Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8zwi4qm4vUKUQ_jfs_tXqDL1JO4.roa
File: 8zwi4qm4vUKUQ_jfs_tXqDL1JO4.roa (raw, json)
Hash identifier: xma2GuA8DdrkQSohpCNQNjPUjw8s7LQb8I2vkA6vQ2I=
Subject key identifier: F3:3C:22:E2:A9:B8:BD:42:94:43:F8:DF:B3:FB:57:A8:32:F5:24:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195C1E0305D4599E1059A643BF46DEA1F72
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8zwi4qm4vUKUQ_jfs_tXqDL1JO4.roa
Signing time: Sun 23 Mar 2025 07:20:49 +0000
ROA not before: Sun 23 Mar 2025 07:20:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.77.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.58.86.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c1:e0:30:5d:45:99:e1:05:9a:64:3b:f4:6d:ea:1f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 23 07:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f33c22e2a9b8bd429443f8dfb3fb57a832f524ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:4f:25:6f:35:23:60:6d:ef:07:5e:ba:3e:
3c:c0:c5:1a:70:51:ea:46:14:09:24:f1:7a:52:c3:
4d:5b:6c:3b:20:50:9f:75:73:3a:aa:1d:23:2a:6f:
e8:55:cd:76:43:62:60:e9:8c:eb:35:e5:8f:7e:bb:
be:65:5d:77:97:fa:bf:81:8f:f5:a4:74:7f:f0:bc:
fc:e9:ba:d4:04:a3:16:0c:34:5a:6a:7a:9b:11:0f:
d3:16:9d:e3:7d:c2:b0:03:de:59:83:82:76:b8:0b:
4a:db:87:f0:2f:05:d1:9f:b1:fc:d2:3b:98:2f:eb:
8b:1f:22:e9:37:6d:cf:d2:ee:f6:63:b7:05:67:dd:
08:0d:45:38:83:3f:ba:33:e8:d8:69:7b:c3:bf:c4:
6e:5a:8d:13:76:a9:34:08:25:e8:b1:19:9a:87:25:
e6:72:26:23:3b:6b:ed:f9:50:21:ad:cd:ab:9c:ac:
7b:b2:76:fc:e8:34:21:0e:fb:ec:96:5d:3b:05:86:
29:10:b4:63:28:dd:66:cd:47:c7:83:71:ee:53:e8:
df:cf:8d:db:05:54:51:af:1d:45:f2:9f:0c:0d:5f:
a3:f2:86:21:f8:b4:d1:c6:52:bb:88:a5:92:0b:5b:
26:b2:b0:45:81:26:e8:28:a0:de:07:7a:f7:0c:69:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3C:22:E2:A9:B8:BD:42:94:43:F8:DF:B3:FB:57:A8:32:F5:24:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8zwi4qm4vUKUQ_jfs_tXqDL1JO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.77.0/24
31.57.118.0/24
31.57.199.0/24
31.58.86.0/24
31.59.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a6:70:51:aa:d6:14:9c:c8:23:f3:57:0b:7e:12:26:07:89:
7e:f9:fe:70:73:c0:96:ba:9c:3b:66:2b:9c:fc:16:d9:35:ef:
ae:32:74:34:5a:d8:23:fa:72:8a:22:bf:6b:e2:d7:75:6d:09:
ce:11:05:9a:6e:e7:db:56:38:a7:89:ed:0f:45:32:1a:25:19:
fd:0a:8b:84:65:cb:83:4e:df:99:59:37:b9:f2:37:9d:98:7c:
a5:fa:6e:69:ac:b2:8a:ef:e6:09:f6:5d:01:ae:67:15:3d:5a:
f8:18:94:c0:79:3c:1c:60:a1:75:e5:88:89:5d:66:5c:57:73:
ff:79:77:72:02:24:80:e4:23:54:46:ae:b0:27:74:7d:8b:c8:
31:0f:47:d7:cf:48:f5:bc:ae:ac:c0:b9:11:f0:aa:bb:a5:c5:
c3:1b:7c:72:c0:37:72:c9:65:d0:39:cc:4a:21:08:06:54:1a:
02:f4:0a:b2:95:9e:6b:52:44:85:55:1e:77:ae:fb:66:31:83:
b5:7c:0a:45:3b:dd:29:52:d0:d0:15:e3:a8:61:c0:84:e0:68:
b9:9e:bf:95:ae:4b:0f:80:d9:fb:a5:b2:57:4e:e2:e1:28:24:
0e:fa:1b:30:61:cd:98:8c:00:7c:40:7d:dc:25:ce:5b:b2:1e:
2d:00:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:54 2025 by rpki-client