Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa
File: R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa (raw, json)
Hash identifier: Oyl4OLft0GlbGZgUB6suVirp+SJlYsYQ9M9olwoUBhU=
Subject key identifier: 47:53:32:A9:D3:5B:24:C5:C0:D8:1F:61:08:EA:09:56:D1:18:48:0A
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01942745D2E8A12E386827E35E65775D4529
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa
Signing time: Thu 02 Jan 2025 13:47:54 +0000
ROA not before: Thu 02 Jan 2025 13:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214038
IP address blocks: 31.192.210.0/24 maxlen: 24
89.252.136.0/24 maxlen: 24
93.115.77.0/24 maxlen: 24
95.173.183.0/24 maxlen: 24
2a03:2102:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d2:e8:a1:2e:38:68:27:e3:5e:65:77:5d:45:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 2 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=475332a9d35b24c5c0d81f6108ea0956d118480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:b6:12:9b:6e:19:8c:6c:9a:ea:a7:0d:18:
a1:68:1d:85:d8:3d:11:29:6b:2b:e7:19:fd:90:fb:
fa:f8:2f:2f:18:12:69:a0:3c:ee:d6:40:01:75:24:
96:1a:db:18:c9:16:f7:35:a7:d4:1a:d4:70:3a:0c:
8a:a1:60:e5:71:ce:72:89:d3:82:e4:17:b0:9a:9e:
fb:c6:4d:f3:d2:9b:e7:9d:41:5b:84:ce:42:29:e2:
25:2c:15:db:d8:28:2b:5c:09:81:51:ed:f6:2c:47:
28:1e:e5:20:cb:1c:9c:f3:03:46:8e:de:fc:6d:22:
2f:c9:66:d4:d0:37:17:b5:65:cd:65:26:15:d9:21:
1e:eb:d0:ac:8b:7b:0a:68:ed:1d:d2:b2:f0:17:44:
59:6c:b1:71:90:44:81:2c:f6:32:35:44:0c:ab:65:
52:5c:35:70:8c:13:aa:c7:5d:3b:f9:89:6b:7f:b5:
87:c5:7c:50:83:f9:40:8b:e2:a9:a2:ef:b4:5b:ce:
da:78:3c:87:f0:f7:dd:48:f1:d4:f6:c8:1d:cd:e6:
22:d9:28:72:6b:ad:f3:d9:c6:e2:e3:c6:86:eb:fc:
83:8f:a7:5c:96:b5:ba:23:00:07:4b:f1:c8:08:40:
a4:0a:a0:85:13:24:2c:20:10:b9:2b:56:66:b6:6d:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:53:32:A9:D3:5B:24:C5:C0:D8:1F:61:08:EA:09:56:D1:18:48:0A
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/R1MyqdNbJMXA2B9hCOoJVtEYSAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.210.0/24
89.252.136.0/24
93.115.77.0/24
95.173.183.0/24
IPv6:
2a03:2102:1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:5e:34:92:32:48:85:34:4b:62:f5:bb:87:d0:f4:06:ef:4c:
ef:ee:55:9d:81:58:5d:60:3f:a5:57:97:00:5e:91:ee:43:f1:
aa:2f:13:d7:da:00:1b:36:ff:ba:f2:c8:76:87:53:f7:6c:c5:
90:d7:ef:20:67:c9:ac:8e:c1:9a:2b:77:b2:85:d2:42:9f:78:
85:41:19:46:9a:0e:de:5f:0a:95:46:a7:e8:15:94:b8:76:35:
2b:3f:c2:04:e1:35:e4:23:d2:7c:1a:8a:3b:ce:f5:a2:f1:39:
75:39:41:74:92:c9:f5:bb:e3:48:d5:4e:35:0b:7e:38:8d:d1:
32:44:19:d8:51:25:79:0e:06:66:47:0e:00:fe:24:d0:82:bf:
68:52:c8:6d:c4:74:3e:a5:8a:af:58:09:3d:9c:39:e0:97:72:
3e:bc:34:26:1d:32:73:89:f0:79:4d:78:3a:b7:70:5a:f2:fc:
f7:06:97:1b:36:f2:76:55:12:56:83:5c:e4:3b:9b:2d:46:15:
5e:e7:45:ce:74:65:30:ac:bb:a3:2b:09:25:7b:f9:94:59:ff:
c1:5d:96:87:a4:55:08:da:02:1a:54:17:9e:87:47:2c:82:3a:
7b:c6:57:38:7f:98:63:a8:42:39:f9:f7:da:75:5a:ad:40:c8:
bd:1e:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:55 2025 by rpki-client