Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/bdqrLURz5G694Fm80xmKAo0IogU.roa
File: bdqrLURz5G694Fm80xmKAo0IogU.roa (raw, json)
Hash identifier: hG0r7jG1QmA/uFg4gCQdR2alotLJA0SQybpT8Ey91vY=
Subject key identifier: 6D:DA:AB:2D:44:73:E4:6E:BD:E0:59:BC:D3:19:8A:02:8D:08:A2:05
Certificate issuer: /CN=daf0a39cfadf910f6b132ad228e606561887a06c
Certificate serial: 019425FC2B8A745848A64403B5ABAF6AC262
Authority key identifier: DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/bdqrLURz5G694Fm80xmKAo0IogU.roa
Signing time: Thu 02 Jan 2025 07:47:50 +0000
ROA not before: Thu 02 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29413
IP address blocks: 31.187.80.0/22 maxlen: 24
31.187.88.0/22 maxlen: 24
37.156.80.0/20 maxlen: 24
46.31.216.0/21 maxlen: 24
88.133.160.0/20 maxlen: 24
88.133.224.0/21 maxlen: 24
91.217.176.0/24 maxlen: 24
185.31.60.0/22 maxlen: 24
185.91.48.0/22 maxlen: 24
213.149.80.0/20 maxlen: 24
213.178.16.0/20 maxlen: 24
217.72.208.0/20 maxlen: 24
2a02:2488::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2b:8a:74:58:48:a6:44:03:b5:ab:af:6a:c2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daf0a39cfadf910f6b132ad228e606561887a06c
Validity
Not Before: Jan 2 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ddaab2d4473e46ebde059bcd3198a028d08a205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:9d:85:9a:7e:36:88:a6:2e:c0:03:cb:78:
bf:ab:7d:4c:67:b4:3e:d3:ba:c5:08:97:f1:a3:11:
62:4d:06:51:31:33:ea:9d:79:12:f5:51:f5:3f:0e:
ba:db:08:fe:51:d3:e3:5b:85:17:3d:d3:b9:ee:a7:
77:14:0a:24:9e:d6:01:6f:9a:3e:10:e7:77:b2:e2:
59:83:bc:22:1f:66:cb:83:db:48:e7:94:10:65:96:
3e:07:60:9b:5a:3d:1a:52:1e:8e:4c:27:21:93:a5:
7f:a7:33:ce:9b:fb:01:b5:1d:01:78:d5:f1:ed:e6:
b4:22:da:d5:80:b1:1d:4c:9c:8f:a1:3f:61:39:68:
73:a9:e1:51:22:5e:f2:c8:38:e5:91:59:70:a0:13:
36:91:9f:a4:6c:0d:de:79:da:07:8c:5a:f1:c3:7b:
29:5a:31:30:e2:53:b4:e9:14:0d:c6:29:cd:62:fc:
a1:6d:55:2d:2a:6c:14:0b:7c:07:44:0d:b8:5f:0f:
ea:cc:13:ef:f1:95:71:ce:49:b2:b4:51:5f:d0:1b:
56:f9:a1:ed:c3:42:59:22:af:20:5c:77:91:f0:0b:
4e:17:ad:d7:68:8d:05:91:69:46:d6:d7:64:bb:e8:
0e:79:df:cb:ea:c8:d5:f8:fd:b5:c7:cc:38:fa:d9:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:AB:2D:44:73:E4:6E:BD:E0:59:BC:D3:19:8A:02:8D:08:A2:05
X509v3 Authority Key Identifier:
keyid:DA:F0:A3:9C:FA:DF:91:0F:6B:13:2A:D2:28:E6:06:56:18:87:A0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/bdqrLURz5G694Fm80xmKAo0IogU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ffa457-34c8-48c2-9ebc-92b207f641b1/1/2vCjnPrfkQ9rEyrSKOYGVhiHoGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.80.0/22
31.187.88.0/22
37.156.80.0/20
46.31.216.0/21
88.133.160.0/20
88.133.224.0/21
91.217.176.0/24
185.31.60.0/22
185.91.48.0/22
213.149.80.0/20
213.178.16.0/20
217.72.208.0/20
IPv6:
2a02:2488::/32
Signature Algorithm: sha256WithRSAEncryption
12:a0:fe:d8:a2:58:93:f0:b1:be:d4:d5:98:53:a0:48:1a:28:
9e:52:c7:89:2e:2a:5d:c4:96:d7:a7:bc:59:b0:ce:4c:65:26:
a8:8b:50:ee:30:05:17:cd:55:e5:50:e3:1f:28:59:a7:75:c7:
ad:87:6c:57:14:fc:83:c5:4c:2d:64:70:16:5b:6b:17:e8:d7:
71:70:da:56:e2:74:c0:a4:9e:99:c5:80:ff:ed:c9:f0:e6:b5:
bd:f1:d7:88:a8:0a:5f:d8:36:25:6c:7b:b2:52:d5:af:ac:f6:
26:b3:b5:c9:83:5c:b8:d7:ee:a9:a8:5e:bb:ac:d1:af:1e:3f:
05:df:12:15:c3:99:bc:99:e5:b5:3e:07:a0:9d:c3:69:62:6f:
91:36:10:f1:15:15:e4:6b:4c:39:df:cc:7f:3c:83:57:2f:a3:
91:00:46:96:ca:e0:f4:c2:f2:1b:4d:94:d9:6a:8b:d3:3f:51:
21:33:e9:32:de:24:0f:af:7c:23:e6:8f:4c:fd:d3:5c:89:a9:
a2:0f:ae:f4:c8:9d:55:62:35:1b:0b:14:1a:51:5c:fa:ad:9f:
68:d6:63:9d:b9:13:c1:af:18:cf:02:78:d9:c9:b6:51:60:25:
6b:b9:f8:9c:aa:a8:a2:f9:df:c6:82:5b:36:a6:57:1f:1e:e1:
4f:12:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:38 2025 by rpki-client