Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/72JEe-00Ual0E3pLPOzH6dkP-3w.roa
File: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (raw, json)
Hash identifier: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=
Subject key identifier: EF:62:44:7B:ED:34:51:A9:74:13:7A:4B:3C:EC:C7:E9:D9:0F:FB:7C
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AE88DC9E4CD591D0E9E2165BC6B8
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/72JEe-00Ual0E3pLPOzH6dkP-3w.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204108
IP address blocks: 31.133.32.0/22 maxlen: 22
185.229.232.0/22 maxlen: 24
185.229.232.0/23 maxlen: 24
185.229.234.0/23 maxlen: 24
185.253.40.0/23 maxlen: 24
185.253.42.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ae:88:dc:9e:4c:d5:91:d0:e9:e2:16:5b:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef62447bed3451a974137a4b3cecc7e9d90ffb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:a5:05:e2:53:30:4f:dc:ae:ae:a2:f2:b5:
71:0a:b5:bf:04:65:e0:ca:ae:1b:25:0c:33:88:00:
15:b8:dd:91:03:9f:00:47:b4:d5:06:8a:de:7d:a6:
39:2c:83:29:bc:47:fc:b5:6d:1e:88:a1:b0:54:59:
83:25:06:91:6c:04:26:81:be:f9:9c:19:03:9d:bf:
b8:e3:d2:cd:66:3c:e2:7a:2f:9e:44:b6:29:60:c3:
ca:db:36:77:f2:c9:0e:95:27:28:54:50:53:02:6f:
b5:a6:b9:fe:d3:1c:cf:ce:50:2b:8d:03:8c:68:3f:
a9:0a:fa:13:72:5a:15:e5:6f:4d:ba:00:5d:b2:53:
9a:b3:8b:9b:6f:07:ad:b7:d6:ae:ae:b8:64:e2:23:
62:b7:36:5d:ec:d8:29:d9:ff:fa:44:30:59:59:3c:
1c:70:3c:e5:62:21:a0:b7:8f:46:ac:e7:31:9a:16:
35:5b:87:1a:7d:32:7f:10:ca:51:91:15:5b:01:9e:
c0:96:f4:49:e7:f3:76:0f:b1:90:d8:00:32:67:1e:
ca:09:94:71:7a:67:17:29:24:20:8f:53:62:5c:40:
91:b2:dc:88:13:9b:ba:6b:10:21:ff:b0:c3:7e:a8:
7e:16:82:05:79:09:de:fd:4b:da:02:70:2d:c7:a5:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:44:7B:ED:34:51:A9:74:13:7A:4B:3C:EC:C7:E9:D9:0F:FB:7C
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/72JEe-00Ual0E3pLPOzH6dkP-3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.32.0/22
185.229.232.0/22
185.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:ae:b4:a1:ff:ff:30:cc:a0:fd:be:3e:cd:10:01:95:1b:d6:
6d:00:7b:5e:a1:f0:d0:c6:eb:9f:67:11:68:f9:8d:a2:cc:d6:
30:33:a7:07:57:a0:2f:44:79:8b:38:0e:dc:18:f7:9d:f8:c8:
28:ec:c3:5b:73:3f:42:48:b0:6c:93:23:2b:98:98:c4:0e:9f:
fb:b4:72:29:5a:b6:d0:0f:44:c8:e7:52:94:b7:6a:f7:df:11:
0a:89:ba:25:30:3b:97:63:19:13:cb:05:cd:f0:eb:dc:2c:29:
e1:ed:a2:e0:a0:05:02:04:af:d7:81:74:b8:53:e6:c0:ee:bd:
04:ab:66:61:76:d6:fc:16:f7:d3:b0:50:32:a5:19:79:a7:15:
82:c5:89:96:cb:db:b3:69:d9:29:6d:61:80:a9:e9:4a:55:23:
27:19:60:87:7c:8d:b1:4f:23:32:26:0d:18:eb:c0:0f:d8:d1:
b1:5d:c6:aa:ea:17:78:31:f9:84:5e:02:cf:0d:78:07:fa:7c:
fd:e8:ad:d7:f2:ac:ee:83:2e:df:a9:06:80:9c:ad:ae:9c:f2:
bd:4b:ea:16:4b:68:3e:ff:4a:bc:2d:97:b3:4f:a6:7b:ef:7c:
2b:0c:fe:3c:5f:b1:e4:2e:93:14:cd:16:46:b5:da:8f:d3:7f:
9f:41:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:18 2025 by rpki-client