Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KyZsEEYKX4u-Mzc8jZ76RC0Cc0c.roa
File: KyZsEEYKX4u-Mzc8jZ76RC0Cc0c.roa (raw, json)
Hash identifier: nN6jQsqf/fhslg+tuZJkS9AGSCC7VKbsy26LJ8Ovvys=
Subject key identifier: 2B:26:6C:10:46:0A:5F:8B:BE:33:37:3C:8D:9E:FA:44:2D:02:73:47
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0194221F6E696ABEED742C89A822131F13C8
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KyZsEEYKX4u-Mzc8jZ76RC0Cc0c.roa
Signing time: Wed 01 Jan 2025 13:47:52 +0000
ROA not before: Wed 01 Jan 2025 13:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 31.210.152.0/24 maxlen: 24
31.210.153.0/24 maxlen: 24
31.210.154.0/24 maxlen: 24
31.210.155.0/24 maxlen: 24
31.210.156.0/24 maxlen: 24
31.210.157.0/24 maxlen: 24
31.210.158.0/24 maxlen: 24
31.210.159.0/24 maxlen: 24
37.247.96.0/24 maxlen: 24
37.247.97.0/24 maxlen: 24
37.247.98.0/24 maxlen: 24
37.247.99.0/24 maxlen: 24
37.247.100.0/24 maxlen: 24
37.247.101.0/24 maxlen: 24
37.247.102.0/24 maxlen: 24
37.247.103.0/24 maxlen: 24
37.247.104.0/24 maxlen: 24
37.247.105.0/24 maxlen: 24
37.247.106.0/24 maxlen: 24
37.247.107.0/24 maxlen: 24
37.247.108.0/24 maxlen: 24
37.247.109.0/24 maxlen: 24
37.247.110.0/24 maxlen: 24
37.247.111.0/24 maxlen: 24
46.20.0.0/24 maxlen: 24
46.20.1.0/24 maxlen: 24
46.20.2.0/24 maxlen: 24
46.20.3.0/24 maxlen: 24
46.20.4.0/24 maxlen: 24
46.20.5.0/24 maxlen: 24
46.20.6.0/24 maxlen: 24
46.20.7.0/24 maxlen: 24
46.20.8.0/24 maxlen: 24
46.20.9.0/24 maxlen: 24
46.20.10.0/24 maxlen: 24
46.20.11.0/24 maxlen: 24
46.20.12.0/24 maxlen: 24
46.20.13.0/24 maxlen: 24
46.20.14.0/24 maxlen: 24
46.20.15.0/24 maxlen: 24
89.107.224.0/24 maxlen: 24
89.107.225.0/24 maxlen: 24
89.107.226.0/24 maxlen: 24
89.107.227.0/24 maxlen: 24
89.107.228.0/24 maxlen: 24
89.107.229.0/24 maxlen: 24
89.107.230.0/24 maxlen: 24
89.107.231.0/24 maxlen: 24
95.130.168.0/24 maxlen: 24
95.130.169.0/24 maxlen: 24
95.130.170.0/24 maxlen: 24
95.130.171.0/24 maxlen: 24
95.130.172.0/24 maxlen: 24
95.130.173.0/24 maxlen: 24
95.130.174.0/24 maxlen: 24
95.130.175.0/24 maxlen: 24
109.235.248.0/24 maxlen: 24
109.235.249.0/24 maxlen: 24
109.235.250.0/24 maxlen: 24
109.235.251.0/24 maxlen: 24
109.235.252.0/24 maxlen: 24
109.235.253.0/24 maxlen: 24
109.235.254.0/24 maxlen: 24
109.235.255.0/24 maxlen: 24
185.29.120.0/24 maxlen: 24
185.29.121.0/24 maxlen: 24
185.29.122.0/24 maxlen: 24
185.29.123.0/24 maxlen: 24
2a04:4280::/29 maxlen: 48
2a04:4280:10::/48 maxlen: 48
2a04:4280:100::/48 maxlen: 48
2a04:4280:200::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:6e:69:6a:be:ed:74:2c:89:a8:22:13:1f:13:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 1 13:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b266c10460a5f8bbe33373c8d9efa442d027347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:ec:13:be:2d:4f:76:96:f8:3c:5c:26:b9:
dc:81:c9:80:59:3d:d4:a2:46:d6:c2:71:c2:c6:c3:
f3:e6:01:e0:79:f4:36:fc:28:cd:4e:11:d2:81:95:
36:20:36:62:f5:fd:d8:03:8a:39:94:bc:78:17:df:
bb:ef:6c:6e:4f:9d:c0:7f:f3:1e:89:a0:b8:30:66:
fc:ea:75:3b:e4:5a:86:46:9c:34:99:c5:dd:07:6d:
5b:4b:b2:60:c3:61:82:17:50:71:87:28:32:a1:3b:
cd:cb:7e:e2:d2:b2:d6:5a:c4:c6:5e:d9:2d:89:03:
7a:d9:ed:47:7e:ff:a9:23:2a:cc:db:00:86:9d:81:
88:3c:bc:48:39:05:40:59:1b:cc:eb:f0:3f:f4:c0:
56:f3:54:df:c7:40:5a:8a:df:f2:fa:68:03:35:34:
6a:fd:ed:0e:7e:71:b1:7c:fd:b7:56:d5:08:09:4c:
18:3b:92:e0:4c:60:17:3f:8e:03:4f:3f:9a:08:ff:
a4:c4:1f:40:e2:59:f6:3c:2b:47:59:9e:33:f1:6d:
e5:cf:b8:cf:ea:73:49:9c:c4:fc:8d:3d:8e:a4:02:
0a:75:0b:8f:d4:cd:7d:67:df:2f:70:e9:09:09:ef:
2d:b8:47:17:10:4d:43:34:9b:d7:82:6a:03:69:d6:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:6C:10:46:0A:5F:8B:BE:33:37:3C:8D:9E:FA:44:2D:02:73:47
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/KyZsEEYKX4u-Mzc8jZ76RC0Cc0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.152.0/21
37.247.96.0/20
46.20.0.0/20
89.107.224.0/21
95.130.168.0/21
109.235.248.0/21
185.29.120.0/22
IPv6:
2a04:4280::/29
Signature Algorithm: sha256WithRSAEncryption
77:4b:49:a9:84:ff:30:86:4e:55:a9:0b:df:3e:aa:ed:dd:3a:
3f:b0:08:4f:1e:b8:13:6b:65:f6:a9:14:45:49:d8:b0:57:f3:
7e:0d:ea:f9:8d:1f:c9:55:14:e6:97:a4:74:99:f0:56:d4:f0:
e4:84:4a:fd:4d:9a:7d:be:2a:dc:c7:84:2a:65:77:32:d4:91:
56:a4:2c:fa:59:3f:af:9e:7e:fd:eb:a6:f7:3e:56:63:cc:2a:
bf:38:22:33:5b:02:1b:90:ca:3b:11:11:d6:c6:60:89:b3:c8:
56:db:3f:ed:3b:5f:4e:eb:f5:d1:c0:5f:7f:0e:f5:a2:a2:f3:
07:65:52:ee:6a:b0:61:bc:cb:cc:27:d5:18:75:2b:4b:a8:4d:
74:a4:02:b2:c8:30:b3:54:32:8d:3e:b3:4d:31:bd:7b:e5:68:
42:63:39:40:23:0b:e0:69:fe:d7:3d:44:58:0f:86:f5:57:02:
a7:bd:8e:04:55:87:24:6b:70:e9:97:12:f9:a8:f3:3c:a8:35:
d7:36:3a:23:fc:33:89:88:e0:8b:f1:89:20:71:75:13:42:9c:
1a:da:fe:08:a0:53:72:3c:00:e3:b9:ff:94:09:03:a4:4d:f3:
65:20:18:29:ba:39:ed:2e:e3:a6:7f:06:e1:79:d3:b3:82:90:
76:fa:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:53:53 2025 by rpki-client