Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4FTppXxPA-mrWXJ5xhd9HWf4sqs.roa
File: 4FTppXxPA-mrWXJ5xhd9HWf4sqs.roa (raw, json)
Hash identifier: O58k7J/+Sx6z6nINrU0z5srGIuk5RYGwHbuQeJVfB3I=
Subject key identifier: E0:54:E9:A5:7C:4F:03:E9:AB:59:72:79:C6:17:7D:1D:67:F8:B2:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953E3397239B1C958527F0CC300DB86006
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4FTppXxPA-mrWXJ5xhd9HWf4sqs.roa
Signing time: Tue 25 Feb 2025 17:42:03 +0000
ROA not before: Tue 25 Feb 2025 17:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.1.0/24 maxlen: 24
31.56.144.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
31.57.231.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:33:97:23:9b:1c:95:85:27:f0:cc:30:0d:b8:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 17:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e054e9a57c4f03e9ab597279c6177d1d67f8b2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:2f:5f:f5:1f:84:6f:5e:20:14:83:b6:c7:
1e:df:d3:36:27:71:0a:53:d4:55:95:ce:b1:d9:ef:
a9:f5:9d:ad:94:34:d2:99:96:86:7b:39:3e:0e:9a:
23:8a:9c:8b:a4:be:fe:f9:3e:25:1a:c2:10:97:05:
79:b3:9b:b0:43:50:db:70:81:ab:25:93:5a:d8:74:
0b:3f:5f:ec:32:d3:85:16:8f:9b:04:5f:75:65:74:
5b:ff:a3:a8:60:5c:eb:28:8e:b7:c5:ad:41:99:c0:
34:c5:5e:65:0e:da:c7:ca:51:88:9b:4f:87:7f:ca:
ed:af:26:8f:cb:70:0f:f6:46:29:54:b8:b0:d4:15:
05:5b:32:c5:5c:af:ab:4d:a9:c8:7b:82:b6:0d:be:
6c:ff:9d:dd:d7:29:83:8d:fa:93:29:fc:90:9c:1f:
71:25:79:fd:3f:eb:db:00:72:1a:d2:63:eb:c8:67:
68:18:c0:0b:aa:f4:8e:49:1b:c8:6a:af:0c:1e:06:
8a:48:5c:3a:85:51:45:62:1c:83:5e:70:80:36:8c:
be:65:09:b9:47:5c:64:05:2e:f8:85:82:da:ea:12:
29:f0:f6:25:fc:b4:07:e6:0b:fc:c1:de:d4:a6:ad:
8b:09:5c:e9:af:29:e4:06:b7:f0:a2:4c:47:9f:21:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:E9:A5:7C:4F:03:E9:AB:59:72:79:C6:17:7D:1D:67:F8:B2:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4FTppXxPA-mrWXJ5xhd9HWf4sqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.1.0/24
31.56.144.0/24
31.57.144.0/24
31.57.231.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:53:1f:1a:bb:2c:3d:f3:7a:4b:f3:4b:06:87:ee:67:1b:4d:
e7:25:43:c8:19:8c:44:08:45:30:37:b6:4f:b7:d1:a7:da:78:
61:c7:12:5c:e0:b9:03:9d:3b:d0:22:e2:97:b2:62:f0:c4:38:
db:d1:cf:f1:ef:0a:97:8c:e7:85:38:49:9b:13:2a:ff:9b:01:
69:6d:9d:9d:31:69:0f:c4:d4:c6:7c:51:24:2a:ef:d1:f3:12:
b8:60:ad:45:00:15:7c:7b:e8:61:af:2b:fb:69:e0:6c:0d:6a:
e8:3e:51:20:fe:7f:eb:7e:cf:26:57:ce:b9:77:01:44:2a:82:
fd:eb:a7:5b:33:90:90:db:bd:63:40:df:42:4e:d5:26:e1:3b:
1b:ee:b6:0d:8d:c4:ec:4e:06:15:ce:98:cb:e9:2b:64:ba:6b:
e6:5d:70:48:3e:12:95:58:da:0c:49:1b:b2:1e:5e:88:99:28:
f1:3f:a0:4f:99:04:99:f4:43:96:71:5e:e5:39:da:8b:a2:50:
d3:61:c0:c7:b9:c0:8a:78:75:d0:5a:b8:af:de:18:a9:63:16:
a9:71:cc:c8:14:07:f6:cf:da:7e:b2:1c:3f:4a:c5:35:50:c3:
c8:79:0d:3b:4b:85:48:6c:22:e7:be:54:96:89:8e:f2:82:c0:
a7:c8:9d:ec
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZU+M5cjmxyVhSfwzDANuGAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjI1MTc0MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDU0ZTlhNTdjNGYwM2U5YWI1OTcyNzljNjE3N2QxZDY3ZjhiMmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmIvX/UfhG9eIBSDtsce39M2J3EK
U9RVlc6x2e+p9Z2tlDTSmZaGezk+DpojipyLpL7++T4lGsIQlwV5s5uwQ1DbcIGr
JZNa2HQLP1/sMtOFFo+bBF91ZXRb/6OoYFzrKI63xa1BmcA0xV5lDtrHylGIm0+H
f8rtryaPy3AP9kYpVLiw1BUFWzLFXK+rTanIe4K2Db5s/53d1ymDjfqTKfyQnB9x
JXn9P+vbAHIa0mPryGdoGMALqvSOSRvIaq8MHgaKSFw6hVFFYhyDXnCANoy+ZQm5
R1xkBS74hYLa6hIp8PYl/LQH5gv8wd7Upq2LCVzprynkBrfwokxHnyF8DwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOBU6aV8TwPpq1lyecYXfR1n+LKrMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNEZUcHBYeFBBLW1yV1hKNXhoZDlIV2Y0c3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzgBAwQA
HziQAwQAHzmQAwQAHznnAwQA2Tz9MA0GCSqGSIb3DQEBCwUAA4IBAQCNUx8auyw9
83pL80sGh+5nG03nJUPIGYxECEUwN7ZPt9Gn2nhhxxJc4LkDnTvQIuKXsmLwxDjb
0c/x7wqXjOeFOEmbEyr/mwFpbZ2dMWkPxNTGfFEkKu/R8xK4YK1FABV8e+hhryv7
aeBsDWroPlEg/n/rfs8mV865dwFEKoL966dbM5CQ271jQN9CTtUm4Tsb7rYNjcTs
TgYVzpjL6StkumvmXXBIPhKVWNoMSRuyHl6ImSjxP6BPmQSZ9EOWcV7lOdqLolDT
YcDHucCKeHXQWriv3hipYxapcczIFAf2z9p+shw/SsU1UMPIeQ07S4VIbCLnvlSW
iY7ygsCnyJ3s
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:39 2025 by rpki-client