Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/1-7srUVzARA4xVURDrN0ctODQwdQ.roa
File: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (raw, json)
Hash identifier: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=
Subject key identifier: FB:BB:2B:51:5C:C0:44:0E:31:55:44:43:AC:DD:1C:B4:E0:D0:C1:D4
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019501AB5F30FB8D709901F92CB46928AA48
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/1-7srUVzARA4xVURDrN0ctODQwdQ.roa
Signing time: Thu 13 Feb 2025 23:36:02 +0000
ROA not before: Thu 13 Feb 2025 23:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214268
IP address blocks: 31.41.12.0/23 maxlen: 23
176.124.16.0/23 maxlen: 24
178.217.160.0/22 maxlen: 24
178.217.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:01:ab:5f:30:fb:8d:70:99:01:f9:2c:b4:69:28:aa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Feb 13 23:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbbb2b515cc0440e31554443acdd1cb4e0d0c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:3e:9b:76:39:69:4a:93:8d:0e:41:3e:fd:
64:82:44:d1:54:84:2f:29:bc:91:b0:49:92:e2:f8:
e6:61:ff:10:79:c0:8b:34:66:3a:2e:7d:b2:a9:d1:
36:e0:0b:75:3f:0c:7d:9c:db:8a:ed:eb:ca:0b:2c:
5b:81:5f:74:c1:cd:0e:9f:cf:ae:84:63:4c:f7:23:
98:06:65:68:bb:b0:0f:ff:07:a6:cc:01:0f:bb:e8:
a1:c6:ac:42:b3:78:8f:e3:5e:f3:6b:7b:50:5b:cf:
4d:33:4c:48:de:f3:9b:f9:78:80:bd:bc:77:51:e2:
1e:2b:05:4f:e4:d6:f8:53:8a:49:ff:4d:0a:f5:d6:
6e:7e:0a:61:34:6e:07:2c:0a:80:9f:c9:01:52:5b:
e0:c1:6a:c8:79:92:a1:19:a2:a6:9f:e7:2a:31:91:
6b:e4:45:3e:b2:9e:f7:78:23:b1:a8:21:94:a4:66:
8d:07:13:34:41:fe:9f:0e:57:6d:0b:90:45:64:25:
39:2d:22:03:05:30:08:34:67:f2:20:ac:b8:52:28:
a2:11:2a:9a:dc:e7:26:7a:44:31:98:25:3a:f6:8c:
09:68:43:67:7d:9b:95:80:0e:87:da:33:61:53:8b:
4c:a9:57:1c:35:35:a2:9a:fd:3d:e7:06:87:ae:c9:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:2B:51:5C:C0:44:0E:31:55:44:43:AC:DD:1C:B4:E0:D0:C1:D4
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/1-7srUVzARA4xVURDrN0ctODQwdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.12.0/23
176.124.16.0/23
178.217.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:39:4f:87:c7:f5:8b:d3:2e:33:75:e5:da:8d:57:3a:85:91:
5c:dd:bc:89:03:1b:60:59:2b:3b:23:7c:25:b4:9e:31:58:35:
df:c0:1f:f5:4a:8f:63:23:4f:eb:ce:cc:cc:13:a6:68:c4:58:
ed:2c:54:24:d4:91:1d:81:95:ed:88:87:f0:12:11:9f:5e:ab:
75:59:b9:32:52:7f:0a:4b:c7:b9:55:f1:c4:66:f7:5a:ff:4e:
fa:63:6e:b6:a4:0c:92:2d:74:94:c0:14:4c:a0:41:ae:7f:a2:
b3:0d:48:71:7b:0c:15:6e:a1:80:f7:98:e8:7c:86:7e:0e:06:
c2:0b:15:82:ba:ed:00:11:d6:b8:3c:7d:41:33:82:c5:2e:0b:
39:7e:de:05:ab:6d:90:34:de:ce:97:e2:c0:32:1b:58:1a:87:
32:64:22:63:93:b9:cd:78:6c:ab:77:b8:9c:9e:94:c9:00:06:
94:b8:8e:a9:5e:07:7c:1f:aa:b6:c1:8e:56:47:47:f3:dc:8d:
71:3c:cf:ae:9d:1a:7e:b6:7f:39:a4:92:eb:4d:25:19:45:2b:
df:ac:6c:73:da:78:34:37:68:89:6d:9e:57:c8:11:20:8d:3d:
ce:b2:9b:25:aa:9c:50:68:ea:d0:21:d4:33:9e:ea:a2:6f:56:
b0:0c:d7:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:20 2025 by rpki-client