Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/O5xBU8VL53qxjYE82WOYcODpGTk.roa
File: O5xBU8VL53qxjYE82WOYcODpGTk.roa (raw, json)
Hash identifier: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=
Subject key identifier: 3B:9C:41:53:C5:4B:E7:7A:B1:8D:81:3C:D9:63:98:70:E0:E9:19:39
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 01942826211460A40269058B0115C5AFE4DE
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/O5xBU8VL53qxjYE82WOYcODpGTk.roa
Signing time: Thu 02 Jan 2025 17:52:54 +0000
ROA not before: Thu 02 Jan 2025 17:52:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196949
IP address blocks: 31.200.224.0/20 maxlen: 20
31.200.224.0/23 maxlen: 23
31.200.226.0/23 maxlen: 23
31.200.228.0/23 maxlen: 23
31.200.230.0/23 maxlen: 23
31.200.232.0/23 maxlen: 23
31.200.234.0/23 maxlen: 23
31.200.236.0/23 maxlen: 23
31.200.238.0/23 maxlen: 23
37.200.72.0/21 maxlen: 21
37.200.72.0/23 maxlen: 23
37.200.74.0/23 maxlen: 23
37.200.76.0/23 maxlen: 23
37.200.78.0/23 maxlen: 23
45.146.152.0/22 maxlen: 22
109.110.32.0/19 maxlen: 19
109.110.32.0/23 maxlen: 23
109.110.34.0/23 maxlen: 23
109.110.36.0/23 maxlen: 23
109.110.38.0/23 maxlen: 23
109.110.40.0/23 maxlen: 23
109.110.42.0/23 maxlen: 23
109.110.44.0/23 maxlen: 23
109.110.46.0/23 maxlen: 23
109.110.48.0/23 maxlen: 23
109.110.50.0/23 maxlen: 23
109.110.52.0/23 maxlen: 23
109.110.54.0/23 maxlen: 23
109.110.56.0/23 maxlen: 23
109.110.58.0/23 maxlen: 23
109.110.60.0/23 maxlen: 23
109.110.62.0/23 maxlen: 23
217.150.72.0/21 maxlen: 21
217.150.72.0/23 maxlen: 23
217.150.74.0/23 maxlen: 23
217.150.76.0/23 maxlen: 23
217.150.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:21:14:60:a4:02:69:05:8b:01:15:c5:af:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Jan 2 17:52:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9c4153c54be77ab18d813cd9639870e0e91939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:f8:7d:eb:1b:51:cc:67:e4:c2:aa:bc:e3:
c3:70:7e:de:1a:05:66:5e:2f:20:d6:37:3b:df:1b:
ee:dc:c8:8d:a7:70:eb:8c:66:da:78:c9:74:93:d5:
f3:e1:83:5c:c5:48:33:fe:0b:16:d5:9f:3a:11:37:
9e:75:0b:13:30:19:c9:38:dd:af:14:74:6d:53:04:
18:0b:40:c8:41:c6:90:17:8a:3d:4b:3c:cf:32:34:
23:fa:8e:21:c4:9b:c5:f1:d5:11:f3:4d:aa:5c:02:
db:28:71:84:21:2d:a4:e1:aa:cf:7c:6b:7a:2f:75:
8c:10:b7:b3:79:03:89:a2:a0:3f:1c:94:f0:91:a3:
21:2c:a6:04:0e:53:57:24:76:f9:2c:d1:cb:47:41:
bc:7f:15:1f:e4:f9:c1:25:b3:cd:f4:0f:43:d1:7f:
8d:9a:36:c8:01:29:24:d0:f3:d4:6f:85:b9:4d:6e:
50:8e:4d:3c:49:f4:b7:da:25:fa:c4:33:c8:59:3b:
2e:9c:be:42:c5:77:12:a7:f1:3f:c2:2b:b3:bf:0e:
25:3d:e9:2d:35:97:64:3f:cb:46:03:43:43:c6:f5:
5d:d3:b8:25:f8:ec:85:28:12:0b:38:f1:03:3b:f7:
a3:a8:da:23:d5:98:6d:c9:af:98:8f:2b:8d:8d:dc:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9C:41:53:C5:4B:E7:7A:B1:8D:81:3C:D9:63:98:70:E0:E9:19:39
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/O5xBU8VL53qxjYE82WOYcODpGTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.224.0/20
37.200.72.0/21
45.146.152.0/22
109.110.32.0/19
217.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:50:18:39:cb:92:2e:8c:d0:e7:80:08:00:84:0e:5c:88:71:
c6:24:bc:69:53:17:a8:39:b9:4e:6e:4e:b7:19:b5:b5:d2:77:
0d:25:71:8e:55:5e:e0:80:d9:1e:eb:78:66:0f:5e:19:58:17:
7a:e6:7d:78:ec:eb:da:7a:63:26:01:f8:3f:26:06:23:5b:e9:
94:c6:cf:a8:dc:c5:f2:42:7c:f6:5c:9b:c0:69:05:83:bd:ec:
3e:64:87:7e:bb:77:34:6a:cf:aa:5f:93:69:cb:25:82:85:6c:
c0:e3:04:c4:df:5d:f8:d7:8d:27:76:2c:d6:59:c4:59:16:82:
27:a6:f9:8e:e0:ba:ad:24:1b:7e:3a:8f:1e:f9:81:67:8d:df:
02:aa:85:49:65:10:43:75:da:06:6c:2a:82:8f:6a:a5:b8:49:
69:e0:c7:25:b0:0c:b8:86:35:c1:01:06:8b:e9:71:8f:19:5d:
c2:f3:5f:f9:1f:5a:8f:d2:ab:83:ed:be:c9:7f:39:26:00:ef:
e8:0f:e0:51:4f:14:0f:80:7a:56:05:95:c4:57:68:87:13:9e:
cb:3f:28:c2:77:fc:55:f3:4a:5f:83:6a:da:23:34:38:1f:3c:
f5:a1:7e:cf:34:ca:e4:43:99:df:8e:fd:62:75:34:c4:5a:64:
87:24:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:52 2025 by rpki-client