Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa
File: G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa (raw, json)
Hash identifier: UQfSOOWEfVsgKWPp7JPv9q8rf4PIS8Inp9Mcfn7NDVc=
Subject key identifier: 1B:9F:F8:20:F3:06:E4:D1:D9:8E:67:F3:3E:12:3E:1E:DD:21:30:1A
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 01942444CA320D949EC61B9D99C6A7DB22B4
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197617
IP address blocks: 31.24.64.0/22 maxlen: 22
31.24.65.0/24 maxlen: 24
31.24.70.0/24 maxlen: 24
31.24.71.0/24 maxlen: 24
185.61.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ca:32:0d:94:9e:c6:1b:9d:99:c6:a7:db:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b9ff820f306e4d1d98e67f33e123e1edd21301a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:ea:a2:73:01:11:39:b2:6e:33:12:f9:7f:
82:1b:d1:30:e1:03:f7:7b:f3:9a:84:09:1f:21:c7:
0e:2c:77:9e:69:d2:8b:47:fb:62:3b:d3:d6:63:46:
74:7c:09:b4:4f:f0:0c:57:fd:54:d9:b2:78:12:66:
27:f9:41:a3:bf:da:9b:8c:b3:7b:be:7a:b2:f9:91:
f7:59:f8:31:58:a7:1b:a9:f0:66:db:89:6a:c8:24:
f3:bb:e6:ae:f5:d3:11:64:86:a1:08:de:a4:b5:c8:
13:c0:71:c4:93:33:35:0e:2c:b0:da:0f:d7:83:ad:
ba:11:62:f1:6f:40:2b:e5:a2:c6:6f:67:ec:1b:87:
79:2e:c2:37:5b:7e:f5:75:2a:d2:b6:e6:ff:34:04:
13:58:75:eb:73:bc:4a:82:a5:8d:22:27:dd:b0:2d:
87:6d:2b:2c:8d:9e:07:78:c5:5e:97:53:6e:2f:af:
2a:6a:1b:8b:cd:28:44:8c:34:89:cc:06:70:0f:ad:
ca:09:f3:a1:7a:cb:10:b3:34:dc:bd:5b:37:9b:9c:
1d:a9:68:fa:3e:23:56:28:72:c2:bc:63:c3:d2:15:
88:03:76:6c:07:77:80:07:ad:9d:7c:8e:0e:ce:da:
5a:3c:62:df:84:10:85:5e:2b:96:8f:57:1d:3f:32:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:F8:20:F3:06:E4:D1:D9:8E:67:F3:3E:12:3E:1E:DD:21:30:1A
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/G5_4IPMG5NHZjmfzPhI-Ht0hMBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.64.0/22
31.24.70.0/23
185.61.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b1:82:aa:a4:29:4e:78:92:8d:49:5e:6a:30:2a:4e:f2:1e:
12:76:49:b4:4b:6c:ce:6e:14:99:a7:55:9a:b0:f5:99:b2:02:
67:dc:b9:f9:5e:91:c9:eb:13:97:36:de:d6:4e:f3:d3:2d:be:
b8:05:07:1a:d9:c3:b6:3d:bf:bf:99:3c:df:8d:e2:ec:1f:63:
91:97:0a:4c:71:fa:4b:ec:1d:5c:d0:66:78:07:e4:ee:85:35:
f4:ad:af:31:1e:47:dc:82:71:e4:49:66:6a:60:ac:07:97:e9:
a9:5d:60:bf:9a:ad:10:6f:61:39:2c:c9:76:fd:1c:02:0d:f4:
44:c3:8e:33:f0:d1:64:f9:74:7c:7e:0d:56:fb:ad:bc:47:bb:
1c:2d:4e:ae:be:ac:ec:eb:18:4c:0f:13:79:54:df:f0:41:5e:
cd:04:83:9a:a2:c2:8f:81:6a:71:2d:61:ee:94:50:41:41:69:
63:f2:67:c6:01:d5:a3:ea:d2:df:6e:0b:d4:3c:ee:54:8d:7b:
76:31:6d:2e:70:53:eb:94:55:fd:71:b6:ae:3d:b7:45:e1:9d:
b4:f8:ae:6a:c6:50:1f:e4:22:26:1c:a7:d5:fc:a8:74:87:6d:
94:38:5a:47:ae:a0:2f:46:72:ae:f9:c3:aa:f3:1c:b3:7a:fc:
05:3e:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:33 2025 by rpki-client