Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6ZjVieWDxISz7rcD_qo9tLO0fek.roa
File: 6ZjVieWDxISz7rcD_qo9tLO0fek.roa (raw, json)
Hash identifier: kas+ivVM4jPtwZ5MbfcKGIuzBhPqOhAN9LdaPiB1nkU=
Subject key identifier: E9:98:D5:89:E5:83:C4:84:B3:EE:B7:03:FE:AA:3D:B4:B3:B4:7D:E9
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA14D053A47E7BC6FBDCCDE96DA20F
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6ZjVieWDxISz7rcD_qo9tLO0fek.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39529
IP address blocks: 31.40.144.0/24 maxlen: 24
31.40.147.0/24 maxlen: 24
31.40.148.0/24 maxlen: 24
31.40.149.0/24 maxlen: 24
31.40.155.0/24 maxlen: 24
91.214.81.0/24 maxlen: 24
91.214.82.0/24 maxlen: 24
91.214.83.0/24 maxlen: 24
194.50.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:d0:53:a4:7e:7b:c6:fb:dc:cd:e9:6d:a2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e998d589e583c484b3eeb703feaa3db4b3b47de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:ca:cc:e0:b6:ac:64:cc:a5:ee:cc:ee:d2:
b5:52:2e:c3:a6:e7:05:8f:c1:0d:78:e9:8b:2d:6a:
16:6d:9e:43:eb:82:84:56:df:3b:45:88:b2:5a:9f:
b8:e3:f6:1e:95:b1:3b:30:dc:77:40:3d:f6:fe:8b:
9d:7e:63:fb:5c:7a:45:2a:55:00:94:7c:f0:41:81:
06:c3:80:89:df:18:1b:b2:36:f6:49:66:34:e9:b9:
34:01:4d:f6:1b:ca:95:30:fa:eb:27:1b:59:b8:44:
6d:6d:97:87:cc:82:8a:6a:55:86:29:fb:d6:7b:26:
9c:75:67:d8:29:5a:94:6c:1a:42:86:db:90:62:4f:
75:ad:90:c9:97:18:f9:c9:b7:b6:84:b0:bf:78:a2:
18:31:94:e8:57:7d:d5:83:7b:e2:55:52:dc:f1:a0:
58:4c:22:52:9a:89:0d:1c:82:52:a2:a1:25:6f:83:
03:29:68:68:90:89:bb:00:7b:a1:1e:39:4a:2b:c6:
ed:27:51:f2:69:d5:58:10:6b:a9:3b:84:c7:7f:31:
64:2f:5e:74:04:5c:c3:4b:5a:f7:54:98:25:c8:b1:
1d:2f:c3:8d:a1:e8:78:5f:9e:80:b0:07:48:f6:0b:
a7:5e:9e:b6:ed:c9:c1:6a:b5:47:81:1c:a2:ca:e7:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:D5:89:E5:83:C4:84:B3:EE:B7:03:FE:AA:3D:B4:B3:B4:7D:E9
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/6ZjVieWDxISz7rcD_qo9tLO0fek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.144.0/24
31.40.147.0-31.40.149.255
31.40.155.0/24
91.214.81.0-91.214.83.255
194.50.9.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e0:ec:a5:70:4b:ae:1b:55:c5:52:5b:3e:08:30:91:88:e8:
0b:97:51:87:46:80:5d:84:c3:d8:68:73:b9:71:90:03:bd:01:
9a:f4:cd:73:f9:5f:c1:81:5a:6c:6d:38:6e:a3:7d:9b:1b:59:
3d:98:b3:51:6d:36:91:a9:50:e2:32:17:50:eb:7b:33:f7:71:
71:b3:5b:86:e9:de:1e:43:14:63:12:93:18:c2:5d:c7:46:a2:
29:a6:e2:86:81:87:ce:00:60:48:3d:e8:ef:ef:6d:26:d5:49:
e5:b8:c1:9e:54:58:37:e5:33:a3:49:fd:f7:02:a7:fd:9b:80:
8e:96:86:22:fa:f0:90:0d:90:fb:06:50:02:85:2f:cd:e1:d2:
16:54:f8:19:e5:93:42:1d:76:41:f6:21:d8:a3:69:95:1a:17:
71:e1:48:10:84:c9:a3:36:ce:a3:ac:a6:14:cb:e8:5e:00:c1:
6d:18:62:b2:24:6e:1d:b4:78:da:35:79:0b:55:00:4b:41:5a:
0f:b7:97:4b:3c:93:44:3c:a9:78:b3:7d:0d:95:45:0e:ba:d5:
e5:67:7b:62:eb:2a:c9:6b:1b:2c:87:da:90:d5:6a:1d:2f:3b:
1b:c0:64:d6:58:79:0e:af:ee:4c:0f:b1:68:3f:01:23:64:ab:
7e:8a:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:10 2025 by rpki-client