Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/1wktyXo13sUHT1rATESg5FNiuyk.roa
File: 1wktyXo13sUHT1rATESg5FNiuyk.roa (raw, json)
Hash identifier: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=
Subject key identifier: D7:09:2D:C9:7A:35:DE:C5:07:4F:5A:C0:4C:44:A0:E4:53:62:BB:29
Certificate issuer: /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial: 019423D7F28CA40C907F613C13B0C9D1D255
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/1wktyXo13sUHT1rATESg5FNiuyk.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43567
IP address blocks: 31.25.200.0/21 maxlen: 21
37.157.24.0/22 maxlen: 22
37.157.28.0/23 maxlen: 23
37.157.30.0/24 maxlen: 24
77.73.88.0/22 maxlen: 22
77.73.92.0/24 maxlen: 24
77.73.93.0/24 maxlen: 24
77.73.94.0/24 maxlen: 24
188.164.136.0/21 maxlen: 21
188.164.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f2:8c:a4:0c:90:7f:61:3c:13:b0:c9:d1:d2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7092dc97a35dec5074f5ac04c44a0e45362bb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:4c:b2:43:26:63:1e:c8:54:14:a5:0a:a5:
5a:c9:a2:e7:2e:17:a9:da:80:65:f2:90:ee:af:a0:
1d:5f:5e:a7:09:69:0a:49:df:d0:de:ea:35:57:0b:
30:4d:7c:de:a7:8a:02:bc:07:3c:33:9d:8a:25:3e:
88:1c:2d:b3:97:61:eb:cc:b2:36:6f:83:ed:02:4e:
c9:aa:30:0c:32:0f:7a:0e:5e:24:9c:99:5b:7b:a1:
7c:be:ea:e4:8a:a9:67:83:ce:16:10:f0:84:e7:88:
58:10:ee:aa:4e:59:14:1d:b0:44:57:a8:b3:a4:a1:
76:ac:1a:a1:d2:1f:23:0a:f8:82:d9:6c:50:e6:b7:
7b:9a:c5:9a:80:b5:00:96:fb:9f:43:19:82:5a:2d:
6a:b6:73:9f:2a:36:e2:37:20:c5:bd:61:ea:a6:9e:
24:a1:af:ef:a7:dc:b7:2f:2d:be:53:8a:cb:74:94:
f3:9b:d3:b6:2a:86:4b:82:f7:b1:20:63:50:0a:0c:
3e:fd:98:0e:5c:ed:f3:2e:29:5f:23:f2:93:70:03:
0c:42:e2:ff:85:6e:a6:7c:1f:52:b6:95:2c:6d:5e:
a4:85:30:bb:d3:c9:56:82:70:17:d5:30:86:4d:32:
2a:c4:5c:4a:52:91:39:50:3e:8d:86:fc:f9:4a:dc:
d0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:2D:C9:7A:35:DE:C5:07:4F:5A:C0:4C:44:A0:E4:53:62:BB:29
X509v3 Authority Key Identifier:
keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/1wktyXo13sUHT1rATESg5FNiuyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.200.0/21
37.157.24.0-37.157.30.255
77.73.88.0-77.73.94.255
188.164.136.0/21
188.164.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b7:a9:b2:ad:3c:78:b1:95:5c:cb:6f:2c:cc:3b:7a:a4:18:7d:
78:85:b1:b0:5e:95:09:b3:39:20:1c:42:a5:83:94:95:ce:48:
2f:d1:0d:48:5f:7a:3c:4d:7d:d6:03:67:b3:9a:ef:1e:81:ee:
e3:16:41:d4:29:75:02:8c:26:d0:d6:d4:ef:16:5b:41:fa:3f:
71:32:f9:44:b1:56:75:42:d4:0e:5b:79:22:5e:84:82:7c:de:
91:f5:68:b0:fe:78:79:4e:c5:64:11:f0:a1:c8:a4:eb:e0:71:
71:98:2c:70:70:24:48:63:07:b6:d7:f3:3e:ed:13:21:c4:26:
a4:92:84:c2:42:73:7a:5d:27:2f:30:f1:7e:54:44:46:3c:8e:
d2:82:bf:84:ed:c4:26:6d:b0:31:38:3a:98:4d:4a:08:70:c7:
bd:62:85:52:79:b0:40:20:7c:80:43:b1:ac:4a:94:30:48:57:
f4:c7:ee:23:5e:ba:93:b7:43:d3:73:b7:af:2c:a3:76:37:4e:
1c:97:b4:c9:32:ba:b1:38:33:83:ee:cd:f8:0a:29:b7:78:31:
51:50:5c:54:d4:c3:66:75:1f:cd:9f:70:f1:67:f9:84:4e:2f:
96:4d:5c:a1:b8:f3:e2:2a:18:23:e2:c2:8f:f2:fe:e3:ef:54:
45:e4:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:24 2025 by rpki-client