c:bb:f4:c9:78:fd:ab:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a09eb5f2c8d6c6be983a6881a811f4739e28c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:f1:bd:24:ca:10:bb:59:50:7f:de:a3:8d:
cc:b7:1d:d7:5c:a6:e9:b3:68:40:22:bb:6a:60:1d:
15:a4:8f:ce:0f:68:cc:8f:2e:08:c4:f7:9b:c9:e9:
ae:87:50:59:b1:d6:27:67:30:db:0c:96:3b:2d:fb:
d4:93:35:d9:a1:cd:e6:b1:4e:07:98:f5:8d:df:50:
ff:72:58:a1:5d:35:bd:69:6a:9e:8d:87:f1:ba:30:
69:00:fe:e3:9f:e0:a1:03:38:7a:f7:83:b7:22:6d:
3e:f1:60:7f:cc:87:98:d0:fd:19:50:14:0c:03:b1:
25:12:c8:bb:4a:bd:f8:26:3c:78:1f:a5:85:1c:9e:
48:3c:ad:84:b7:ae:79:9d:2d:df:34:cc:e7:e0:31:
0c:82:74:7a:14:c7:a5:17:20:77:90:aa:fc:d6:19:
d5:9c:27:ea:5c:e9:d8:dc:5c:c1:0d:f3:18:5d:d4:
7e:58:78:19:ce:c1:0a:0f:43:04:18:ae:2e:99:19:
8b:cb:70:60:a3:34:7c:f1:dc:1d:7e:b1:dc:c0:ff:
8e:ab:d6:c3:80:0c:e3:67:2c:f6:56:dc:c8:77:37:
c8:89:88:09:44:1b:fe:14:02:4c:75:d7:bd:05:94:
6c:0c:00:03:db:ae:1d:0c:14:83:24:cc:68:bd:8b:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:EB:5F:2C:8D:6C:6B:E9:83:A6:88:1A:81:1F:47:39:E2:8C:25
X509v3 Authority Key Identifier:
keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/egnrXyyNbGvpg6aIGoEfRznijCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.228.0/24
91.239.119.0/24
185.253.76.0/22
IPv6:
2a10:f1c0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:f1:9f:7f:32:6a:76:4f:ee:db:48:38:49:0e:db:9d:73:d2:
be:1e:b0:40:4f:5f:62:b1:df:ab:bf:ce:74:ff:0c:76:bb:c9:
aa:55:1c:47:ec:57:53:b0:20:fc:a8:ee:65:5d:4f:d1:30:30:
45:d1:d4:f3:97:81:87:34:a5:62:38:21:71:70:b9:31:99:53:
61:00:7e:0a:aa:63:88:7c:f8:76:a8:9d:8b:9f:23:bb:e9:42:
a3:74:97:a0:f0:29:85:88:7d:36:d3:bb:64:de:f2:38:3e:8d:
36:54:42:ac:2d:29:ba:23:a1:9a:02:01:07:45:bb:30:93:ac:
f7:5b:3c:8d:b5:a1:22:56:d4:e6:ca:6d:8b:8e:80:df:2a:1e:
47:61:e6:68:65:17:25:bb:e4:80:60:10:69:ea:2f:c4:6f:f6:
58:4e:75:cc:b6:81:c9:76:4c:cd:80:65:de:f8:64:56:c6:9d:
79:c6:99:67:91:47:0f:fa:7e:97:d1:75:a1:90:56:23:37:ad:
4d:6f:55:aa:dd:c5:63:1f:29:c3:24:27:a7:28:31:45:51:b9:
7c:5c:06:80:ce:e0:c7:37:2a:9a:03:5b:70:a5:31:08:53:42:
a1:e1:b3:84:21:cc:3f:6b:be:f4:5d:86:ac:4d:f8:bb:21:6d:
92:35:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:50 2025 by rpki-client