Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/t05FiEojCWZFTCrQd2wsiugY9Dc.roa
File: t05FiEojCWZFTCrQd2wsiugY9Dc.roa (raw, json)
Hash identifier: Za34cT6w0hZfxc0plFENHcLnnoEDP+CBqJ+1KS1MVbs=
Subject key identifier: B7:4E:45:88:4A:23:09:66:45:4C:2A:D0:77:6C:2C:8A:E8:18:F4:37
Certificate issuer: /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial: 01425B81
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/t05FiEojCWZFTCrQd2wsiugY9Dc.roa
Signing time: Fri 22 Apr 2022 14:16:59 +0000
ROA not before: Fri 22 Apr 2022 14:16:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60672
IP address blocks: 94.126.41.0/24 maxlen: 24
94.126.44.0/23 maxlen: 24
94.126.42.0/24 maxlen: 24
94.126.46.0/24 maxlen: 24
178.18.118.0/24 maxlen: 24
193.193.162.0/23 maxlen: 24
178.18.120.0/22 maxlen: 24
31.28.64.0/24 maxlen: 24
31.28.66.0/24 maxlen: 24
31.28.69.0/24 maxlen: 24
31.28.71.0/24 maxlen: 24
31.28.73.0/24 maxlen: 24
31.28.76.0/22 maxlen: 24
31.28.74.0/24 maxlen: 24
31.28.87.0/24 maxlen: 24
31.28.88.0/21 maxlen: 24
193.192.2.0/23 maxlen: 24
31.24.104.0/21 maxlen: 24
2a01:8000:4::/48 maxlen: 48
2a01:8000::/48 maxlen: 48
2a01:8000:1ffb::/48 maxlen: 48
2a01:8000:5::/48 maxlen: 48
2a10:6740::/32 maxlen: 32
2a01:8000::/32 maxlen: 32
2a01:8000:1ffd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21126017 (0x1425b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Validity
Not Before: Apr 22 14:16:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b74e45884a230966454c2ad0776c2c8ae818f437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:28:fe:5c:89:ae:14:5f:97:55:f5:ca:5e:
91:64:41:82:4d:31:86:72:fb:ed:cf:23:02:55:b4:
9c:84:e5:54:ac:2b:e8:ce:fa:62:b9:9a:c6:51:4f:
b9:c4:c0:b8:ac:68:95:ae:47:01:c9:86:43:78:8b:
75:c3:14:10:a4:48:0e:84:7b:ec:02:1e:32:88:c9:
58:1d:f5:fc:60:ab:06:0a:07:ea:1e:52:70:28:3e:
73:9a:a2:ef:51:81:07:92:40:cd:2f:41:1f:89:ab:
2f:c3:eb:bd:98:60:51:84:fa:b3:f1:00:71:4a:50:
0e:e0:0e:a4:55:cc:d0:5a:e7:db:af:f7:07:c2:98:
5e:11:19:a4:77:d2:fb:6d:45:18:9a:b8:ae:aa:f2:
97:01:54:b2:f0:dc:e6:9d:af:b4:84:67:e3:a1:66:
f5:0b:a8:46:1c:09:69:9a:54:76:2b:5c:b8:47:aa:
91:e6:38:63:10:b6:59:d9:83:cb:00:cd:ae:dc:a3:
8f:57:47:d8:b1:2d:92:6f:ec:e1:f3:a6:f2:f1:88:
04:c6:fd:47:32:27:a2:50:0d:73:34:f3:6f:84:23:
2d:26:3f:7e:a6:ce:3a:9f:a7:27:f9:1e:31:5d:32:
52:bc:48:c2:de:ab:e0:8b:b1:a0:ce:78:70:fc:30:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:45:88:4A:23:09:66:45:4C:2A:D0:77:6C:2C:8A:E8:18:F4:37
X509v3 Authority Key Identifier:
keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/t05FiEojCWZFTCrQd2wsiugY9Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.104.0/21
31.28.64.0/24
31.28.66.0/24
31.28.69.0/24
31.28.71.0/24
31.28.73.0-31.28.74.255
31.28.76.0/22
31.28.87.0-31.28.95.255
94.126.41.0-94.126.42.255
94.126.44.0-94.126.46.255
178.18.118.0/24
178.18.120.0/22
193.192.2.0/23
193.193.162.0/23
IPv6:
2a01:8000::/32
2a10:6740::/32
Signature Algorithm: sha256WithRSAEncryption
03:17:7f:3a:03:96:12:2c:16:8e:db:3c:8d:89:d9:e0:2f:d1:
52:13:99:59:1d:f2:2a:e8:ab:cf:12:0b:db:55:62:ea:fe:24:
58:d0:d0:6d:56:2e:4f:7f:2a:82:8a:3e:78:ce:e7:f1:67:e4:
1d:31:a9:bd:b0:b6:cb:f9:a0:84:10:63:02:43:31:87:0d:a0:
93:47:bd:5c:6d:68:89:d7:e5:89:73:d8:6f:3c:bf:f7:13:86:
cd:21:07:d8:1c:9d:4f:9a:58:ab:dc:82:10:a5:30:48:b6:fb:
ab:06:35:46:5d:0b:f7:eb:21:61:d8:60:01:c3:03:cc:26:67:
f9:81:56:84:7f:7e:71:a6:1b:2b:25:c0:39:04:7c:ff:2d:f1:
a8:f1:39:23:bc:a0:3b:bc:30:d8:06:a0:41:b0:c8:e4:51:6e:
43:76:e1:9f:a6:54:b3:25:48:a1:10:52:73:f6:86:68:d9:92:
01:dd:6f:82:29:f7:90:b4:0e:22:c1:23:1b:64:18:d3:7d:ed:
c1:3f:8a:b8:ff:85:04:75:50:c8:2b:89:4d:a2:81:c8:34:ed:
b7:89:62:e6:d8:d1:c9:db:94:12:b5:ed:79:5c:cf:f6:e0:59:
79:4d:be:ed:4f:2f:ff:2b:aa:8d:a3:67:a4:37:62:b2:da:f2:
76:c7:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:07 2025 by rpki-client