Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PssutozgBGzRs26W1ySJCO5ROLo.roa
File: PssutozgBGzRs26W1ySJCO5ROLo.roa (raw, json)
Hash identifier: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=
Subject key identifier: 3E:CB:2E:B6:8C:E0:04:6C:D1:B3:6E:96:D7:24:89:08:EE:51:38:BA
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521ADF22C7077634411D3E56F93D0B3
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PssutozgBGzRs26W1ySJCO5ROLo.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202279
IP address blocks: 31.133.48.0/21 maxlen: 24
31.133.48.0/22 maxlen: 24
31.133.52.0/24 maxlen: 24
31.133.53.0/24 maxlen: 24
31.133.54.0/24 maxlen: 24
31.133.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ad:f2:2c:70:77:63:44:11:d3:e5:6f:93:d0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ecb2eb68ce0046cd1b36e96d7248908ee5138ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:11:41:ba:a4:0c:e1:cb:fd:70:2c:7a:a8:06:
f7:58:65:7e:c1:6b:bf:f1:e8:cc:ee:69:bc:1a:69:
77:19:46:2d:f5:fa:3a:f9:ef:18:9f:d5:a1:da:c7:
df:2b:a4:ad:5a:e2:22:ee:45:60:e2:72:bb:54:73:
cf:ba:41:87:e4:ad:69:b2:03:ba:e1:7d:97:b6:cc:
8c:35:d7:05:cb:f9:1c:5a:a6:51:b5:b9:34:3d:7b:
d3:92:d2:4f:45:a1:87:d4:55:fc:04:47:6d:d0:23:
c1:8e:75:e5:54:ca:d6:e0:3c:12:b7:99:76:ce:46:
ec:3a:08:18:bc:ac:a9:c8:e3:6e:61:14:21:c1:ee:
d0:84:36:97:2b:66:86:f8:2e:cf:66:ed:fc:8c:c9:
02:1a:73:38:0f:61:6a:32:33:f5:18:f5:77:2b:1c:
fe:77:6a:e0:fe:0e:6f:eb:5c:e3:eb:a3:e6:9c:f3:
f0:dc:51:9b:7f:7b:e0:30:fa:0e:3f:2b:09:99:4e:
1c:03:ca:27:dd:fb:43:3c:a2:d7:0d:70:c8:b8:f2:
13:7e:8f:8e:08:9a:62:ac:aa:0b:01:a0:45:3c:0a:
13:d6:97:be:c3:e3:9f:9d:94:d4:69:9c:4d:4a:e1:
ce:c6:63:c8:be:5e:ba:88:8d:ac:d4:00:4b:23:a9:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CB:2E:B6:8C:E0:04:6C:D1:B3:6E:96:D7:24:89:08:EE:51:38:BA
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/PssutozgBGzRs26W1ySJCO5ROLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:91:85:25:6b:88:7e:b5:cf:03:1f:3c:4b:84:02:0f:3d:e4:
a1:fc:59:ee:b1:d2:29:fd:e6:07:f7:56:dc:bd:5b:b1:41:fd:
70:35:03:09:ab:e9:73:fd:f1:ad:79:d9:f4:dd:8c:9f:a9:22:
c1:5e:1e:d4:6b:1f:17:ee:6f:dc:0c:dd:b6:46:bf:83:c1:67:
f5:5f:05:3a:30:e7:d2:a3:06:aa:4a:ad:f2:c6:87:f5:81:ae:
91:13:21:55:1b:1c:f8:ad:ba:76:d2:fe:a3:92:70:e4:cc:68:
3b:6d:b0:68:82:08:7e:58:9c:e5:61:e6:85:35:ce:ea:49:72:
26:f2:fa:12:ef:af:5a:51:7b:c9:12:7c:e8:76:6d:b3:4a:40:
e4:bd:45:99:fc:03:3d:b9:87:90:23:53:34:66:60:2d:06:89:
e7:be:25:8b:1a:96:12:88:2f:e6:40:b0:7d:4c:96:21:1c:67:
ba:a2:09:47:d3:78:e9:a0:e1:13:3a:b8:23:e3:cf:ce:d5:6e:
58:72:d1:34:70:53:e4:2e:55:f9:85:c2:b4:6b:49:0f:09:4e:
36:54:20:f7:bd:f3:17:c4:ed:27:d1:e7:ff:53:b1:13:68:68:
04:2b:49:65:12:f3:83:61:9e:45:75:bf:24:5c:34:22:a2:09:
3a:e8:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:54 2025 by rpki-client