Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa
File: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (raw, json)
Hash identifier: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=
Subject key identifier: 44:06:21:1A:AC:46:F7:48:B7:5E:5E:08:6C:E9:81:31:72:DA:59:65
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01941F8C2A5D5624A729AEDBAFF007286145
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 31.25.64.0/21 maxlen: 24
31.25.64.0/22 maxlen: 24
31.25.68.0/22 maxlen: 24
91.196.240.0/22 maxlen: 24
91.196.240.0/23 maxlen: 24
91.196.242.0/23 maxlen: 24
217.16.192.0/20 maxlen: 24
2a02:7720::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2a:5d:56:24:a7:29:ae:db:af:f0:07:28:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4406211aac46f748b75e5e086ce9813172da5965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:4e:52:69:a4:bd:80:cb:bd:12:c5:5f:bc:
96:72:cc:63:8e:1b:e8:a5:ac:69:91:2a:00:a6:b0:
a6:a6:66:93:42:af:59:f1:e1:90:92:c6:76:e6:d9:
96:90:96:0f:5e:6f:27:8e:05:94:21:92:54:fa:e7:
45:53:42:c9:77:a7:6b:b6:c3:91:a5:76:fb:09:31:
bf:98:b9:a0:18:f0:88:6a:8c:8c:cc:5e:98:ce:a0:
98:88:8e:15:97:31:7a:fc:86:60:fd:6e:e8:ce:bf:
5b:02:39:d7:0e:e6:f4:8d:17:c8:f1:e8:75:a8:d2:
06:31:e6:b4:e0:fa:0b:4c:0f:ad:f7:59:61:37:58:
01:b4:f0:61:a3:5e:a5:80:72:25:ce:56:fd:1d:5a:
16:57:33:0c:f7:06:25:92:06:8a:93:c9:82:a1:ca:
5e:0e:46:d5:6a:bc:f1:b1:fe:48:94:1d:c1:de:30:
e1:98:89:de:05:f4:f2:61:ca:65:ff:e5:2a:2e:9c:
e7:e8:c8:3f:d7:d1:c6:af:7d:ee:ff:14:e5:1f:a9:
2d:fe:7a:f6:dc:6b:52:63:ac:cb:ce:b5:ce:c1:e6:
af:85:14:33:3e:c9:0e:e8:d2:55:f8:80:65:6a:e6:
f5:83:51:d3:4f:71:09:dc:b3:4d:e6:fc:10:a8:ff:
a3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:06:21:1A:AC:46:F7:48:B7:5E:5E:08:6C:E9:81:31:72:DA:59:65
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.64.0/21
91.196.240.0/22
217.16.192.0/20
IPv6:
2a02:7720::/32
Signature Algorithm: sha256WithRSAEncryption
31:0d:43:3d:6c:38:ae:c6:a6:49:6f:94:dc:69:c8:58:7d:70:
6f:b4:78:72:b4:9a:94:2d:47:b3:46:f0:5c:72:73:35:68:7e:
7a:d5:ba:f0:73:46:d6:de:ae:b0:e6:57:af:d3:cd:8b:40:b0:
68:b3:ee:b3:4d:b2:da:02:59:22:fa:30:6b:bf:e8:fd:e3:f8:
24:78:ee:7d:70:6c:51:84:95:21:84:32:7f:e5:1a:ee:a0:8b:
da:2d:ea:d3:e3:31:cc:3f:c8:8c:fe:d7:7c:1b:ea:66:6f:aa:
3e:63:ed:68:c5:71:b5:95:fb:86:79:3b:ad:13:07:22:e5:e3:
8d:60:7a:71:2f:58:50:59:0d:2f:7c:44:c4:42:a8:62:bc:bb:
f3:fc:e4:60:7e:27:f0:6f:98:7b:a3:81:d8:26:f6:f5:fe:77:
b1:53:d4:f8:5a:7e:ae:f4:20:c7:3f:bc:3e:28:96:fa:70:f4:
bd:1c:40:6d:94:8b:c7:01:7a:e0:05:ad:67:17:e1:f5:c6:63:
8f:5b:33:0b:77:7e:a1:20:99:e2:61:5c:28:66:cd:c6:42:fe:
9b:25:a9:4b:df:5d:5c:44:69:2d:79:1a:cf:5c:9b:ee:10:d5:
44:c0:d8:39:b0:42:03:97:7e:7b:71:d5:cf:20:ae:08:dd:a5:
48:19:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:42 2025 by rpki-client