Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/31nqpZ5dKVVgBx5PYVLJiU1jvrY.roa
File: 31nqpZ5dKVVgBx5PYVLJiU1jvrY.roa (raw, json)
Hash identifier: tzZ/OMjchdfMYww0evRcPgmGoWdwymv8hmZoGYGhZRM=
Subject key identifier: DF:59:EA:A5:9E:5D:29:55:60:07:1E:4F:61:52:C9:89:4D:63:BE:B6
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 01958F614C47B45F96B969B565484267E18A
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/31nqpZ5dKVVgBx5PYVLJiU1jvrY.roa
Signing time: Thu 13 Mar 2025 12:01:13 +0000
ROA not before: Thu 13 Mar 2025 12:01:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39900
IP address blocks: 86.54.25.0/24 maxlen: 24
86.54.26.0/24 maxlen: 24
141.98.184.0/22 maxlen: 22
194.9.118.0/24 maxlen: 24
2a13:6c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:4c:47:b4:5f:96:b9:69:b5:65:48:42:67:e1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Mar 13 12:01:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df59eaa59e5d295560071e4f6152c9894d63beb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:73:d8:06:09:f7:90:8c:12:a2:3b:0b:3c:
29:67:ab:75:2d:d4:88:4e:6e:a5:04:7a:a1:60:ed:
78:a6:fd:81:44:04:bf:34:29:56:97:d9:23:74:7d:
e3:57:2e:6c:47:76:48:e1:81:4a:7b:65:e1:20:3b:
59:78:06:50:28:3d:00:c4:4b:ff:41:51:bb:61:bb:
c3:f6:68:d2:4f:f8:27:8e:0a:b3:51:65:0f:4c:7a:
66:1f:bb:c7:01:0b:3c:82:40:53:23:4b:98:cf:e3:
ca:ba:6b:b4:f8:bf:2e:e7:c2:c8:e7:73:67:ea:57:
0b:8d:60:61:f0:21:40:84:28:f7:14:2b:33:ff:1d:
7c:1d:5e:51:b8:38:c7:1d:47:3f:80:53:8f:8f:79:
d9:34:44:4e:1b:06:d4:9d:1b:a4:59:cf:8d:be:c6:
43:1d:d8:24:88:4a:da:15:78:f8:63:4b:d7:b6:7b:
45:a6:66:d0:1f:13:9d:bc:d5:3d:5b:a8:24:42:1e:
65:56:23:bc:a0:78:86:f2:b6:50:36:52:da:0a:dc:
24:bf:fd:56:9f:23:76:bf:3b:45:54:8f:c5:63:a2:
fa:7d:80:62:ac:b7:58:d1:ac:8a:77:8e:aa:24:16:
58:3e:ea:e0:1f:54:f4:7a:38:72:de:ff:1d:f0:7b:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:EA:A5:9E:5D:29:55:60:07:1E:4F:61:52:C9:89:4D:63:BE:B6
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/31nqpZ5dKVVgBx5PYVLJiU1jvrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.25.0-86.54.26.255
141.98.184.0/22
194.9.118.0/24
IPv6:
2a13:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
33:e7:f8:0a:49:ae:75:c3:91:63:f6:59:3b:b7:68:27:25:be:
ca:ff:10:7c:1a:5f:f1:7b:51:ae:b5:35:a6:ac:13:92:e9:10:
66:19:68:84:2a:42:58:3f:ce:86:e1:fe:2d:92:f1:d3:c2:50:
39:72:5d:50:8d:9e:ab:e7:ee:d8:a8:d6:62:cb:65:72:aa:24:
0c:0c:b4:d1:5f:c0:c3:61:f2:91:55:62:38:4d:0d:9d:15:50:
d1:f7:1b:49:8a:78:c5:cc:0e:26:d3:f7:9c:67:22:4d:23:75:
ab:b4:36:85:96:1c:42:2f:ec:a1:42:c7:d1:66:33:12:36:b0:
fe:4c:d5:c9:e9:4d:17:3e:29:4c:a7:38:e8:44:50:0a:08:f9:
6b:7e:7d:02:dd:b6:37:1c:fa:18:f6:cd:40:87:12:30:8d:d7:
cc:e5:d2:70:10:ca:54:9a:34:81:da:e7:71:9c:9c:e3:ed:5d:
7f:87:2f:12:15:08:c2:bf:77:6f:5d:44:12:e2:8f:13:e3:37:
29:fa:c0:75:c9:7f:c8:fc:af:17:37:d2:32:a0:48:23:a2:ca:
4f:76:99:4a:09:9f:bf:10:7b:4a:a1:47:52:d6:e3:ee:14:cc:
5d:3e:0f:5c:cd:5a:97:aa:84:56:6f:ff:bb:09:e5:f0:02:b3:
65:ad:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:31 2025 by rpki-client