Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/Dlbvp3R98LlEu08WYGasx1T_LuI.roa
File: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (raw, json)
Hash identifier: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=
Subject key identifier: 0E:56:EF:A7:74:7D:F0:B9:44:BB:4F:16:60:66:AC:C7:54:FF:2E:E2
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0194228E2E51C24471B143A5E232A8935B89
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/Dlbvp3R98LlEu08WYGasx1T_LuI.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44051
IP address blocks: 31.172.81.0/24 maxlen: 24
31.172.82.0/24 maxlen: 24
79.133.42.0/24 maxlen: 24
185.26.96.0/22 maxlen: 24
212.224.112.0/24 maxlen: 24
212.224.113.0/24 maxlen: 24
212.224.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2e:51:c2:44:71:b1:43:a5:e2:32:a8:93:5b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e56efa7747df0b944bb4f166066acc754ff2ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:88:c7:72:9b:9c:10:3a:58:b9:0c:21:e2:
a0:e5:e2:f2:05:ce:da:4d:3b:8f:d3:bf:51:45:6d:
c3:2b:77:93:ec:f9:fa:1f:bf:32:d0:ae:f6:1f:e1:
8d:6f:90:60:60:e9:fe:e0:ff:49:63:69:94:85:41:
43:34:79:d5:3a:b8:c5:e9:ea:79:2d:34:b4:7c:fe:
7d:7e:ac:8e:25:d4:21:d3:aa:b7:19:dd:6a:ed:8b:
07:9f:8a:c0:f7:53:12:71:63:c7:66:aa:db:06:7b:
2f:c9:e2:95:78:8d:87:d2:33:c1:fc:f1:e4:cd:84:
d4:a4:70:ff:37:c0:eb:90:cf:df:a5:02:73:96:41:
76:7f:c8:3b:b5:f4:f8:4e:7a:e1:da:82:96:12:de:
db:36:5d:df:2d:45:9b:bf:7d:ea:40:24:0e:85:cd:
d1:7a:8e:83:3f:1a:7c:0c:60:f1:96:5d:bf:5c:e0:
b2:a7:71:eb:77:23:15:eb:11:86:86:2a:30:95:db:
88:08:1f:e3:e5:1f:2d:4b:40:63:c2:5d:3b:50:0f:
11:f3:85:25:24:02:e1:42:90:7b:5c:05:f2:9e:96:
3b:a4:c6:f0:ee:f2:8f:cd:13:83:9b:d8:a8:db:9f:
a4:50:c1:45:27:4a:74:08:01:38:3c:db:99:2a:f3:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:56:EF:A7:74:7D:F0:B9:44:BB:4F:16:60:66:AC:C7:54:FF:2E:E2
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/Dlbvp3R98LlEu08WYGasx1T_LuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.81.0-31.172.82.255
79.133.42.0/24
185.26.96.0/22
212.224.112.0/23
212.224.118.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a9:41:e8:51:2e:4b:34:26:f9:f5:1e:1c:3f:f3:a8:2e:55:
91:e3:20:c9:c2:0b:fc:7b:b2:f0:5d:7e:c0:4f:85:2a:af:d6:
03:a1:07:df:d9:d6:d9:38:90:34:b7:73:23:32:ca:94:50:f2:
8e:bf:64:ec:e6:c4:c1:7e:82:d4:0c:b0:e0:77:d1:2e:bc:ed:
f2:79:27:bf:ba:e2:70:88:c2:4f:fe:44:b8:51:08:84:7d:53:
73:8a:bf:1e:3f:77:96:17:de:70:a1:8e:d0:a0:c2:8e:65:f4:
7e:f2:a7:32:1d:b3:09:b5:46:78:01:15:84:60:c1:fd:fd:32:
df:07:91:b7:1a:ac:b7:ca:d8:47:1a:66:b4:43:66:da:84:56:
97:e3:73:3b:bd:06:b7:45:26:d0:01:bf:cc:c1:5e:dc:31:a9:
60:5f:6b:a4:15:79:e2:51:21:87:3f:da:8e:fd:eb:5f:83:81:
e5:c6:26:c2:f8:f7:14:80:49:c7:1b:39:bc:63:a8:3c:36:6e:
8a:c1:77:cf:b6:12:b0:97:7b:69:56:d1:75:1c:31:ad:af:c9:
7f:7c:cb:45:9d:7b:25:b6:47:3e:bf:b1:67:60:fd:a8:7c:74:
a4:28:8d:9f:e3:cc:23:e6:15:71:a9:8d:93:80:fe:91:4c:d4:
2e:14:c4:a4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQiji5RwkRxsUOl4jKok1uJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3
NWQzMTUwHhcNMjUwMTAxMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTU2ZWZhNzc0N2RmMGI5NDRiYjRmMTY2MDY2YWNjNzU0ZmYyZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiaIx3KbnBA6WLkMIeKg5eLyBc7a
TTuP079RRW3DK3eT7Pn6H78y0K72H+GNb5BgYOn+4P9JY2mUhUFDNHnVOrjF6ep5
LTS0fP59fqyOJdQh06q3Gd1q7YsHn4rA91MScWPHZqrbBnsvyeKVeI2H0jPB/PHk
zYTUpHD/N8DrkM/fpQJzlkF2f8g7tfT4Tnrh2oKWEt7bNl3fLUWbv33qQCQOhc3R
eo6DPxp8DGDxll2/XOCyp3HrdyMV6xGGhiowlduICB/j5R8tS0Bjwl07UA8R84Ul
JALhQpB7XAXynpY7pMbw7vKPzRODm9io25+kUMFFJ0p0CAE4PNuZKvNsXQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFA5W76d0ffC5RLtPFmBmrMdU/y7iMB8GA1UdIwQY
MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt
MzNkNzI4NDMzYzExLzEvRGxidnAzUjk4TGxFdTA4V1lHYXN4MVRfTHVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx
LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAfrFED
BAAfrFIDBABPhSoDBAK5GmADBAHU4HADBADU4HYwDQYJKoZIhvcNAQELBQADggEB
AAipQehRLks0Jvn1Hhw/86guVZHjIMnCC/x7svBdfsBPhSqv1gOhB9/Z1tk4kDS3
cyMyypRQ8o6/ZOzmxMF+gtQMsOB30S687fJ5J7+64nCIwk/+RLhRCIR9U3OKvx4/
d5YX3nChjtCgwo5l9H7ypzIdswm1RngBFYRgwf39Mt8HkbcarLfK2EcaZrRDZtqE
Vpfjczu9BrdFJtABv8zBXtwxqWBfa6QVeeJRIYc/2o7961+DgeXGJsL49xSASccb
ObxjqDw2borBd8+2ErCXe2lW0XUcMa2vyX98y0WdeyW2Rz6/sWdg/ah8dKQojZ/j
zCPmFXGpjZOA/pFM1C4UxKQ=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:59 2025 by rpki-client