Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/rVIEtQUeZ960hMeEwx6AF679dhM.roa
File: rVIEtQUeZ960hMeEwx6AF679dhM.roa (raw, json)
Hash identifier: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=
Subject key identifier: AD:52:04:B5:05:1E:67:DE:B4:84:C7:84:C3:1E:80:17:AE:FD:76:13
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019420D5D252C777542163BE35EEEBE576B5
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/rVIEtQUeZ960hMeEwx6AF679dhM.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204326
IP address blocks: 31.132.40.0/22 maxlen: 24
171.22.92.0/22 maxlen: 24
185.18.240.0/22 maxlen: 24
2a04:d00::/29 maxlen: 48
2a09:3cc0::/29 maxlen: 48
2a0d:9f40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:52:c7:77:54:21:63:be:35:ee:eb:e5:76:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad5204b5051e67deb484c784c31e8017aefd7613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:f2:a1:c5:17:31:41:d3:5b:fc:8a:33:cd:
21:21:8d:9e:0a:d6:dc:9b:6a:3d:9e:bb:99:89:29:
24:c3:e0:c5:c8:b0:d1:a0:fe:34:93:82:18:31:8a:
d2:66:e0:dd:b1:3a:8e:a3:7c:57:75:7d:47:58:b4:
53:67:3e:94:f9:9a:d4:37:4a:c3:45:79:07:59:fb:
cd:e0:41:90:e4:22:ca:dd:39:fe:96:6b:7f:70:8a:
63:a6:6f:5a:b4:0d:4f:72:b1:8c:39:f2:ec:7f:8c:
6a:43:ac:2f:d5:37:9f:25:8f:5c:63:75:f5:eb:1b:
4f:57:d9:48:8b:25:14:f8:58:9c:39:60:4b:b6:90:
00:e8:10:e9:54:ed:47:0d:33:28:50:05:27:eb:5b:
f6:1f:70:b6:17:22:3e:42:67:75:9a:41:d7:6b:6c:
f2:c2:b8:20:63:48:25:a4:14:8c:e6:41:a4:60:21:
d6:9a:27:72:6b:bb:3e:e4:0f:7b:95:83:72:83:fd:
7f:4e:2d:46:0f:86:a9:41:e1:6e:77:f9:07:f9:fa:
bb:65:f1:52:bc:28:e3:fc:85:bc:29:bf:73:9d:7f:
71:7e:d4:62:bb:62:fe:7e:57:b8:e8:87:52:87:6c:
fd:22:db:ce:dc:74:f9:71:52:3b:d0:06:41:3d:f4:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:04:B5:05:1E:67:DE:B4:84:C7:84:C3:1E:80:17:AE:FD:76:13
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/rVIEtQUeZ960hMeEwx6AF679dhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.40.0/22
171.22.92.0/22
185.18.240.0/22
IPv6:
2a04:d00::/29
2a09:3cc0::/29
2a0d:9f40::/29
Signature Algorithm: sha256WithRSAEncryption
b7:6b:9d:20:dc:d5:94:ed:58:5e:20:9c:5e:62:17:52:85:f2:
09:16:52:af:ce:54:64:fb:f5:12:6a:2a:d5:d7:32:8e:71:10:
67:a8:90:9e:5d:59:99:e6:45:3d:03:65:81:b4:eb:9d:e2:9b:
c7:5b:88:47:29:f9:ee:8b:45:a4:08:85:9e:4e:27:e7:19:18:
a1:d5:09:0f:01:25:55:ab:d6:bf:7c:ee:0e:f6:5a:48:39:8a:
45:f4:14:ea:b3:f9:e1:6e:05:96:01:2c:a2:25:44:8b:8c:68:
a5:0f:b3:8f:aa:3c:18:77:94:3a:97:10:22:38:a3:cd:4f:11:
80:cb:06:39:bd:30:18:51:f5:e8:55:b8:d6:31:2d:ad:ef:bf:
3b:70:ad:36:46:4f:8a:3e:0b:4d:19:9d:69:8e:2d:09:82:b2:
0e:7e:09:01:fc:4c:d0:b7:a5:1e:77:64:b6:cd:97:64:01:ae:
cc:95:ac:8f:e0:88:6b:47:36:5a:9d:e7:6a:dc:19:92:30:34:
09:8e:76:09:b6:ba:65:e3:ae:58:30:4f:63:92:91:67:f3:9b:
0e:a1:b2:6f:1b:59:f8:0e:bd:56:5d:3a:76:20:d6:bf:d9:73:
31:10:2f:f0:37:cc:93:63:b7:40:ba:7f:59:68:db:54:92:75:
f7:96:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:39 2025 by rpki-client