Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/yujM9boXq2owCDALS6fBRuV-QS4.roa
File: yujM9boXq2owCDALS6fBRuV-QS4.roa (raw, json)
Hash identifier: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=
Subject key identifier: CA:E8:CC:F5:BA:17:AB:6A:30:08:30:0B:4B:A7:C1:46:E5:7E:41:2E
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 019425221B6E1EC99B657343605408D347E8
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/yujM9boXq2owCDALS6fBRuV-QS4.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33885
IP address blocks: 31.211.192.0/18 maxlen: 18
37.46.160.0/19 maxlen: 19
37.247.0.0/19 maxlen: 19
84.55.64.0/18 maxlen: 18
84.246.88.0/21 maxlen: 21
89.253.64.0/18 maxlen: 18
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
109.104.0.0/19 maxlen: 19
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
212.107.128.0/19 maxlen: 19
2a01:3b8::/32 maxlen: 32
2a01:3b8:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1b:6e:1e:c9:9b:65:73:43:60:54:08:d3:47:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae8ccf5ba17ab6a3008300b4ba7c146e57e412e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:5e:88:6e:d0:85:8a:29:92:35:d0:07:9d:
ea:0a:25:40:ad:c4:4e:02:d1:35:bf:8b:8c:2b:e6:
7c:1e:ab:89:d0:1d:3a:79:9c:03:b7:a7:61:ad:81:
e0:20:95:03:fc:24:6c:e2:1a:88:76:00:a4:98:7c:
5e:48:f8:41:21:0d:f5:61:f6:12:bf:9c:3b:2f:83:
8d:4e:29:c7:19:90:c0:13:08:d8:b3:1c:c7:7c:5d:
51:bd:06:a6:bd:01:f4:42:e0:f1:ee:cd:72:74:3a:
81:58:6e:a1:9b:99:bf:d1:f0:ea:4f:27:20:a7:df:
aa:fb:41:bc:24:77:e5:5a:cc:88:5b:c4:f3:cd:ca:
80:e3:ea:b2:95:95:7b:9a:27:29:c3:ff:01:04:0c:
fa:ff:c0:74:5e:8b:5b:5c:99:66:a6:bf:34:a1:da:
f7:8d:fa:a1:59:37:13:d8:bb:69:54:41:7a:41:55:
cf:9d:8e:26:96:b4:36:b8:3e:26:a1:57:75:7c:c8:
00:e5:2a:eb:7a:47:9d:05:be:0d:48:f6:9b:bb:00:
55:77:f0:1b:a8:a3:c4:c0:ea:56:7d:64:7e:c9:4a:
2d:67:85:2a:ad:75:8f:00:9c:10:6b:5e:a1:4f:b9:
04:0a:9a:89:e3:fd:96:e6:00:c9:bf:7c:05:7b:9b:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:CC:F5:BA:17:AB:6A:30:08:30:0B:4B:A7:C1:46:E5:7E:41:2E
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/yujM9boXq2owCDALS6fBRuV-QS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.192.0/18
37.46.160.0/19
37.247.0.0/19
84.55.64.0/18
84.246.88.0/21
89.253.64.0/18
92.244.0.0/19
94.137.96.0/19
109.104.0.0/19
178.78.192.0/18
185.86.100.0/22
212.107.128.0/19
IPv6:
2a01:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
01:79:fd:78:41:b5:fb:24:3a:d6:87:62:03:8f:48:d7:88:ff:
46:49:70:21:45:64:61:a4:7b:37:e9:d1:02:fc:30:b2:8d:44:
66:dd:fc:7f:84:78:45:8e:c8:09:b8:76:a5:22:25:c3:e5:87:
7c:c8:34:71:2d:2a:9e:b1:f4:a9:40:4e:22:8d:da:6a:d1:61:
a8:f8:9c:11:8d:86:d7:e9:4f:df:65:31:36:dc:2e:9d:b0:69:
67:e8:5d:93:0e:34:c4:08:fb:b7:61:d0:d1:cf:90:b7:9f:bc:
8f:d1:44:14:db:7f:9d:ee:b0:d2:b6:80:f7:35:d2:d7:b2:34:
16:24:6f:53:f8:28:94:12:fe:4e:93:7e:d2:23:61:70:b2:14:
01:9b:8e:99:e4:85:36:96:7f:1d:8f:73:52:bc:71:ea:95:13:
28:f5:13:f9:8e:01:34:da:a5:b5:31:4d:40:35:b7:46:0b:78:
11:fd:de:e7:f3:34:df:c7:cf:20:10:de:c7:b1:1d:c6:6f:eb:
ad:45:4f:57:2b:d4:39:2a:85:6f:7f:a9:1b:e3:69:42:b0:84:
5f:ad:1f:b4:40:9a:99:ac:8b:ed:9f:cf:83:b2:da:bd:8e:6f:
17:51:0d:6b:b6:eb:a7:1e:4c:48:01:61:3f:a4:95:fe:1d:3b:
f3:e3:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:35 2025 by rpki-client