Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/b_r2wZ6lhJVB6OgNserafUFYM_k.roa
File: b_r2wZ6lhJVB6OgNserafUFYM_k.roa (raw, json)
Hash identifier: NLA59l5xFaTl4FcplVa+WADlVToc/544GHzzgDmMylg=
Subject key identifier: 6F:FA:F6:C1:9E:A5:84:95:41:E8:E8:0D:B1:EA:DA:7D:41:58:33:F9
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 0194A18578558EC6C8010A60DD14B37DCE1F
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/b_r2wZ6lhJVB6OgNserafUFYM_k.roa
Signing time: Sun 26 Jan 2025 07:31:06 +0000
ROA not before: Sun 26 Jan 2025 07:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43847
IP address blocks: 31.185.104.0/23 maxlen: 23
31.185.110.0/23 maxlen: 23
46.182.16.0/23 maxlen: 23
46.182.18.0/23 maxlen: 23
46.182.20.0/23 maxlen: 23
46.182.23.0/24 maxlen: 24
2a02:2970::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:85:78:55:8e:c6:c8:01:0a:60:dd:14:b3:7d:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 26 07:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffaf6c19ea5849541e8e80db1eada7d415833f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:c0:69:f7:84:04:76:f3:0a:c4:07:0c:43:
6f:40:30:f7:09:f4:5e:36:50:f3:6c:20:60:ae:37:
d6:ef:d6:18:4c:a9:70:3c:f7:9d:b8:86:8e:2a:cb:
26:46:21:98:85:b0:85:8b:54:54:c8:46:77:58:66:
e8:50:fc:2c:46:fd:93:60:d6:bf:c0:60:56:79:d9:
a5:cc:d4:ad:2e:b8:29:46:e6:f8:43:f8:ef:2c:46:
b5:47:25:f4:92:0a:bf:a4:ca:84:2d:1e:8b:4f:11:
99:7a:17:8b:aa:d0:73:f3:6c:22:de:0f:f4:a0:85:
42:bc:d8:b4:6e:dc:6f:3e:98:15:bb:91:46:64:5d:
e1:02:9a:c4:34:c9:ea:4d:1b:b2:ee:c9:c9:03:75:
c0:70:7b:c2:6e:1f:8c:8c:fd:ad:35:77:17:d8:6b:
4b:48:a8:f7:6d:f8:0d:d4:ac:df:79:26:48:bb:1e:
00:33:7d:29:a3:28:2e:d3:ee:93:38:22:b8:6c:41:
2b:25:4e:6d:01:97:41:30:e6:d9:d7:cf:c2:d5:4e:
cf:58:e2:6c:17:a2:32:0a:8d:70:67:98:a9:d7:ec:
43:1e:f3:dd:d3:c4:b8:56:e1:d5:a5:50:7e:e0:8a:
f9:43:9b:20:bf:7b:37:5d:19:c9:12:77:a5:e5:0c:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:F6:C1:9E:A5:84:95:41:E8:E8:0D:B1:EA:DA:7D:41:58:33:F9
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/b_r2wZ6lhJVB6OgNserafUFYM_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/23
31.185.110.0/23
46.182.16.0-46.182.21.255
46.182.23.0/24
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
b6:46:2e:8f:21:87:88:11:2b:9d:0e:59:f4:6e:63:5c:8a:ea:
e5:fd:ee:86:d3:65:d5:dd:15:f8:a0:4e:71:8a:fa:ab:ce:91:
d6:f6:d8:cb:96:c5:c8:5a:5a:71:8a:a4:29:f1:0f:ef:1a:ef:
78:a6:ef:5d:8d:49:5a:d7:47:3a:f3:ba:a5:5a:97:cb:34:d2:
ab:72:c7:c1:2c:57:b0:c1:b4:ee:e4:c4:51:08:ab:b5:b2:b9:
6c:c0:5c:76:ea:76:17:db:56:04:08:e1:e4:2d:83:de:87:8a:
cd:6e:cb:85:42:4c:64:4b:a9:35:bb:53:15:ae:a8:95:de:e3:
85:0d:81:61:c8:90:ba:76:db:78:90:16:98:aa:a0:94:65:96:
22:3c:6f:02:81:85:19:b2:88:b6:52:31:57:82:36:25:70:f2:
3a:f5:89:c1:21:ef:a6:82:56:b3:28:d3:c4:8a:9e:86:47:a9:
15:01:45:57:30:d2:20:98:64:c7:1a:95:f9:85:90:32:88:9a:
2c:00:ee:66:be:cc:1c:c2:e2:06:92:62:c0:2d:02:fd:da:cd:
98:cc:d6:d6:9c:11:a4:08:f8:72:33:8d:0f:81:1c:67:64:be:
de:db:2e:f0:08:d4:95:ea:2e:16:0e:b1:85:54:4e:2c:a6:e3:
74:e1:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:00:19 2025 by rpki-client