Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa
File: t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa (raw, json)
Hash identifier: T/qafktV9KBjPJSNOInyquhT37yKqAM6MoTNGf3u/X4=
Subject key identifier: B7:96:29:F9:B1:2F:56:17:7C:91:A8:03:60:76:44:31:87:E7:64:74
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 019425FCFD9799317FEE5AD2D73B5D2425B7
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa
Signing time: Thu 02 Jan 2025 07:48:44 +0000
ROA not before: Thu 02 Jan 2025 07:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 31.10.128.0/17 maxlen: 17
31.10.128.0/18 maxlen: 18
31.10.192.0/18 maxlen: 18
46.126.0.0/15 maxlen: 15
46.126.0.0/16 maxlen: 16
46.127.0.0/16 maxlen: 16
46.140.0.0/16 maxlen: 16
46.140.0.0/17 maxlen: 17
46.140.128.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
62.2.0.0/17 maxlen: 17
62.2.128.0/17 maxlen: 17
77.56.0.0/14 maxlen: 14
77.56.0.0/15 maxlen: 15
77.58.0.0/15 maxlen: 15
80.218.0.0/15 maxlen: 15
80.218.0.0/16 maxlen: 16
80.219.0.0/16 maxlen: 16
81.7.224.0/19 maxlen: 19
81.7.224.0/20 maxlen: 20
81.7.240.0/20 maxlen: 20
84.20.32.0/20 maxlen: 20
84.20.32.0/21 maxlen: 21
84.20.40.0/21 maxlen: 21
84.20.48.0/21 maxlen: 21
84.20.48.0/22 maxlen: 22
84.20.52.0/22 maxlen: 22
84.72.0.0/14 maxlen: 14
84.72.0.0/15 maxlen: 15
84.74.0.0/15 maxlen: 15
178.82.0.0/15 maxlen: 15
178.82.0.0/16 maxlen: 16
178.82.0.0/17 maxlen: 17
178.82.128.0/17 maxlen: 17
178.83.0.0/16 maxlen: 16
194.29.0.0/19 maxlen: 19
194.29.0.0/20 maxlen: 20
194.29.16.0/20 maxlen: 20
195.202.192.0/18 maxlen: 18
195.202.192.0/19 maxlen: 19
195.202.224.0/19 maxlen: 19
212.47.160.0/19 maxlen: 19
212.47.160.0/20 maxlen: 20
212.47.176.0/20 maxlen: 20
213.193.64.0/18 maxlen: 18
213.193.64.0/19 maxlen: 19
213.193.96.0/19 maxlen: 19
217.162.0.0/16 maxlen: 16
217.162.0.0/17 maxlen: 17
217.162.128.0/17 maxlen: 17
217.168.32.0/19 maxlen: 19
217.168.32.0/20 maxlen: 20
217.168.48.0/20 maxlen: 20
2a00:e2c0::/32 maxlen: 32
2a00:e2c0::/33 maxlen: 33
2a00:e2c0:8000::/33 maxlen: 33
2a02:aa00::/27 maxlen: 27
2a02:aa00::/28 maxlen: 28
2a02:aa10::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:fd:97:99:31:7f:ee:5a:d2:d7:3b:5d:24:25:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jan 2 07:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b79629f9b12f56177c91a8036076443187e76474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:d2:be:69:e3:d0:b4:de:8a:bb:e6:7c:3c:
38:d8:cf:12:58:e3:cf:83:f4:54:c5:fd:54:cb:03:
48:cf:57:57:a0:72:a5:db:b9:90:95:16:bf:82:2f:
2a:50:91:82:fb:7e:aa:c0:66:3f:65:71:a9:c2:5f:
fa:b7:64:3e:59:7f:ff:0f:8d:70:ae:fe:98:07:0f:
ec:ed:cb:d0:1f:3d:0b:58:31:d7:3a:7a:2c:da:a6:
3a:cc:07:61:20:18:6a:ba:63:eb:dd:a9:60:ac:8e:
ec:35:1e:37:a5:86:22:c2:28:6f:78:3c:be:98:25:
ca:8d:ef:37:ab:3e:73:38:0c:6b:28:12:a7:c5:4a:
79:ba:2b:f8:7f:9f:86:2c:22:e0:81:ea:06:fe:62:
fe:82:40:f8:50:40:c2:8b:93:9a:33:fa:d3:3b:3c:
d6:9f:76:90:83:e8:88:13:2b:62:63:f1:ad:b0:41:
8e:64:e3:80:65:b1:42:89:8f:e9:31:a5:78:4e:1e:
23:82:7c:55:9f:cc:bc:77:54:13:83:a7:1b:68:c6:
7c:15:fe:e2:60:f7:ed:c3:90:68:2c:c5:b3:3f:fe:
89:ac:11:9f:59:3a:89:64:34:99:62:d0:29:b6:57:
e1:5a:c3:60:ee:0f:b8:d0:97:eb:b0:0b:0f:ef:6f:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:29:F9:B1:2F:56:17:7C:91:A8:03:60:76:44:31:87:E7:64:74
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/t5Yp-bEvVhd8kagDYHZEMYfnZHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
77.56.0.0/14
80.218.0.0/15
81.7.224.0/19
84.20.32.0-84.20.55.255
84.72.0.0/14
178.82.0.0/15
194.29.0.0/19
195.202.192.0/18
212.47.160.0/19
213.193.64.0/18
217.162.0.0/16
217.168.32.0/19
IPv6:
2a00:e2c0::/32
2a02:aa00::/27
Signature Algorithm: sha256WithRSAEncryption
43:8e:53:a8:42:40:b9:c2:87:f1:04:1c:f6:24:86:b4:f1:2d:
35:db:1f:5b:76:e4:74:da:7a:65:7f:b0:f4:a0:d8:cf:78:7e:
52:dc:1c:d1:5d:7c:a7:94:bd:48:a5:13:47:aa:71:e4:7c:63:
43:34:a4:3d:19:a9:65:ca:8d:78:17:e7:b2:7a:ca:e4:36:72:
b3:5c:8f:51:80:61:c5:cf:72:de:dd:42:85:f0:41:41:37:21:
16:05:77:3e:e4:7f:95:e8:9a:23:47:97:75:a9:8c:04:ee:e1:
f0:65:ae:a3:9e:63:4e:a9:12:f1:29:0b:2b:1e:0a:89:e5:d0:
b1:63:ed:c9:77:15:7d:d4:8a:c6:d9:70:78:ff:53:20:fc:4c:
15:0b:85:a7:7b:2b:e4:11:94:e8:e8:03:74:bc:03:45:ee:c2:
a9:7e:ee:a7:64:cc:8f:8d:9f:7a:ca:b5:36:01:5f:1f:41:f5:
fd:de:0b:5c:09:19:8e:72:d7:67:c0:21:d0:9c:1b:aa:b7:8f:
f3:78:91:bb:6e:48:67:49:95:a0:25:51:9f:ed:31:c0:c7:0c:
e3:52:19:e0:39:cc:f6:31:a6:1e:32:ca:60:e6:07:0d:29:bf:
4a:87:22:ba:76:ab:0e:5c:20:4f:0f:56:f1:ae:1c:0d:cc:13:
9c:7b:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:45 2025 by rpki-client