Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/Ej1aJMtEaUsf31r33a8meVTKaMM.roa
File: Ej1aJMtEaUsf31r33a8meVTKaMM.roa (raw, json)
Hash identifier: Gz1wbyymYY+RBy8aeMOwOe+QM7WHCcn8raUIMs60hhM=
Subject key identifier: 12:3D:5A:24:CB:44:69:4B:1F:DF:5A:F7:DD:AF:26:79:54:CA:68:C3
Certificate issuer: /CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Certificate serial: 0194266B3BAA626EB19C8CBBC5C69FB4F7D4
Authority key identifier: C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/Ej1aJMtEaUsf31r33a8meVTKaMM.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34555
IP address blocks: 31.24.216.0/24 maxlen: 24
31.24.217.0/24 maxlen: 24
31.24.218.0/24 maxlen: 24
31.24.219.0/24 maxlen: 24
31.24.220.0/24 maxlen: 24
31.24.221.0/24 maxlen: 24
31.24.222.0/24 maxlen: 24
31.24.223.0/24 maxlen: 24
185.4.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3b:aa:62:6e:b1:9c:8c:bb:c5:c6:9f:b4:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6135e4acf96139ce5ff2cfdd95f55a8176d7324
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123d5a24cb44694b1fdf5af7ddaf267954ca68c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:2a:e5:70:26:01:ee:b1:83:eb:86:5c:9a:
5c:29:63:4c:b6:12:53:0d:37:61:42:8e:f6:67:17:
0c:3a:3d:d8:9d:be:fa:c0:f1:ce:c1:4e:d7:6c:ab:
fc:b7:cb:f6:7d:a7:15:76:ab:bb:77:19:c6:21:9c:
6e:57:ec:61:d2:a7:0a:c2:87:4d:38:a3:01:b0:3c:
17:79:60:a9:b7:79:a7:de:16:f1:7c:f9:a8:db:6b:
cf:67:a3:a7:59:ab:73:ae:69:45:99:20:60:b5:e5:
aa:61:d7:ab:a9:85:e4:17:bd:ad:a7:ad:1c:16:4f:
30:a3:7e:11:fa:69:0e:03:13:ac:58:88:82:52:49:
dc:e9:82:c5:12:56:a1:59:5a:22:8d:c6:a0:b7:40:
a6:98:06:83:6f:34:fc:76:e3:18:17:78:97:aa:94:
85:fc:74:96:ee:20:74:21:b2:d4:a2:01:ce:c2:ce:
95:9a:c5:76:df:e1:3e:d2:4c:c3:ee:ca:c8:62:26:
8a:11:04:34:18:72:ea:f4:71:b3:8b:32:21:4b:05:
87:89:df:1d:a2:21:a7:5e:9a:a3:eb:cb:7f:bc:1c:
e4:f2:26:00:fd:f7:bb:e4:c5:a4:0f:da:85:7e:64:
b5:6f:25:40:cf:ad:68:2f:d7:ed:b6:42:72:ff:7e:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:5A:24:CB:44:69:4B:1F:DF:5A:F7:DD:AF:26:79:54:CA:68:C3
X509v3 Authority Key Identifier:
keyid:C6:13:5E:4A:CF:96:13:9C:E5:FF:2C:FD:D9:5F:55:A8:17:6D:73:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhNeSs-WE5zl_yz92V9VqBdtcyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/Ej1aJMtEaUsf31r33a8meVTKaMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6f6f0d-e6df-4f2b-80df-466b0cd8b75a/1/xhNeSs-WE5zl_yz92V9VqBdtcyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.216.0/21
185.4.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:0c:2b:11:10:c7:64:26:64:18:cf:e8:c1:2f:72:65:3f:9f:
55:e1:36:44:c0:cf:0e:55:bc:8f:d2:5b:68:6a:8f:e5:2f:5e:
a1:4a:64:28:77:6c:27:43:94:1d:61:4d:9d:73:22:70:ff:f3:
ea:55:fc:79:dd:8b:be:5d:4a:4f:d2:75:dc:96:02:0d:78:5f:
c7:77:b3:26:28:bc:6a:fe:b9:db:b5:da:cd:2e:21:a5:0c:ec:
f7:60:dc:a3:f0:1e:5d:62:06:9d:ab:3b:6c:9f:93:0e:03:52:
90:0f:6c:62:b5:43:a3:63:9d:a9:dd:33:94:99:6d:e5:f3:6f:
50:96:e1:5c:32:5a:6f:d3:b6:dc:79:75:87:0f:ab:24:c7:e1:
d8:68:df:a2:a6:43:7d:79:fa:c4:b9:6f:c6:5b:22:31:37:d4:
fe:a9:1f:1d:0c:bd:fa:59:55:46:71:22:c1:df:88:eb:04:2e:
f0:e3:cc:38:56:5a:b2:56:b5:96:d5:49:b0:c4:0b:d0:a4:e2:
28:2f:e8:82:e5:f8:33:95:99:b5:63:28:e7:29:64:49:c4:9a:
b8:15:d8:4d:93:03:be:8e:fe:9c:a1:5b:08:0a:14:ae:69:eb:
f7:39:1e:45:4a:1e:63:8d:d3:62:27:d3:7d:7e:74:f2:22:6c:
d3:2d:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:58 2025 by rpki-client