Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0_YcVf9zE2Np654ebKy0CITSF0A.roa
File: 0_YcVf9zE2Np654ebKy0CITSF0A.roa (raw, json)
Hash identifier: Mz11WbPu5hCxFNX3P6VZpdWhVrPIjS52TZdj6WM2o/k=
Subject key identifier: D3:F6:1C:55:FF:73:13:63:69:EB:9E:1E:6C:AC:B4:08:84:D2:17:40
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 01948301478ACFDAB01DDEEB1F5602204585
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0_YcVf9zE2Np654ebKy0CITSF0A.roa
Signing time: Mon 20 Jan 2025 09:18:06 +0000
ROA not before: Mon 20 Jan 2025 09:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.14.65.0/24 maxlen: 24
86.104.0.0/24 maxlen: 24
86.104.1.0/24 maxlen: 24
86.104.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:01:47:8a:cf:da:b0:1d:de:eb:1f:56:02:20:45:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 20 09:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3f61c55ff73136369eb9e1e6cacb40884d21740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:88:7b:b3:78:9b:c3:4e:a9:b3:e9:b9:42:
1b:1c:09:df:d4:08:1a:f8:2e:25:ea:4e:fd:5c:a1:
46:a2:3f:79:7b:c0:5a:a9:54:25:4a:a5:71:dd:41:
22:60:8b:8c:d5:d6:2b:e8:fd:49:d7:4c:3e:b9:ce:
87:91:da:90:5c:57:e6:80:c0:61:03:48:93:dd:e4:
23:58:dc:38:58:7b:ee:27:0e:5f:5d:a7:6a:6d:97:
52:56:b6:ea:26:e7:43:aa:e8:f0:0d:05:e9:6b:4c:
51:94:11:a6:d2:8b:f9:d7:0f:a3:a2:6e:ed:d7:92:
ca:73:76:74:a8:52:cf:16:52:64:9e:91:b8:a7:79:
95:6a:9d:3e:73:f7:0b:5f:54:1f:6a:7e:bf:7a:fb:
e3:75:ab:4e:4c:30:10:b0:4c:eb:c9:ea:fc:6b:05:
5e:44:77:e1:52:bd:1b:21:4e:10:46:74:25:1a:76:
53:c9:f2:e0:61:54:0a:84:87:22:70:d2:f7:90:1a:
82:dc:d8:74:29:03:52:bd:ef:13:33:d2:dc:c6:f6:
46:3f:c6:04:8e:fe:29:6e:36:c8:f6:08:83:a8:54:
c8:b5:eb:32:7d:74:82:0e:8d:dc:76:ed:3b:a3:7e:
e3:62:e3:71:24:9e:a5:32:62:52:92:f5:03:f9:99:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:1C:55:FF:73:13:63:69:EB:9E:1E:6C:AC:B4:08:84:D2:17:40
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0_YcVf9zE2Np654ebKy0CITSF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.65.0/24
86.104.0.0/23
86.104.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:82:32:53:ef:8f:74:49:cd:a0:fe:eb:21:da:a8:0d:d1:e6:
e1:65:29:78:b9:d0:cd:83:1e:54:7f:21:fe:8a:b8:9d:7c:11:
cb:3e:94:50:3a:4d:0d:e4:ea:a1:bd:42:cf:ff:3c:c0:5a:96:
86:56:ff:be:ef:13:ff:5f:54:62:f6:35:f3:58:7d:e5:1c:a6:
d0:e5:7d:0b:48:2f:92:2c:1c:84:6e:c5:15:9d:8b:66:0b:58:
a6:1b:8a:52:d2:d6:0e:4e:f6:e0:1c:9a:e1:9a:fa:3a:63:5b:
0a:a4:d7:dc:e8:a7:8f:a5:96:72:b3:f9:45:dc:55:65:b0:7e:
ec:14:d1:a0:05:33:1d:19:8f:7a:41:9d:fa:a3:b6:fe:61:39:
6e:9c:49:6d:08:d9:d6:88:65:0d:67:62:23:bb:e6:66:60:26:
fa:f3:51:30:ab:bf:8b:fe:cc:47:a7:e5:fd:f5:c7:f0:b1:1e:
54:96:aa:05:57:ad:f0:be:e3:50:6e:a7:c0:d9:1a:c9:ac:6e:
e5:88:65:7b:f3:07:de:0c:44:54:c7:db:68:7a:34:d6:7f:ce:
38:7e:ab:87:11:32:04:e3:68:c3:32:98:3f:b3:05:f8:db:da:
99:d2:4b:b8:0b:88:e2:6c:9c:0b:0f:41:33:b4:71:d5:57:71:
03:95:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:30 2025 by rpki-client