Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa
File: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (raw, json)
Hash identifier: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=
Subject key identifier: 78:0B:7D:21:9E:4E:AF:AF:FC:E1:9A:5C:3A:03:EF:AE:18:F5:30:9E
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0194258F4F3BAF85AA1FE1061A1D3FF295CE
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19624
IP address blocks: 31.14.40.0/23 maxlen: 23
89.39.149.0/24 maxlen: 24
185.105.4.0/23 maxlen: 23
185.105.6.0/24 maxlen: 24
2a01:4ce0::/32 maxlen: 32
2a01:4ce0:61::/48 maxlen: 48
2a01:4ce0:161::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4f:3b:af:85:aa:1f:e1:06:1a:1d:3f:f2:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=780b7d219e4eafaffce19a5c3a03efae18f5309e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:ac:a2:c8:28:05:cf:13:06:7b:e0:dd:e3:
36:b9:14:85:57:e3:26:94:ad:5b:23:79:c5:af:70:
1b:5a:16:f8:6b:23:93:b1:00:53:fa:26:bd:45:18:
23:e4:a2:2b:ea:8f:19:8f:cc:e1:d9:81:5a:56:45:
07:95:a6:3b:e6:48:d3:e7:fe:ed:79:b5:46:00:70:
5a:f8:b2:77:b0:be:c4:61:48:f0:b2:88:d9:60:29:
c5:de:8e:db:00:4f:de:ef:40:f4:8d:a3:c4:a8:f0:
e5:c5:b3:ee:d9:c4:ff:05:c8:ff:80:f0:62:80:3f:
88:f8:fe:c5:5b:a4:c2:85:68:58:a4:ce:50:49:76:
91:c3:ab:48:6e:09:9e:c1:d7:43:87:be:e6:b7:ec:
21:a4:5d:ce:48:06:eb:bc:11:ee:ee:7b:ee:a1:51:
0b:4e:7a:35:0c:46:27:62:d8:89:ad:19:da:77:7f:
18:52:63:2f:3b:8f:fa:4c:9a:37:ac:9f:22:01:f1:
46:4d:fc:b0:df:2f:16:d2:e4:78:62:5b:ee:c1:57:
fd:17:2d:be:3a:04:c3:46:a1:f1:2b:b0:c5:87:af:
5b:6b:1b:48:2d:46:07:bd:87:65:b8:cf:01:20:11:
98:7b:a2:7c:21:9b:1c:bc:df:93:53:4f:6c:5b:44:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0B:7D:21:9E:4E:AF:AF:FC:E1:9A:5C:3A:03:EF:AE:18:F5:30:9E
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.40.0/23
89.39.149.0/24
185.105.4.0-185.105.6.255
IPv6:
2a01:4ce0::/32
Signature Algorithm: sha256WithRSAEncryption
59:94:d9:f8:9f:4d:c8:99:be:20:ca:eb:71:9b:de:49:0c:c1:
6c:91:ae:b9:15:b8:cc:b2:64:77:8d:1c:ab:d0:4b:ba:fc:8e:
c0:41:d1:df:bb:37:db:3a:2d:f7:b3:f2:ac:af:a9:43:42:fe:
66:b7:af:1c:ba:3a:8b:a8:c6:8e:37:c5:5e:51:f4:73:42:63:
9a:35:11:fa:62:47:4f:c1:82:48:50:24:91:1b:fe:84:fc:cf:
4f:ec:04:f0:bb:9f:80:81:cf:27:d6:58:7c:4c:82:d4:b7:30:
7e:6b:d3:3f:43:d2:aa:4b:61:a1:d3:49:a4:1e:74:5c:d1:50:
e0:ed:60:c5:9a:db:f8:5b:dc:05:23:86:79:f2:23:c6:f8:72:
45:23:67:5e:ff:76:3b:5b:3c:84:2b:0d:aa:b1:6c:6f:1f:2e:
88:91:d9:fb:bc:d6:93:8c:04:eb:ec:d2:1f:f3:6c:c4:a4:9c:
bb:cd:df:d8:d2:9c:f8:25:a4:70:4e:09:0c:33:e8:8c:2e:04:
4a:51:29:e7:1d:85:59:5a:d2:4d:91:25:ce:03:42:55:12:e4:
8a:56:83:93:dc:17:3e:19:2d:cc:53:58:d4:e6:b1:a1:7a:84:
0b:e6:79:60:f3:ee:0d:bf:d9:bd:8c:ee:1a:d9:32:f4:50:ce:
96:48:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:56:42 2025 by rpki-client