Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/UEAGL23cUguO7LaV9ntB8GG3vLI.roa
File: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (raw, json)
Hash identifier: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=
Subject key identifier: 50:40:06:2F:6D:DC:52:0B:8E:EC:B6:95:F6:7B:41:F0:61:B7:BC:B2
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01942747DBD1A5ACB9AF7DF5D052607512A6
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/UEAGL23cUguO7LaV9ntB8GG3vLI.roa
Signing time: Thu 02 Jan 2025 13:50:08 +0000
ROA not before: Thu 02 Jan 2025 13:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 31.42.128.0/24 maxlen: 24
31.42.129.0/24 maxlen: 24
31.42.131.0/24 maxlen: 24
31.42.144.0/24 maxlen: 24
31.42.145.0/24 maxlen: 24
31.42.153.0/24 maxlen: 24
185.206.58.0/24 maxlen: 24
185.206.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:db:d1:a5:ac:b9:af:7d:f5:d0:52:60:75:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jan 2 13:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5040062f6ddc520b8eecb695f67b41f061b7bcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f1:1b:4d:c5:9d:a5:7f:68:56:af:56:db:27:
5a:cb:41:97:d9:16:89:a3:46:23:b5:dd:d5:38:05:
ac:e1:b6:dc:c0:df:8b:15:b6:1a:c0:6d:be:22:07:
ed:3d:ce:d2:40:de:0b:7a:d3:ee:56:0e:9d:84:dd:
2b:af:71:e3:7b:dc:55:5b:93:d6:4c:a9:7e:c5:28:
24:3d:ad:5c:e8:4f:16:6e:2b:b0:61:53:b1:5c:91:
ad:d1:30:48:48:c1:4d:ba:c9:1a:b9:ff:2a:42:36:
90:5a:59:e1:33:36:5a:c3:ec:e1:7d:92:61:41:25:
a7:8c:19:a8:00:38:4f:64:e0:e2:e0:fe:ba:e3:8e:
59:e4:f2:21:2b:78:49:1c:cf:32:61:97:97:eb:f9:
31:11:2c:e7:6b:2c:16:c8:62:3e:75:66:e9:02:98:
e9:9a:cf:02:28:cf:75:38:fd:3f:71:33:ba:a4:ec:
b5:4a:91:f9:41:78:85:e4:9c:cd:09:a6:e1:b1:37:
8b:4b:ff:b5:13:33:22:0d:29:2f:fb:11:6c:b8:e0:
ac:9b:0c:26:21:bb:22:34:8f:fe:fa:82:50:24:e1:
53:ed:b5:5b:8c:89:20:4d:60:50:24:35:cb:40:da:
26:a1:11:80:40:4c:90:c8:6c:27:91:17:c1:7e:37:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:40:06:2F:6D:DC:52:0B:8E:EC:B6:95:F6:7B:41:F0:61:B7:BC:B2
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/UEAGL23cUguO7LaV9ntB8GG3vLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/23
31.42.131.0/24
31.42.144.0/23
31.42.153.0/24
185.206.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:2e:df:ba:7d:29:ef:fc:70:62:a2:75:1e:95:15:f8:92:b4:
dd:ad:55:95:97:a0:61:84:69:5b:fe:90:ab:fb:7e:3b:b5:65:
b8:f3:8c:80:5b:6f:93:18:a7:d4:71:e4:ef:9c:76:b9:f0:7b:
fe:c4:46:96:66:32:f5:68:5e:e7:f6:38:06:14:67:85:3b:a2:
99:04:4b:31:7f:43:02:31:5e:32:b8:d7:b9:6c:9b:0b:21:36:
3b:de:57:8b:d3:e1:36:05:cf:73:41:de:db:a8:fb:85:96:25:
bb:64:42:1a:fc:31:c7:53:2e:74:2c:0c:59:e1:af:fd:fe:85:
ec:7e:e2:51:41:8b:86:26:9f:d0:af:7e:35:b5:03:70:98:27:
34:a7:51:1f:9f:04:14:a9:0f:5a:05:0f:1f:13:2a:8d:f6:8a:
1f:c6:cd:cd:dd:6c:be:55:a2:2c:71:11:aa:b4:77:a4:29:9c:
77:ef:0d:9f:f5:15:b3:7d:99:90:0a:a7:8e:5c:dd:83:8b:49:
30:db:06:ca:19:76:90:77:e7:7b:06:c7:e0:1f:5e:84:bf:99:
17:18:0f:77:f5:a6:ce:bf:28:7c:6e:fb:87:16:da:12:ba:cf:
53:a4:5f:05:c5:cb:74:8f:2f:fb:f4:a3:1a:1a:7d:4d:81:b0:
b3:dd:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:46:46 2025 by rpki-client