Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa
File: bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa (raw, json)
Hash identifier: sVeZTcwjMup/pTvS7GUIobKYbPGzbA4y8WVwVhuhqdg=
Subject key identifier: 6E:4B:F4:B5:FF:01:EE:24:BE:BE:70:4A:FF:70:1D:4B:50:73:CD:AE
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 01941FFA357971DD4C8331D09EAB200EA4A3
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1547
IP address blocks: 31.31.0.0/19 maxlen: 19
31.31.0.0/20 maxlen: 20
31.31.16.0/20 maxlen: 20
37.26.128.0/20 maxlen: 20
62.221.64.0/18 maxlen: 18
62.221.64.0/19 maxlen: 19
62.221.96.0/19 maxlen: 19
77.235.96.0/19 maxlen: 19
77.235.96.0/20 maxlen: 20
77.235.112.0/20 maxlen: 20
80.94.240.0/20 maxlen: 20
80.94.240.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.243.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.246.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.254.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
95.153.64.0/18 maxlen: 18
95.153.64.0/19 maxlen: 19
95.153.96.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
217.19.208.0/20 maxlen: 20
217.19.208.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.213.0/24 maxlen: 24
217.19.214.0/24 maxlen: 24
217.19.215.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
217.19.221.0/24 maxlen: 24
217.19.222.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
2a03:f680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:35:79:71:dd:4c:83:31:d0:9e:ab:20:0e:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e4bf4b5ff01ee24bebe704aff701d4b5073cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:32:8f:e4:0d:13:d8:0b:63:1e:c2:2e:05:
4d:10:98:cc:bf:2a:96:33:b2:73:67:19:e8:11:1b:
51:ec:6a:20:33:c1:64:fe:7b:f6:de:ee:3c:d6:2c:
0b:c8:df:39:d1:8d:5f:dd:dc:f5:eb:94:d3:15:0f:
56:49:dd:63:0a:7e:de:a5:6f:7a:08:bd:20:78:74:
28:b8:0f:95:35:96:de:1a:47:6d:11:5f:51:38:b6:
4d:03:a1:32:2b:82:bf:62:e2:a8:40:98:74:bd:4c:
c4:4c:4d:49:e8:b6:4a:60:6b:fb:48:15:21:7d:b6:
f7:31:df:21:54:fb:3e:23:f5:94:14:82:4f:f8:bd:
54:c3:9a:86:e5:54:28:d8:65:e0:f9:fd:84:da:26:
91:f2:9b:ab:b4:d4:79:e3:67:47:37:26:98:2f:c9:
cc:e3:64:ff:68:7d:1b:0b:f6:47:49:de:c8:94:95:
5b:60:b8:93:63:41:24:a1:22:8d:04:a9:1a:40:74:
dc:1e:02:7e:d5:44:52:83:8b:2f:4d:e2:05:1c:5e:
48:06:0f:0f:09:77:89:81:51:0f:74:10:f1:ba:84:
24:43:97:68:62:f9:d0:0f:4f:04:d9:b0:e7:2f:e2:
8d:db:26:b5:84:6b:14:69:f2:2e:37:13:77:79:0b:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:F4:B5:FF:01:EE:24:BE:BE:70:4A:FF:70:1D:4B:50:73:CD:AE
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/bkv0tf8B7iS-vnBK_3AdS1Bzza4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
2b:11:4c:ec:42:e4:eb:41:ed:2a:e4:6f:ab:cd:54:7d:1e:36:
4d:8f:fd:c2:8f:69:4f:06:58:2c:ab:55:0c:8b:4c:af:9e:1d:
e6:94:5d:12:df:c6:2b:01:85:1b:4d:f8:60:51:eb:97:6e:f3:
c7:ce:95:3d:77:7e:21:eb:0e:6d:01:b5:02:65:eb:65:05:a0:
76:3b:f3:5c:e9:00:5c:5a:2c:d3:23:4f:61:1b:84:0b:68:36:
0a:44:a4:16:12:06:b7:2e:a1:f5:66:0c:b4:04:c2:51:b1:2b:
65:cc:64:e5:73:e3:53:6c:4e:ec:3e:e2:7d:9e:08:81:75:2e:
32:93:5f:9f:af:7a:ad:3a:5b:19:15:38:a5:fc:c7:35:12:8b:
dc:d5:7d:16:0f:6b:cc:74:2d:37:62:98:c9:5a:15:1b:0a:de:
67:f6:aa:0e:25:6d:97:3c:2e:88:e8:26:38:5e:94:6e:bd:cc:
1c:e1:09:57:d2:5f:ed:2c:d6:24:e0:50:c8:8d:ed:bb:96:d6:
91:64:45:de:9a:7c:cf:22:d2:8e:56:97:23:98:55:6f:5a:74:
bb:eb:d3:f7:2b:2f:88:31:40:f0:e1:58:b3:57:22:1c:59:d8:
6e:90:e8:25:1c:f1:62:8c:dd:b0:02:ab:16:ac:ae:79:ab:6a:
27:8e:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:31 2025 by rpki-client