Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/KUk-CSFCGROoWRr0bn1g2QgmGDo.roa
File: KUk-CSFCGROoWRr0bn1g2QgmGDo.roa (raw, json)
Hash identifier: UpwZsPUmRF6H+YvfEB2+WDVmprsNudTy1jgLuv//feE=
Subject key identifier: 29:49:3E:09:21:42:19:13:A8:59:1A:F4:6E:7D:60:D9:08:26:18:3A
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B48542A54E7B614D33E6AB8F9521FC
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/KUk-CSFCGROoWRr0bn1g2QgmGDo.roa
Signing time: Thu 02 Jan 2025 15:48:49 +0000
ROA not before: Thu 02 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.152.0/22 maxlen: 22
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 24
77.50.128.0/17 maxlen: 24
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 24
91.204.128.0/22 maxlen: 22
91.204.128.0/23 maxlen: 23
91.204.130.0/24 maxlen: 24
94.141.160.0/19 maxlen: 19
94.141.162.0/23 maxlen: 23
94.141.164.0/22 maxlen: 22
94.141.168.0/22 maxlen: 22
94.141.172.0/22 maxlen: 22
94.141.176.0/20 maxlen: 20
185.185.140.0/24 maxlen: 24
2a00:e78::/31 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:85:42:a5:4e:7b:61:4d:33:e6:ab:8f:95:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29493e0921421913a8591af46e7d60d90826183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:23:00:e1:2b:c1:28:c8:f2:ba:9e:63:33:
42:c4:9c:90:ac:2d:1a:31:86:bf:ac:8e:91:19:c6:
da:7f:9d:60:22:6a:53:56:d3:96:6d:da:43:2a:b4:
ac:94:a1:ba:e3:4e:cf:fe:21:1b:54:60:c3:97:15:
89:e0:bb:52:f8:f0:29:1a:8a:83:c6:95:98:fe:be:
8a:e8:d1:70:46:5e:f1:90:ee:76:de:df:cd:f6:37:
f0:41:59:67:4e:63:7c:26:fe:e8:1a:31:51:f4:9f:
a2:17:a5:7c:db:a0:12:64:6d:49:12:8c:c9:83:83:
a6:69:11:6a:72:48:38:e2:89:7a:65:2f:25:be:12:
69:33:f2:3f:64:97:04:2c:90:65:ef:b2:81:d5:28:
5a:f7:bf:3b:c8:19:f6:0d:e2:39:30:cc:04:10:f9:
2f:9f:a9:7a:6e:8c:b8:f5:d3:04:85:7f:2d:17:4e:
65:04:02:64:f6:79:3a:b7:0b:89:35:5b:0b:a6:a7:
40:e5:84:ff:f3:53:b2:2b:b4:45:43:49:43:7b:b1:
39:78:d3:85:16:6b:a6:d5:03:e6:6a:3b:d4:b6:33:
71:69:57:77:68:03:80:cc:cb:c7:7e:6f:cd:c4:5f:
31:3b:73:68:52:69:27:45:a8:bd:d4:9d:70:c5:c6:
97:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:49:3E:09:21:42:19:13:A8:59:1A:F4:6E:7D:60:D9:08:26:18:3A
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/KUk-CSFCGROoWRr0bn1g2QgmGDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.152.0/22
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/24
IPv6:
2a00:e78::/31
Signature Algorithm: sha256WithRSAEncryption
6b:90:df:de:e4:5c:a7:f4:cb:57:49:15:74:6b:ad:cc:1a:4a:
dd:b3:20:38:19:d1:66:ad:8d:c6:19:a9:f9:8c:3c:82:21:ac:
ee:29:f8:ee:32:47:3d:48:cd:49:5d:6c:e8:4d:51:9c:9a:3d:
fb:64:9e:14:fe:73:14:4b:3f:53:47:0f:72:82:c2:96:0c:2e:
4b:98:5e:bc:2f:3b:a7:d2:8d:93:00:c2:a4:af:57:92:b8:12:
fe:1c:cc:7a:fb:29:da:c4:b4:c0:4c:56:dc:39:79:12:d5:a6:
d5:b5:3d:41:1a:fe:ff:c3:ab:e6:0b:e7:b7:e9:59:62:b6:f4:
32:d4:81:d6:71:00:40:00:5e:1a:22:7b:47:07:69:91:4c:52:
27:96:7e:c9:d4:65:63:97:0d:06:fc:65:b9:5d:ac:00:fe:2d:
28:d1:a2:87:07:ad:42:11:d1:24:7e:26:43:db:5e:86:b0:f8:
e5:17:dc:83:2c:e2:24:75:e6:88:46:f2:bb:6a:b9:e8:db:47:
17:46:14:fb:ac:0e:c7:05:15:04:67:f0:49:37:87:fd:dc:d8:
a5:57:1b:bf:30:a1:07:80:1c:33:03:3d:0f:78:4d:05:12:b8:
ea:ce:07:6b:12:ff:65:2f:45:80:46:3a:3d:9d:b4:39:12:af:
b6:7d:f9:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:35 2025 by rpki-client