Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/COLWPl24gBwEr-D5XL0FvuldJrY.roa
File: COLWPl24gBwEr-D5XL0FvuldJrY.roa (raw, json)
Hash identifier: w2Yn93f3BkbDCKftLuzTWPKq8JBvpotpv0i3K/O8BRQ=
Subject key identifier: 08:E2:D6:3E:5D:B8:80:1C:04:AF:E0:F9:5C:BD:05:BE:E9:5D:26:B6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D30469C7985199BAFB61737F13A89
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/COLWPl24gBwEr-D5XL0FvuldJrY.roa
Signing time: Wed 01 Jan 2025 15:47:45 +0000
ROA not before: Wed 01 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50928
IP address blocks: 31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.254.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.80.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.82.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
46.29.192.0/21 maxlen: 21
46.29.194.0/24 maxlen: 24
46.29.195.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
46.29.199.0/24 maxlen: 24
178.23.144.0/21 maxlen: 21
178.23.148.0/24 maxlen: 24
178.23.149.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.254.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.244.0/24 maxlen: 24
188.170.245.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.252.0/24 maxlen: 24
2a00:9780::/40 maxlen: 40
2a00:9780:100::/40 maxlen: 40
2a00:9780:200::/40 maxlen: 40
2a00:9780:300::/40 maxlen: 40
2a00:9780:400::/40 maxlen: 40
2a00:9780:500::/40 maxlen: 40
2a00:9780:600::/40 maxlen: 40
2a00:9780:700::/40 maxlen: 40
2a00:9780:800::/40 maxlen: 40
2a00:9780:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:30:46:9c:79:85:19:9b:af:b6:17:37:f1:3a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e2d63e5db8801c04afe0f95cbd05bee95d26b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8d:62:c7:86:b1:21:c2:11:d0:c7:59:b0:d6:
d9:27:fc:26:96:3b:c3:c7:cd:ca:3c:ec:67:6e:10:
c0:ad:2d:95:98:53:5c:fd:ab:c3:28:01:c3:d7:67:
63:f0:c5:2d:4b:b0:2d:86:96:a1:2d:d3:38:93:6d:
3d:59:4e:97:73:f3:64:f8:9a:88:32:5d:e9:77:79:
31:da:7b:f6:5a:ed:1a:4b:8a:da:21:89:ac:88:c3:
7c:c7:9c:e9:5e:e1:fa:3a:67:7e:f9:66:0e:b5:12:
6b:16:01:3d:02:fb:40:61:7a:35:0b:fd:03:61:80:
e3:87:f2:46:60:f1:d4:27:7a:6f:7d:d7:09:77:84:
80:3d:b9:88:68:a1:5c:45:da:28:4e:21:e5:c6:3a:
73:16:f0:08:a3:cc:f9:2e:a5:25:3f:8e:24:a9:50:
19:37:00:64:ed:ce:f0:ab:7d:d3:60:38:a5:03:50:
f7:bf:a8:a4:38:92:16:81:c7:34:2d:12:f4:c0:05:
8a:6c:3d:43:50:f2:b3:5e:42:17:96:a6:04:7d:cf:
d0:0c:80:db:2a:03:99:38:25:95:0d:3e:bf:d9:93:
5f:f2:a4:92:be:87:d2:f7:a7:35:16:bb:84:c9:27:
88:d6:2e:5a:37:c2:86:07:58:d9:75:43:85:67:43:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E2:D6:3E:5D:B8:80:1C:04:AF:E0:F9:5C:BD:05:BE:E9:5D:26:B6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/COLWPl24gBwEr-D5XL0FvuldJrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.254.255
188.170.244.0/23
188.170.248.0-188.170.252.255
IPv6:
2a00:9780::-2a00:9780:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:04:8b:3c:a9:3d:a5:10:10:12:9c:2e:0f:81:f1:38:d7:93:
10:3f:ef:50:53:05:cb:0c:cc:00:74:95:6a:d8:c0:3b:5f:84:
15:3a:53:84:88:ff:97:c1:5c:18:96:f4:a9:62:db:ae:73:dc:
f4:c9:50:c4:6f:e6:01:cc:10:8a:bf:44:30:a3:1d:5b:0e:bc:
ea:96:ae:23:a1:82:d9:33:8b:d2:29:49:ed:76:d4:60:f1:54:
3c:33:1d:97:b1:08:aa:a4:5b:9a:f8:77:cd:1e:17:da:7a:df:
4f:13:40:47:09:9f:5d:2d:27:fe:39:c9:a6:f8:05:03:73:a8:
ff:fa:05:b5:0d:7d:02:ef:18:7c:17:71:28:90:a4:16:a1:9b:
cc:e1:11:9a:92:41:8c:40:b8:33:98:05:d2:61:42:82:47:d9:
db:e4:b3:2b:cd:fd:9e:9c:da:7d:2e:65:85:00:8d:f0:1b:f6:
cf:ba:30:a9:93:12:d0:e7:6c:ea:70:d2:24:97:b6:f6:1f:e5:
5e:d4:dd:ab:3e:be:3c:05:dd:14:d7:47:ae:a1:b7:65:49:eb:
7e:1a:ab:3a:ac:44:8f:12:11:6b:a1:bb:05:9b:5e:77:a4:c9:
48:eb:25:fb:43:97:f4:59:0d:20:08:25:82:1b:d3:eb:75:dc:
8d:ba:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:43:41 2025 by rpki-client