Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/eapnCFn6U2h-NLlJ7vSLBuRvEVM.roa
File: eapnCFn6U2h-NLlJ7vSLBuRvEVM.roa (raw, json)
Hash identifier: TFta5fyzf9Cv7Mo6ywK3kQk29n4ARyKOIODJBa+MuTg=
Subject key identifier: 79:AA:67:08:59:FA:53:68:7E:34:B9:49:EE:F4:8B:06:E4:6F:11:53
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0194A739BCF022C73BA43769DA079F31F555
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/eapnCFn6U2h-NLlJ7vSLBuRvEVM.roa
Signing time: Mon 27 Jan 2025 10:06:06 +0000
ROA not before: Mon 27 Jan 2025 10:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42910
IP address blocks: 31.210.46.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
31.210.51.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.54.0/24 maxlen: 24
77.92.148.0/24 maxlen: 24
188.132.170.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.227.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
212.68.36.0/24 maxlen: 24
212.68.49.0/24 maxlen: 24
212.68.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:39:bc:f0:22:c7:3b:a4:37:69:da:07:9f:31:f5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 27 10:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79aa670859fa53687e34b949eef48b06e46f1153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:cc:97:73:74:ad:97:aa:21:19:ca:2a:2d:
5f:0f:7b:5f:85:a1:e0:65:97:0b:87:c7:ba:68:48:
e1:aa:d6:29:f9:23:dc:a4:92:83:77:fa:81:33:38:
cb:ff:51:6c:df:62:f8:b3:8d:e2:02:69:0a:8a:a7:
54:5a:e7:d6:73:22:cb:c6:f9:66:5c:b5:93:78:e1:
5b:4e:35:85:48:33:8f:cd:67:40:a6:34:73:79:8c:
87:ae:30:5b:1e:fc:8c:fc:a2:d2:e0:b7:e7:29:b7:
a9:3c:b9:9d:87:6e:3d:36:5b:a4:98:8a:73:41:c4:
a8:6b:f4:fe:17:c5:c9:26:70:55:f8:f9:fb:e7:f2:
12:5f:b7:12:0e:da:66:7c:bf:b5:a8:c8:9c:59:3c:
b1:e0:f2:5b:43:c0:48:af:2d:89:cf:be:90:72:90:
4e:31:23:80:f6:ec:f1:48:b4:0b:e8:85:bf:fe:fe:
59:df:62:87:90:0f:37:b4:70:bc:4c:65:7f:12:17:
c0:ea:74:c2:d7:78:33:0a:39:86:bf:c6:93:b8:d6:
ff:c2:a4:c5:4d:d1:4f:3b:1b:1b:b6:7b:2f:a8:66:
f8:7c:86:42:cb:b0:60:dc:6d:2b:06:a1:b6:2d:c1:
da:3f:2d:f5:fd:d2:75:49:fb:35:47:a2:02:f5:7c:
42:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:67:08:59:FA:53:68:7E:34:B9:49:EE:F4:8B:06:E4:6F:11:53
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/eapnCFn6U2h-NLlJ7vSLBuRvEVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.46.0/24
31.210.50.0/23
31.210.53.0-31.210.54.255
77.92.148.0/24
188.132.170.0/24
188.132.191.0/24
188.132.215.0/24
188.132.227.0-188.132.229.255
212.68.36.0/24
212.68.49.0/24
212.68.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9e:68:6a:c1:6b:63:51:60:14:c6:6b:c1:8c:70:24:db:0d:
76:22:04:1a:8c:2b:76:27:3e:ee:18:38:32:27:af:a4:8e:0f:
a0:9d:80:33:df:ba:e3:90:ca:35:e3:79:a9:64:08:32:80:19:
59:c8:a5:21:28:6c:e7:2b:9a:55:05:11:94:1b:23:b0:ac:af:
61:9e:75:c7:cb:17:2d:31:92:6c:b9:a2:54:32:9b:a1:ce:e7:
c4:90:ba:c2:34:ec:b8:e7:bb:2b:e2:c4:db:08:a1:97:fd:72:
73:72:72:8d:08:1d:cc:9b:43:22:a6:46:82:46:d0:b6:d9:ed:
2b:8c:6b:62:72:bc:9f:4d:c0:b1:3e:ec:ca:b8:ba:d4:7a:7a:
28:8e:d5:0f:a4:36:c7:0c:81:20:2c:4c:01:e5:1a:e5:9b:0a:
15:0c:8c:23:fe:a2:66:55:0b:dc:d6:48:43:8f:6a:11:be:d8:
0b:93:79:ba:22:aa:18:97:77:a8:2b:54:c5:bc:67:be:4e:70:
7f:7e:f6:b3:c9:32:c5:6c:4b:d1:6f:36:dd:3c:af:c8:19:30:
86:ea:85:e8:63:90:2b:4d:93:74:02:9c:01:2b:01:4a:07:cc:
e7:f2:68:28:f2:ed:2b:41:76:f4:f7:f0:a3:f6:92:46:eb:f5:
66:f4:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:28 2025 by rpki-client