Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/V_5GNTO2aiCCgSkRzPrk70fSjx4.roa
File: V_5GNTO2aiCCgSkRzPrk70fSjx4.roa (raw, json)
Hash identifier: csRQc0CBQ069AeAK4bGAyCBc0I/q7AiCAh/zavyeShg=
Subject key identifier: 57:FE:46:35:33:B6:6A:20:82:81:29:11:CC:FA:E4:EF:47:D2:8F:1E
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0195226E83E0F72E5A1A64884B8932A81FE9
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/V_5GNTO2aiCCgSkRzPrk70fSjx4.roa
Signing time: Thu 20 Feb 2025 08:17:02 +0000
ROA not before: Thu 20 Feb 2025 08:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9141
IP address blocks: 31.178.0.0/17 maxlen: 17
31.178.128.0/17 maxlen: 17
31.179.0.0/17 maxlen: 17
31.179.128.0/17 maxlen: 24
83.175.176.0/20 maxlen: 20
85.222.0.0/19 maxlen: 19
85.222.32.0/19 maxlen: 19
85.222.52.0/22 maxlen: 22
85.222.64.0/19 maxlen: 19
85.222.96.0/19 maxlen: 19
89.68.0.0/14 maxlen: 14
89.70.108.0/22 maxlen: 22
89.72.0.0/14 maxlen: 14
89.72.228.0/22 maxlen: 22
89.77.216.0/22 maxlen: 22
195.34.210.0/23 maxlen: 23
217.119.64.0/20 maxlen: 20
2a02:a300::/29 maxlen: 29
2a02:a308::/29 maxlen: 29
2a02:a310::/32 maxlen: 32
2a02:a315:e500::/40 maxlen: 40
2a02:a316:e100::/40 maxlen: 40
2a02:a319:6000::/40 maxlen: 40
2a02:a31b:c400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:6e:83:e0:f7:2e:5a:1a:64:88:4b:89:32:a8:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Feb 20 08:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57fe463533b66a2082812911ccfae4ef47d28f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:c0:ec:3c:0b:7c:c5:b9:2f:5d:78:98:d0:
71:d2:e0:5d:40:b0:a1:4b:16:23:c6:e7:a3:62:55:
1b:8a:c7:20:ba:7e:57:5c:4c:5a:87:aa:b1:b9:23:
af:a5:46:a7:e2:8d:d2:61:f6:55:06:cb:8a:f8:e0:
a0:c7:44:a4:52:95:2e:c2:c2:95:ec:b4:e8:2f:52:
e3:1d:2b:ed:f0:aa:b6:ac:cf:95:55:ab:46:4a:fe:
3a:64:94:72:2e:71:bb:9f:70:d9:49:a7:81:aa:0e:
30:42:c0:90:ed:11:f7:ae:0a:81:27:be:4e:41:f2:
ee:39:22:b2:e8:21:bc:30:1c:a9:be:f7:20:77:8e:
69:70:5a:7a:61:b3:f6:84:33:15:1e:48:0c:10:aa:
6c:2c:3f:2c:d4:65:ed:80:94:d1:8b:2c:9d:f3:45:
82:3a:56:e5:2f:cc:49:b3:91:e7:90:48:4d:2d:ed:
40:13:a9:e0:a3:2c:1e:85:47:c6:2d:49:82:ee:62:
75:df:bd:11:00:ae:17:37:a4:5e:66:8d:dc:82:eb:
6d:63:50:76:7a:3d:bf:48:ae:49:77:4c:66:7a:31:
dd:ad:a2:fd:a9:66:f4:a1:11:43:6d:21:a9:2c:af:
1e:97:b3:7b:3e:ef:ba:bf:88:3a:fe:dc:06:54:be:
6d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FE:46:35:33:B6:6A:20:82:81:29:11:CC:FA:E4:EF:47:D2:8F:1E
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/V_5GNTO2aiCCgSkRzPrk70fSjx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
83.175.176.0/20
85.222.0.0/17
89.68.0.0-89.75.255.255
89.77.216.0/22
195.34.210.0/23
217.119.64.0/20
IPv6:
2a02:a300::-2a02:a310:ffff:ffff:ffff:ffff:ffff:ffff
2a02:a315:e500::/40
2a02:a316:e100::/40
2a02:a319:6000::/40
2a02:a31b:c400::/40
Signature Algorithm: sha256WithRSAEncryption
9c:6e:74:7d:49:d1:cf:96:b8:cb:a4:a7:24:5e:6f:9a:04:ec:
0a:58:4e:81:38:45:3b:30:02:71:53:57:25:7a:cc:be:60:a3:
59:30:df:22:31:e5:c2:57:79:e2:e7:64:4f:47:84:80:2c:c8:
9e:fe:6e:b4:ef:8f:98:71:11:56:08:cc:5f:ba:ba:fd:6e:27:
61:39:dd:75:ec:ca:a4:e4:b6:d8:52:9f:ed:ac:ba:e7:be:9e:
78:18:0a:e6:93:c0:5d:ee:c8:3e:20:20:c6:da:72:f4:78:31:
d9:08:e2:88:3b:2b:65:a9:7a:f4:c8:c9:b6:a8:b1:98:c2:66:
7d:02:34:95:b2:2d:27:8d:6e:02:8e:ba:58:ed:4c:14:b4:a3:
bb:70:4d:d2:05:3d:c8:6f:28:11:6f:37:d4:e7:bf:84:7c:e1:
2c:32:3e:ed:3f:f1:e1:88:b4:1d:eb:d2:0f:40:3f:9b:d4:93:
3f:95:a5:d7:bb:f1:34:dd:48:e8:7f:dd:7c:dd:26:88:9f:24:
60:c9:f1:c5:9b:3d:1e:5b:7f:7f:39:df:73:72:36:28:11:94:
9c:b2:fe:bc:74:0b:56:14:18:a9:11:98:cb:7b:f3:86:c0:5b:
fb:eb:55:04:4d:23:57:7c:ea:70:d5:94:b1:42:21:7a:21:97:
ed:ee:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:20 2025 by rpki-client