Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa
File: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (raw, json)
Hash identifier: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=
Subject key identifier: 18:E5:43:38:FC:F8:13:2E:1A:24:E4:18:9D:94:9F:6C:CE:FB:6F:66
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01941F8C7B935B785F1162F0F6A730E916D5
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 31.133.84.0/22 maxlen: 22
176.103.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:93:5b:78:5f:11:62:f0:f6:a7:30:e9:16:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e54338fcf8132e1a24e4189d949f6ccefb6f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5a:b2:95:dd:d7:88:58:59:2a:bb:f6:b4:80:
00:7d:17:23:c9:d7:84:37:91:a1:03:aa:1c:f4:8a:
1e:c5:a9:6f:86:bd:c8:fe:19:7b:9a:9e:c2:49:1d:
94:50:c0:4b:52:ae:52:fc:02:18:cc:6f:0a:bb:94:
58:18:43:2d:88:b9:ba:9e:78:a7:82:68:b1:aa:88:
4f:a4:6d:8b:fd:42:e4:07:ae:7d:73:50:a5:fd:9c:
b7:55:2d:10:01:87:44:64:af:e3:a9:19:3e:5b:17:
52:f0:ff:cc:25:25:ef:aa:a6:81:eb:e6:82:8d:bf:
22:bb:f1:ff:bf:7d:a7:58:cd:03:e5:f0:9d:b1:06:
1b:b0:d7:05:15:66:da:08:29:a5:45:7f:31:f1:22:
87:a7:81:50:cd:3e:0d:fa:4c:bd:b9:d3:b2:0a:79:
73:bb:38:55:ec:5a:2d:e5:43:08:4b:d8:4b:1f:76:
0c:4d:6d:5e:bc:5e:7a:81:76:85:1a:13:5b:f9:f7:
3c:41:8b:20:a5:3d:ca:af:44:cd:79:2d:a1:13:9f:
4c:81:02:b3:3f:8a:53:06:2a:9e:5a:d2:b3:19:e2:
c3:86:08:49:b4:98:f3:32:f9:12:d5:d3:8c:8b:b8:
51:9a:58:42:50:e0:39:48:a4:d4:7d:35:81:55:16:
e6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:43:38:FC:F8:13:2E:1A:24:E4:18:9D:94:9F:6C:CE:FB:6F:66
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
176.103.236.0/22
Signature Algorithm: sha256WithRSAEncryption
30:f2:a5:63:0b:47:3c:2c:8b:c3:f9:2a:eb:d8:eb:10:83:ac:
19:2a:af:d4:f4:8c:32:64:97:20:4c:07:bf:d9:35:31:b5:4f:
4f:a7:90:2c:cb:92:d3:98:71:57:58:d4:6f:84:a2:62:e5:a4:
cb:bd:b3:47:f5:9d:31:3f:84:e6:e2:0a:d0:6c:87:82:aa:a5:
77:95:8e:d2:5a:94:c5:62:be:65:7a:37:f0:36:17:5d:d1:21:
1b:b1:31:bd:b9:62:8a:0f:66:3a:3c:98:d3:22:c4:88:1f:02:
e9:79:21:26:5c:d1:3a:66:f5:60:12:a1:f5:0d:3d:5d:53:96:
73:00:0a:db:cc:10:21:e9:33:fe:09:02:4f:d1:ab:e9:88:93:
4c:b4:80:39:df:bf:24:41:89:a9:eb:0f:7c:34:c3:3e:9d:f0:
de:0d:05:d6:32:b2:58:8a:09:2b:b8:74:60:c6:de:10:c1:24:
94:db:3e:7b:41:70:5c:1d:77:7e:02:ea:58:ab:66:05:90:f8:
38:a9:75:fd:46:61:13:62:5f:55:d2:81:17:e2:5f:35:8f:35:
e0:9a:79:a2:b8:e4:94:d7:04:6f:44:61:e6:2c:de:00:ea:49:
d7:b1:4e:e4:19:aa:b5:aa:8e:0f:12:e9:3a:30:4a:14:ba:5e:
2f:6a:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:21 2025 by rpki-client