Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/p-ZJ1P4FI04x2eM9uqiHkn3hI8I.roa
File: p-ZJ1P4FI04x2eM9uqiHkn3hI8I.roa (raw, json)
Hash identifier: AqpTiKP7a5JtH+C4uYjUrneVtWd73sQjp2S20QK+heA=
Subject key identifier: A7:E6:49:D4:FE:05:23:4E:31:D9:E3:3D:BA:A8:87:92:7D:E1:23:C2
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019422203DF40FE79113B0E8470EDF002A2B
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/p-ZJ1P4FI04x2eM9uqiHkn3hI8I.roa
Signing time: Wed 01 Jan 2025 13:48:45 +0000
ROA not before: Wed 01 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56547
IP address blocks: 31.24.232.0/21 maxlen: 21
31.24.232.0/24 maxlen: 24
31.24.233.0/24 maxlen: 24
31.24.234.0/24 maxlen: 24
31.24.235.0/24 maxlen: 24
31.24.236.0/24 maxlen: 24
31.24.237.0/24 maxlen: 24
31.24.238.0/24 maxlen: 24
31.24.239.0/24 maxlen: 24
185.69.108.0/22 maxlen: 22
185.69.108.0/24 maxlen: 24
185.69.109.0/24 maxlen: 24
185.69.110.0/24 maxlen: 24
185.69.111.0/24 maxlen: 24
185.76.248.0/22 maxlen: 22
185.76.248.0/24 maxlen: 24
185.76.249.0/24 maxlen: 24
185.76.250.0/24 maxlen: 24
185.76.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3d:f4:0f:e7:91:13:b0:e8:47:0e:df:00:2a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7e649d4fe05234e31d9e33dbaa887927de123c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:1a:9f:4e:d4:a6:7a:f8:1a:ef:2e:4b:24:
f6:8c:d4:3b:c6:1f:8e:e4:b9:bd:48:30:cc:32:08:
d8:fc:28:36:0f:b4:c2:5f:c1:25:9b:bb:6e:07:d1:
ee:be:ba:4d:09:84:e0:38:5e:0a:db:40:e5:82:ee:
6a:3f:62:07:5e:d0:21:3e:77:0f:aa:b0:9a:12:46:
ce:f5:07:55:4d:95:d3:b8:47:fc:b1:9f:5d:80:28:
c5:26:48:77:53:d6:aa:c0:73:f3:da:d1:35:01:80:
1b:f7:e7:8f:52:84:4a:54:7b:b4:0e:80:a4:2a:51:
73:7e:58:84:5f:40:84:e3:3b:c5:e5:0d:de:3f:b8:
4c:70:f7:52:32:c9:fa:89:b0:da:7c:f1:26:ee:f8:
d5:0c:9c:93:ce:10:3e:99:2b:53:7d:06:2d:0e:c8:
7d:67:63:55:6f:a5:27:2b:1f:4c:8f:99:75:5e:b8:
99:66:a0:06:3f:98:88:6c:94:c1:94:ac:ed:6c:16:
fe:16:eb:35:98:7d:71:5e:2d:d2:bd:70:86:8a:51:
f5:3a:89:da:c1:d4:4c:83:3e:1a:83:09:1b:b8:c1:
f0:c5:45:05:31:b0:98:65:0a:84:31:cc:95:f4:1a:
9a:c1:a0:b6:0f:e9:6a:fb:99:ac:25:84:41:86:ac:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:49:D4:FE:05:23:4E:31:D9:E3:3D:BA:A8:87:92:7D:E1:23:C2
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/p-ZJ1P4FI04x2eM9uqiHkn3hI8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.232.0/21
185.69.108.0/22
185.76.248.0/22
Signature Algorithm: sha256WithRSAEncryption
67:91:c9:fe:f3:e0:65:d5:85:31:ab:d9:e2:bf:b8:d1:7a:01:
1d:45:35:b3:be:98:b0:c1:78:eb:4a:b2:46:64:80:b5:2b:d6:
90:a5:b0:fc:0c:c5:08:c8:f2:a6:43:28:bd:e5:76:da:23:be:
26:66:6c:3a:a0:b3:e2:88:bc:40:ab:50:17:24:33:1f:93:fb:
48:c7:39:9f:df:da:49:34:0c:d0:62:dc:b5:8f:ec:a8:91:83:
10:1f:cf:f2:e8:f8:95:d2:17:36:0e:fd:a9:6c:1c:89:b5:63:
6f:1a:23:05:df:7a:c3:6c:e0:22:67:37:cd:e8:ef:05:ba:38:
b0:42:71:23:c1:95:c7:ae:16:bb:bc:c5:3a:6c:51:be:53:0f:
d5:53:5f:a5:f7:7d:d1:63:18:a0:de:a4:00:a7:b1:e2:f4:f6:
2d:90:91:60:de:85:53:c9:67:d0:a2:19:9f:7a:9b:a9:24:0d:
f4:e2:30:e5:b1:cf:0c:bd:4a:5e:b3:cb:7f:f9:03:4b:41:7d:
f7:9a:eb:f5:d4:5f:e8:fd:f1:33:f3:dd:1f:c9:92:a5:55:91:
5c:9a:b9:ba:8d:c9:d8:4f:43:54:3d:d8:dc:38:86:e1:fb:e4:
20:1e:78:17:9c:27:ff:5e:c5:15:9b:0a:61:bf:99:55:e2:89:
70:cb:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:36 2025 by rpki-client