Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/kI95OqljvpuP19xNeatpCC78QL0.roa
File: kI95OqljvpuP19xNeatpCC78QL0.roa (raw, json)
Hash identifier: xeIJsQyiu78m/ov5MVv9GnNEdwzfiIiPyuIblum8QtY=
Subject key identifier: 90:8F:79:3A:A9:63:BE:9B:8F:D7:DC:4D:79:AB:69:08:2E:FC:40:BD
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 019449DA6CA7BFA812844E4DF7380F44210A
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/kI95OqljvpuP19xNeatpCC78QL0.roa
Signing time: Thu 09 Jan 2025 06:57:18 +0000
ROA not before: Thu 09 Jan 2025 06:57:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 31.207.8.0/21 maxlen: 24
31.207.16.0/20 maxlen: 24
37.251.176.0/20 maxlen: 24
37.251.200.0/21 maxlen: 24
37.251.240.0/21 maxlen: 24
45.11.164.0/22 maxlen: 24
46.102.148.0/22 maxlen: 24
46.231.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
89.20.160.0/19 maxlen: 24
90.145.59.0/24 maxlen: 24
93.95.248.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
109.94.144.0/20 maxlen: 24
141.136.16.0/20 maxlen: 24
144.178.64.0/19 maxlen: 24
144.178.96.0/21 maxlen: 24
144.178.108.0/22 maxlen: 24
144.178.112.0/22 maxlen: 24
144.178.120.0/21 maxlen: 24
144.178.192.0/19 maxlen: 24
144.178.224.0/20 maxlen: 24
144.178.240.0/21 maxlen: 24
144.178.248.0/22 maxlen: 24
151.236.144.0/20 maxlen: 24
151.248.48.0/21 maxlen: 24
161.51.64.0/19 maxlen: 24
185.184.204.0/22 maxlen: 24
188.214.40.0/21 maxlen: 24
2a01:9bc0::/29 maxlen: 48
2a02:fe8::/32 maxlen: 48
2a02:fe9::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:da:6c:a7:bf:a8:12:84:4e:4d:f7:38:0f:44:21:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Jan 9 06:57:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=908f793aa963be9b8fd7dc4d79ab69082efc40bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:84:04:fd:a0:95:a2:21:23:6d:82:d9:04:
f5:8f:47:b9:7d:9d:c8:f4:52:ed:05:86:df:37:71:
b4:92:53:8e:d9:7e:f7:fa:40:e4:ae:f0:51:ef:0a:
2f:c7:3a:af:9b:de:69:f1:bb:ea:62:6c:07:28:0d:
55:93:15:34:01:d2:86:63:b1:3a:b0:0a:1b:33:ea:
bd:79:cf:a3:c9:f3:f2:1e:48:50:2e:25:12:11:62:
b6:51:d2:64:0d:a5:97:e8:5d:03:df:fb:83:93:c4:
8a:ae:d9:35:7d:6d:54:a0:ba:0d:46:4a:49:b2:97:
2f:46:3a:4f:f3:00:ed:f0:44:55:dc:cd:af:dd:7a:
45:6d:d7:34:87:bb:fc:cf:dc:aa:a1:45:a6:25:dc:
7f:23:1b:61:c6:b1:bf:e9:37:09:eb:64:1d:2a:70:
69:90:a1:62:af:0f:93:2f:fb:41:ef:37:cf:53:46:
5d:81:61:47:ec:08:30:96:0c:a4:d1:b8:e6:22:da:
a7:5b:6c:9c:c2:01:b8:c5:26:b8:68:21:99:ac:bb:
46:2e:f5:89:47:bd:71:81:7d:64:fe:fb:33:37:d4:
67:06:8b:2b:11:f5:65:36:4d:5e:2a:70:c9:56:ae:
e6:78:ce:26:77:7e:55:70:69:a2:ce:fb:f4:93:0b:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8F:79:3A:A9:63:BE:9B:8F:D7:DC:4D:79:AB:69:08:2E:FC:40:BD
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/kI95OqljvpuP19xNeatpCC78QL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.8.0-31.207.31.255
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
45.11.164.0/22
46.102.148.0/22
46.231.104.0/21
62.122.40.0/21
89.20.160.0/19
90.145.59.0/24
93.95.248.0/21
94.24.64.0/21
109.94.144.0/20
141.136.16.0/20
144.178.64.0-144.178.103.255
144.178.108.0-144.178.115.255
144.178.120.0/21
144.178.192.0-144.178.251.255
151.236.144.0/20
151.248.48.0/21
161.51.64.0/19
185.184.204.0/22
188.214.40.0/21
IPv6:
2a01:9bc0::/29
2a02:fe8::/31
Signature Algorithm: sha256WithRSAEncryption
7e:82:a3:a6:75:f7:5f:59:7d:fa:94:a6:6e:f7:02:8e:f9:7d:
aa:6f:d0:0d:39:6d:e7:17:3a:0c:be:0b:ed:50:c3:16:59:e3:
f5:8a:3e:f1:b5:25:13:95:39:93:21:8c:30:69:91:57:20:37:
f1:f9:a6:5c:29:b8:9b:c1:11:ac:38:81:54:9b:d4:d4:00:dd:
5c:cc:e2:68:94:15:8a:d7:32:ea:00:1f:93:c0:f5:b9:0b:d2:
45:0e:0d:0e:2f:a5:0c:4a:e8:34:98:b1:a8:6c:ab:45:98:1a:
b4:37:30:d8:b2:31:20:a2:4e:2c:3b:5f:94:5f:6c:7c:2c:8d:
59:be:2b:67:3d:d7:d4:77:31:bc:da:69:88:81:d2:21:27:01:
f5:b9:f9:63:38:c7:37:b9:15:c6:7b:e6:67:87:63:5d:1b:c5:
37:b5:02:de:a0:1b:6f:34:6c:2d:6c:6b:26:ac:11:23:9d:af:
94:ce:07:60:78:6c:7b:19:bf:03:44:89:ec:fb:78:92:c9:a8:
9f:f0:64:4f:ca:30:0d:e1:99:bf:a8:19:14:7a:da:ec:46:23:
73:9a:ce:5c:ed:ba:69:f3:cb:cd:9c:26:14:e7:94:73:5f:62:
ed:45:90:5c:78:39:9e:52:03:72:e4:cd:70:16:ff:db:72:6d:
36:2c:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:20 2025 by rpki-client