Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/4to_68QAA5EZP6QVD93278mKQ9M.roa
File: 4to_68QAA5EZP6QVD93278mKQ9M.roa (raw, json)
Hash identifier: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=
Subject key identifier: E2:DA:3F:EB:C4:00:03:91:19:3F:A4:15:0F:DD:F6:EF:C9:8A:43:D3
Certificate issuer: /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial: 0194228DC1F57C67DEBB31871F79E8AD8F55
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/4to_68QAA5EZP6QVD93278mKQ9M.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50245
IP address blocks: 31.133.208.0/20 maxlen: 24
62.122.168.0/21 maxlen: 24
91.227.144.0/22 maxlen: 24
91.229.94.0/24 maxlen: 24
109.206.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c1:f5:7c:67:de:bb:31:87:1f:79:e8:ad:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2da3febc4000391193fa4150fddf6efc98a43d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:1c:2f:f2:8e:07:65:51:32:dd:3f:6b:a4:
8a:8e:0e:6b:9c:85:b4:04:b9:c4:c9:85:1a:d0:b2:
f7:4c:67:e4:e2:a2:f4:b9:57:fc:15:89:95:d9:d3:
db:5b:f7:32:27:e2:bc:53:50:36:bc:45:d3:ce:06:
01:ec:ac:2c:7f:10:39:fb:08:e0:e3:27:0a:81:01:
2b:04:47:5b:9d:ea:e7:c1:05:f4:57:27:b8:6b:70:
c3:54:7a:d5:1f:b4:52:6d:1f:30:67:e6:81:c2:df:
cd:57:25:6f:9f:40:e0:ed:22:b0:5f:1b:b1:7c:3f:
4c:d9:89:33:79:d6:7f:ab:b9:19:8b:a1:79:ab:ff:
1b:07:80:93:70:4b:18:e0:6b:3f:9e:72:7b:cc:50:
45:27:3b:c2:f8:86:e0:fa:14:3a:11:d2:f7:1e:5f:
4e:a6:54:cc:a7:32:bb:9a:1e:ed:b4:92:36:55:e7:
12:ab:a3:25:9f:74:99:34:49:d3:26:23:50:29:79:
36:5f:3b:6f:b7:d3:7f:8f:c6:1b:68:39:9d:fe:a9:
d7:9e:ec:3c:5d:26:71:31:e6:1d:25:62:f3:da:8d:
26:7a:2e:bf:13:ed:85:8e:97:e6:6e:9c:db:d0:b5:
f1:13:fe:7e:6e:7e:38:f7:fd:52:d5:33:a0:d2:37:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DA:3F:EB:C4:00:03:91:19:3F:A4:15:0F:DD:F6:EF:C9:8A:43:D3
X509v3 Authority Key Identifier:
keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/4to_68QAA5EZP6QVD93278mKQ9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.208.0/20
62.122.168.0/21
91.227.144.0/22
91.229.94.0/24
109.206.160.0/19
Signature Algorithm: sha256WithRSAEncryption
18:31:3b:fd:95:4e:1f:b2:fc:7c:64:f2:51:2d:21:97:94:4b:
77:e3:73:35:da:63:d9:0e:e6:41:8c:1f:db:7c:60:d3:85:72:
c1:fd:0e:2f:0a:bb:f8:e6:3f:5b:12:eb:e5:f6:06:08:a7:32:
10:8f:f8:96:43:c9:2b:57:85:02:59:33:f9:e4:62:25:04:be:
83:4f:8d:62:44:b1:84:b4:3d:f5:7b:2f:c2:92:fa:14:95:2f:
c5:28:32:08:3c:b3:f2:0b:83:7a:7f:66:83:0b:8d:89:d5:d3:
db:fc:07:f3:a3:91:85:fb:84:38:93:46:7f:3c:4e:22:c2:83:
30:04:5c:6e:55:66:5d:af:70:25:38:45:db:14:29:fa:bb:41:
5c:46:fa:28:32:90:c2:08:06:38:60:ef:be:86:25:e7:7e:dc:
cc:9c:a4:b7:8e:76:a1:0b:fe:2e:6a:db:41:ff:e0:0d:92:85:
ae:a1:5f:68:5f:d6:95:08:7e:fb:89:5e:16:70:9b:1e:a6:2a:
02:3f:d8:ea:68:94:28:59:7f:9b:05:ce:fe:13:38:81:f3:35:
0a:56:0c:bb:ee:c8:02:33:b8:8d:e7:f9:00:43:33:a2:6f:a3:
89:db:bd:2f:3e:e4:bd:ee:cc:52:83:f2:cb:86:b4:e4:2c:1e:
13:53:0b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:14 2025 by rpki-client