Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/uf4YEJrC2iNo6fpxEAeMk0rpP3g.roa
File: uf4YEJrC2iNo6fpxEAeMk0rpP3g.roa (raw, json)
Hash identifier: iGm9BiqisDnLMAxbGMwTMezvRnkN4Fa6we/fe1g8xUU=
Subject key identifier: B9:FE:18:10:9A:C2:DA:23:68:E9:FA:71:10:07:8C:93:4A:E9:3F:78
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 018DB08C4F5A9331EDE6BAE46D6CF2BB6DD8
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/uf4YEJrC2iNo6fpxEAeMk0rpP3g.roa
Signing time: Fri 16 Feb 2024 06:13:21 +0000
ROA not before: Fri 16 Feb 2024 06:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34602
IP address blocks: 31.130.128.0/21 maxlen: 21
31.130.144.0/20 maxlen: 20
77.50.0.0/16 maxlen: 16
77.50.0.0/23 maxlen: 23
77.50.2.0/23 maxlen: 23
77.50.4.0/22 maxlen: 22
77.50.8.0/21 maxlen: 21
77.50.16.0/20 maxlen: 20
77.50.32.0/19 maxlen: 19
77.50.53.0/24 maxlen: 24
77.50.64.0/18 maxlen: 18
77.50.128.0/17 maxlen: 17
77.233.192.0/19 maxlen: 19
77.243.96.0/20 maxlen: 20
81.17.144.0/20 maxlen: 20
91.204.128.0/22 maxlen: 22
94.141.160.0/19 maxlen: 19
185.185.140.0/22 maxlen: 22
2a00:e78::/33 maxlen: 33
2a00:e78::/34 maxlen: 34
2a00:e78:6000::/36 maxlen: 36
2a00:e79::/32 maxlen: 32
2a00:e79::/36 maxlen: 36
2a00:e7a::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:8c:4f:5a:93:31:ed:e6:ba:e4:6d:6c:f2:bb:6d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Feb 16 06:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9fe18109ac2da2368e9fa7110078c934ae93f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:75:72:e1:5c:69:9b:2c:21:38:ac:45:14:
c7:fb:b4:5b:91:68:de:93:a8:24:27:28:2b:31:f8:
2c:ba:48:51:82:11:c2:8e:2a:98:27:d0:eb:2f:bb:
fc:e2:90:57:ba:1c:9d:de:b9:79:33:f6:94:fa:4f:
75:da:25:16:c3:1d:28:75:08:23:0d:3e:0f:f4:e1:
7b:08:b8:6a:03:ac:76:d4:42:49:5f:74:21:ff:26:
0b:b5:14:f8:93:cb:37:83:29:25:a1:45:6a:21:4d:
5c:d3:d3:15:0c:89:9b:a4:15:90:9f:26:3c:9f:a3:
b6:12:dc:7e:3c:e9:60:a1:9b:15:70:15:15:f9:2c:
61:0d:3a:6d:bf:88:8f:20:8d:4c:ca:a6:da:0a:08:
c1:8b:1c:df:3d:df:11:5f:a9:80:86:25:07:5c:83:
dc:0f:ff:0f:ba:ba:f3:e5:5e:31:19:da:07:2d:e8:
9d:4c:90:f4:11:4a:ec:93:18:19:c3:30:ba:27:4e:
f7:71:cf:4b:09:bc:b4:e5:22:dd:5d:06:a7:4a:ae:
a9:83:ef:e2:67:4c:fe:09:09:af:93:e6:1e:18:0b:
48:98:cd:30:cb:58:d5:7f:22:2b:5c:71:66:f0:41:
29:e0:14:8b:b3:62:f8:66:db:6b:53:33:d1:eb:f3:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FE:18:10:9A:C2:DA:23:68:E9:FA:71:10:07:8C:93:4A:E9:3F:78
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/uf4YEJrC2iNo6fpxEAeMk0rpP3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.128.0/21
31.130.144.0/20
77.50.0.0/16
77.233.192.0/19
77.243.96.0/20
81.17.144.0/20
91.204.128.0/22
94.141.160.0/19
185.185.140.0/22
IPv6:
2a00:e78::/33
2a00:e79::-2a00:e7b:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
be:ba:f4:02:5b:16:f7:eb:f9:19:31:23:80:29:d6:29:e5:44:
db:5a:c0:e7:f0:16:48:9f:f8:9d:99:00:ab:4c:33:d3:52:c7:
c7:8f:20:09:ed:88:f3:ae:0b:b6:57:60:db:0c:a9:8e:44:28:
b7:05:2d:07:96:ad:e4:4b:77:28:78:60:ea:36:22:e7:db:95:
4f:fb:51:b3:9e:06:f0:23:7f:90:e8:07:0f:39:1e:3d:34:98:
9f:c7:8d:e3:f2:d5:90:24:69:e5:e8:9d:54:0c:6b:c4:2e:14:
12:9f:f7:a3:f5:a7:b0:52:e0:63:a5:2c:71:61:d2:69:f5:e8:
19:6b:a0:42:54:86:2c:ba:c6:7b:0f:2f:43:cf:28:4e:42:a8:
0c:9e:50:fe:a7:97:c1:bc:b8:50:13:94:96:4b:9f:b3:c2:5f:
96:00:c8:41:e1:0c:54:29:d2:a7:26:2f:6e:bd:70:32:29:37:
e0:04:7d:c3:5b:99:d7:17:ed:5f:b9:85:4d:10:7e:0b:f8:d5:
44:2a:41:33:49:ea:c1:a9:01:03:12:6b:c0:cc:5a:5f:cf:00:
cd:d6:d9:96:93:7a:b2:09:61:45:26:4c:fd:16:36:ee:84:e4:
6a:09:49:93:f1:4d:42:d3:fc:5c:b9:8b:1a:b6:c5:03:80:0e:
b6:6a:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:06:12 2025 by rpki-client