Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3KkVFS5E_0OXY2I0JPm831xlJRY.roa
File: 3KkVFS5E_0OXY2I0JPm831xlJRY.roa (raw, json)
Hash identifier: O3hSmLSCj4vhYoS62smX0V+VSwAD/D1TNqXoWq8n6pI=
Subject key identifier: DC:A9:15:15:2E:44:FF:43:97:63:62:34:24:F9:BC:DF:5C:65:25:16
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 019424B3CBE6910A9E86DAB8FE528C4ACB5A
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3KkVFS5E_0OXY2I0JPm831xlJRY.roa
Signing time: Thu 02 Jan 2025 01:49:10 +0000
ROA not before: Thu 02 Jan 2025 01:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.32.0/24 maxlen: 24
31.210.33.0/24 maxlen: 24
31.210.56.0/24 maxlen: 24
31.210.57.0/24 maxlen: 24
31.210.58.0/24 maxlen: 24
31.210.59.0/24 maxlen: 24
31.210.60.0/24 maxlen: 24
31.210.61.0/24 maxlen: 32
77.92.128.0/24 maxlen: 24
77.92.129.0/24 maxlen: 24
77.92.132.0/24 maxlen: 24
77.92.133.0/24 maxlen: 32
77.92.134.0/24 maxlen: 24
77.92.135.0/24 maxlen: 24
77.92.136.0/24 maxlen: 24
77.92.137.0/24 maxlen: 24
77.92.138.0/24 maxlen: 24
77.92.139.0/24 maxlen: 24
77.92.140.0/24 maxlen: 32
77.92.141.0/24 maxlen: 24
77.92.149.0/24 maxlen: 24
77.92.155.0/24 maxlen: 32
77.92.156.0/24 maxlen: 24
77.92.157.0/24 maxlen: 32
77.92.158.0/24 maxlen: 24
77.92.159.0/24 maxlen: 24
78.135.79.0/24 maxlen: 24
78.135.108.0/24 maxlen: 32
78.135.113.0/24 maxlen: 32
78.135.114.0/24 maxlen: 32
78.135.116.0/24 maxlen: 24
188.132.134.0/24 maxlen: 24
188.132.135.0/24 maxlen: 32
188.132.142.0/24 maxlen: 24
188.132.147.0/24 maxlen: 32
188.132.148.0/24 maxlen: 24
188.132.157.0/24 maxlen: 24
188.132.158.0/24 maxlen: 32
188.132.172.0/24 maxlen: 24
188.132.175.0/24 maxlen: 24
188.132.176.0/24 maxlen: 32
188.132.180.0/24 maxlen: 24
188.132.194.0/24 maxlen: 24
188.132.204.0/24 maxlen: 32
188.132.205.0/24 maxlen: 32
188.132.244.0/24 maxlen: 32
188.132.245.0/24 maxlen: 24
188.132.246.0/24 maxlen: 24
188.132.252.0/24 maxlen: 24
188.132.253.0/24 maxlen: 24
188.132.254.0/24 maxlen: 24
188.132.255.0/24 maxlen: 24
212.68.32.0/24 maxlen: 24
212.68.33.0/24 maxlen: 32
212.68.40.0/24 maxlen: 32
212.68.41.0/24 maxlen: 32
212.68.42.0/24 maxlen: 32
212.68.43.0/24 maxlen: 32
212.68.44.0/24 maxlen: 24
212.68.45.0/24 maxlen: 32
212.68.46.0/24 maxlen: 32
212.68.50.0/24 maxlen: 32
212.68.51.0/24 maxlen: 24
212.68.57.0/24 maxlen: 32
212.68.61.0/24 maxlen: 32
2a02:26b0::/32 maxlen: 32
2a02:26b0:8000::/48 maxlen: 48
2a02:26b0:8001::/48 maxlen: 48
2a02:26b0:800e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cb:e6:91:0a:9e:86:da:b8:fe:52:8c:4a:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca915152e44ff439763623424f9bcdf5c652516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:29:08:57:1d:d3:b1:37:f7:4d:95:32:4e:96:
dc:94:3e:15:ce:79:7e:39:0c:66:db:e4:71:17:ae:
4a:29:db:f9:31:06:a3:ad:9d:97:55:5b:dc:ef:79:
83:18:26:25:ea:be:d5:b6:d7:ff:2d:4f:68:f9:1c:
bc:93:7e:d5:64:2c:13:b9:da:3c:0b:34:63:48:c7:
fd:1e:b8:6a:24:1c:16:47:91:7b:eb:fc:f7:6a:32:
9e:b0:e8:85:3f:f8:bb:b2:31:20:9f:d2:58:5e:46:
a9:1b:85:d4:d1:d9:39:e3:c8:f3:69:f3:99:db:f4:
77:e8:ca:d4:67:af:60:fd:94:b8:cf:e6:d3:dd:55:
52:fa:75:ee:68:3d:16:cd:c1:f3:ce:90:57:e2:38:
be:64:1c:c4:10:90:95:a5:10:6d:ef:3d:0c:ad:b2:
b4:97:58:aa:07:06:d3:b3:25:61:d7:5e:1d:ce:50:
38:19:b9:3e:b3:25:f7:a2:1a:07:18:0e:87:ff:b3:
1a:c6:68:47:55:a0:7e:5b:e1:ef:54:ce:af:62:a1:
15:30:2d:9d:a3:41:3c:74:ae:60:bd:12:90:6b:71:
df:32:00:d8:02:47:6f:88:55:3e:e8:22:19:0d:15:
a2:1e:dc:0e:23:98:44:69:fd:e7:4c:39:75:27:8d:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A9:15:15:2E:44:FF:43:97:63:62:34:24:F9:BC:DF:5C:65:25:16
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/3KkVFS5E_0OXY2I0JPm831xlJRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.32.0/23
31.210.56.0-31.210.61.255
77.92.128.0/23
77.92.132.0-77.92.141.255
77.92.149.0/24
77.92.155.0-77.92.159.255
78.135.79.0/24
78.135.108.0/24
78.135.113.0-78.135.114.255
78.135.116.0/24
188.132.134.0/23
188.132.142.0/24
188.132.147.0-188.132.148.255
188.132.157.0-188.132.158.255
188.132.172.0/24
188.132.175.0-188.132.176.255
188.132.180.0/24
188.132.194.0/24
188.132.204.0/23
188.132.244.0-188.132.246.255
188.132.252.0/22
212.68.32.0/23
212.68.40.0-212.68.46.255
212.68.50.0/23
212.68.57.0/24
212.68.61.0/24
IPv6:
2a02:26b0::/32
Signature Algorithm: sha256WithRSAEncryption
09:d1:72:4c:47:49:31:40:f1:7c:12:01:01:5c:30:1d:1f:84:
92:a6:f3:43:1e:d6:0a:3a:90:62:36:f2:61:0c:07:ec:e6:c5:
0b:62:5e:b6:ef:a7:70:1f:29:ed:74:47:48:e2:33:f0:e8:cd:
e4:b6:af:c1:e9:74:ab:fa:84:b5:54:8c:ce:1b:62:11:f1:7b:
ae:cf:95:67:1e:9a:47:69:31:78:0b:f0:ce:ce:cd:08:fc:b4:
7a:44:0c:6b:78:6b:a8:15:b2:4b:32:ca:02:09:f4:d8:5f:61:
61:65:71:33:b3:38:7e:31:c4:3a:d3:8d:fd:b4:13:5b:73:d8:
cf:03:0b:44:78:bb:15:e3:09:00:bb:10:30:1c:07:f8:6d:f5:
f4:1e:90:1a:41:65:69:d9:58:32:86:43:0f:ab:77:a4:9b:0a:
53:06:31:83:83:a5:31:52:73:8d:71:db:5b:f9:40:c0:e8:45:
c1:47:97:fe:40:22:7a:5f:c4:31:f9:de:91:ba:c9:b5:c6:18:
29:8b:d5:aa:ef:88:4d:07:d0:85:a3:b4:4a:24:19:64:c7:35:
a6:62:80:fa:13:3d:26:f1:e4:73:5c:ad:10:ad:e8:b2:19:25:
65:90:76:9a:c4:5f:fe:58:95:2b:81:6f:aa:77:41:dc:9f:2e:
46:c2:f0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:35:25 2025 by rpki-client