Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/U9d60iaXFQDxSrHcLdT4ojLheZE.roa
File: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (raw, json)
Hash identifier: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=
Subject key identifier: 53:D7:7A:D2:26:97:15:00:F1:4A:B1:DC:2D:D4:F8:A2:32:E1:79:91
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019421B24124AF0ED558A65FF745BF4F87AD
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/U9d60iaXFQDxSrHcLdT4ojLheZE.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202632
IP address blocks: 31.47.0.0/19 maxlen: 19
31.47.0.0/24 maxlen: 24
31.47.4.0/23 maxlen: 23
31.47.8.0/24 maxlen: 24
31.47.9.0/24 maxlen: 24
31.47.10.0/24 maxlen: 24
31.47.14.0/23 maxlen: 23
31.47.16.0/20 maxlen: 20
185.12.168.0/22 maxlen: 22
185.173.28.0/22 maxlen: 22
185.210.180.0/22 maxlen: 22
185.210.181.0/24 maxlen: 24
185.210.182.0/24 maxlen: 24
213.91.64.0/21 maxlen: 21
213.91.64.0/22 maxlen: 22
213.91.68.0/22 maxlen: 22
213.91.112.0/20 maxlen: 20
213.91.112.0/21 maxlen: 21
213.91.124.0/24 maxlen: 24
213.91.125.0/24 maxlen: 24
213.91.126.0/24 maxlen: 24
213.91.127.0/24 maxlen: 24
217.71.48.0/24 maxlen: 24
217.71.56.0/21 maxlen: 21
2a03:9240::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:24:af:0e:d5:58:a6:5f:f7:45:bf:4f:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53d77ad226971500f14ab1dc2dd4f8a232e17991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:79:a4:36:89:a7:bc:77:a9:47:3b:49:b6:
1c:63:e9:bf:b7:48:28:57:94:51:d2:4c:8c:8d:fc:
b9:1c:87:fe:66:b0:cd:92:3f:20:e4:0c:80:1a:41:
17:43:b9:d5:c2:c5:b4:5a:d9:10:ff:2c:21:53:ac:
a3:d6:56:2c:88:01:3e:f2:34:b6:77:90:cc:0e:b2:
37:1c:50:e1:85:9a:46:44:05:ed:bc:91:3c:d3:d0:
f9:21:7b:f1:97:19:46:5b:42:17:02:a7:5b:99:cc:
9c:bf:b1:9a:50:0c:b4:f8:01:84:06:0e:25:9d:e5:
68:77:95:17:84:d3:79:6e:fd:df:3c:cc:02:05:00:
5b:50:c2:a7:d4:84:e3:86:15:7b:95:8c:b4:2b:25:
8a:b5:d1:72:7f:e3:31:3b:79:18:0a:39:f6:08:1b:
25:f9:c0:ee:96:1c:35:85:ea:68:54:bc:a0:b6:1e:
67:9a:ad:d8:af:b6:21:2e:8b:0e:58:ea:07:c5:2e:
49:09:ca:40:0a:03:77:70:aa:07:d3:09:ac:2a:9b:
65:6c:53:f1:19:aa:a8:cb:bc:d2:37:ba:74:9b:b3:
ae:b6:db:5c:33:4a:0a:6e:67:e0:ef:1d:6f:5b:0e:
e2:45:17:80:1e:05:74:c7:df:4e:6e:29:68:10:c5:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D7:7A:D2:26:97:15:00:F1:4A:B1:DC:2D:D4:F8:A2:32:E1:79:91
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/U9d60iaXFQDxSrHcLdT4ojLheZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.0.0/19
185.12.168.0/22
185.173.28.0/22
185.210.180.0/22
213.91.64.0/21
213.91.112.0/20
217.71.48.0/24
217.71.56.0/21
IPv6:
2a03:9240::/32
Signature Algorithm: sha256WithRSAEncryption
a1:65:e3:09:ba:0e:fc:45:b2:49:69:8f:95:35:dd:30:1b:2b:
27:fb:b1:37:af:3e:e5:8e:38:ab:e3:0a:ef:1c:97:9e:1f:5f:
11:67:0c:46:e6:11:82:6a:5a:e0:f9:ec:c8:9c:d4:e5:d5:77:
a7:54:51:bf:a8:cd:35:55:57:b5:e0:11:82:5e:29:e4:5f:21:
2d:be:61:ae:8c:de:0f:bf:0e:ca:68:54:6f:22:51:04:0c:69:
d4:e9:f7:fa:0f:0e:54:b3:a9:7c:e2:61:83:0e:30:65:69:0f:
1f:8e:ec:46:de:3a:82:91:2b:c7:75:f3:5e:b0:06:2f:a3:79:
a5:b0:9c:29:05:ff:ba:45:94:8f:e4:79:37:d1:1f:b4:00:72:
9c:05:48:6a:cc:81:93:65:b2:06:ca:f3:83:3d:59:f7:7e:88:
b7:56:7c:8e:58:51:29:2a:7e:13:b3:9f:de:6f:2b:33:27:7b:
2a:c4:8f:99:74:5c:9b:ef:9b:90:12:7a:02:e0:5f:e0:03:9d:
0d:a5:b5:a8:9a:79:61:7e:07:95:08:07:c1:4b:aa:53:ec:86:
92:e9:fa:3d:3a:85:34:f5:b8:75:bb:3e:55:ef:3c:ae:7e:3a:
f5:35:04:9a:24:f2:64:e1:01:52:7f:16:c3:2b:a1:70:5e:4b:
24:fc:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:13:45 2025 by rpki-client