Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TMfZNtvZ7xVGscTsMI3TJXeWyTA.roa
File: TMfZNtvZ7xVGscTsMI3TJXeWyTA.roa (raw, json)
Hash identifier: YwXKaBVG+21zYVkbME/nsE6ZKQMzSTwoibXH7sP0SCk=
Subject key identifier: 4C:C7:D9:36:DB:D9:EF:15:46:B1:C4:EC:30:8D:D3:25:77:96:C9:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955B9A669D489235E5DAB8A5C9444D95E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TMfZNtvZ7xVGscTsMI3TJXeWyTA.roa
Signing time: Mon 03 Mar 2025 10:43:20 +0000
ROA not before: Mon 03 Mar 2025 10:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.8.0/21 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.32.0/21 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:9a:66:9d:48:92:35:e5:da:b8:a5:c9:44:4d:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 10:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cc7d936dbd9ef1546b1c4ec308dd3257796c930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:92:c3:0c:8b:70:c5:94:e5:45:28:0d:1e:
42:72:cf:1f:ac:08:4e:7e:9a:d2:58:10:9f:0f:f1:
26:c1:3e:88:60:db:5e:4e:e1:3e:74:57:3b:37:ab:
bd:e1:d9:62:0b:62:ec:54:b3:08:40:ea:84:22:08:
ac:78:b7:eb:83:02:b2:46:db:ac:73:97:a6:91:7a:
95:ab:a8:fe:ad:32:d6:96:f0:02:93:d4:1f:19:01:
bb:21:e6:68:b4:3d:08:dd:87:a2:30:62:88:30:4c:
f0:03:d3:19:5e:14:a7:d1:95:f0:5d:29:f3:53:b3:
34:27:69:da:56:bd:ae:63:7d:c7:17:a0:2e:e8:46:
98:46:b3:c0:d8:cd:46:40:b5:aa:f2:2f:68:64:bc:
8c:c7:58:c5:12:d3:49:51:10:ca:8e:af:80:f6:5a:
9b:c6:eb:8b:ef:1c:12:56:e9:72:66:8e:f3:8c:90:
5a:31:2b:1d:6b:9e:4d:20:8e:5e:46:5f:d3:ac:92:
74:4b:0a:f3:a4:1d:13:78:cf:9d:e5:06:a7:85:d7:
11:20:cf:5d:11:da:b2:32:73:ac:d3:f4:4c:e0:f3:
29:7e:9e:bc:b5:18:63:00:e6:ce:e1:e2:19:f1:65:
e5:16:9a:4a:1d:ba:85:15:f2:1d:58:6c:b4:fc:fb:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:D9:36:DB:D9:EF:15:46:B1:C4:EC:30:8D:D3:25:77:96:C9:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TMfZNtvZ7xVGscTsMI3TJXeWyTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
217.60.0.0/20
217.60.24.0/22
217.60.32.0/21
217.60.44.0/22
217.60.56.0/21
Signature Algorithm: sha256WithRSAEncryption
21:c9:22:03:ca:2f:10:1e:b6:d1:ab:c5:44:00:52:00:8b:d1:
95:6e:ca:a8:a3:86:d3:52:43:d4:e4:61:6f:6a:23:e0:94:f4:
06:59:0f:f1:78:d1:44:36:a0:d1:a2:d3:44:2e:86:d6:42:8a:
74:ae:b0:14:4e:71:5f:7e:3d:aa:98:27:9f:75:29:ce:6a:44:
29:43:f3:80:d9:28:8a:ea:22:80:8b:7c:c0:87:b6:1e:e9:b9:
48:95:91:9f:b9:32:bf:89:01:bc:61:e7:6c:e8:c4:58:46:ca:
35:7e:b3:f9:a1:85:7b:3b:b1:8d:fd:23:91:18:62:f6:66:da:
a5:16:dc:33:17:8b:4f:4a:8a:db:84:6c:1e:af:37:e3:16:6e:
a5:e4:20:9f:d3:41:16:62:19:f6:ca:57:db:52:04:9b:d6:9d:
16:9b:86:cc:2e:0f:d0:ac:e1:48:47:da:ab:c3:9e:a7:a0:dd:
f6:95:98:37:65:ba:10:62:38:96:78:a7:c9:d5:6a:ca:fa:a9:
32:6a:4d:0c:2a:cb:ef:53:f2:ec:6d:42:52:89:de:c2:cc:68:
ba:a0:20:5e:05:ff:0b:c4:4c:99:50:a8:a5:cc:f8:dc:81:f8:
3b:f4:6c:8b:aa:e3:de:ec:0a:46:b2:98:8e:88:40:72:c3:56:
58:f5:ae:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:47 2025 by rpki-client