Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ymgEz60H5B-ezog8RgufDqIOe4s.roa
File: ymgEz60H5B-ezog8RgufDqIOe4s.roa (raw, json)
Hash identifier: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=
Subject key identifier: CA:68:04:CF:AD:07:E4:1F:9E:CE:88:3C:46:0B:9F:0E:A2:0E:7B:8B
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0194258FBD8E0C8D91EAF9907CE09FADBD6C
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ymgEz60H5B-ezog8RgufDqIOe4s.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47448
IP address blocks: 31.222.60.0/24 maxlen: 24
31.222.61.0/24 maxlen: 24
31.222.62.0/24 maxlen: 24
31.222.63.0/24 maxlen: 24
93.191.192.0/24 maxlen: 24
93.191.193.0/24 maxlen: 24
93.191.196.0/24 maxlen: 24
93.191.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:8e:0c:8d:91:ea:f9:90:7c:e0:9f:ad:bd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca6804cfad07e41f9ece883c460b9f0ea20e7b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:05:6a:fa:94:34:34:2d:9a:88:5f:fa:45:
7c:67:82:a3:c0:43:a5:20:09:4e:1c:01:b4:db:84:
bc:df:8c:89:26:7d:51:76:89:d4:dc:92:a5:56:ca:
04:70:02:3d:21:36:c4:d8:42:95:e1:f5:26:a5:03:
bc:2f:d9:7b:35:8a:83:d1:8b:51:4f:04:ad:38:80:
11:52:2e:af:f2:32:1c:f4:10:b1:6f:53:be:68:a6:
17:76:d9:11:0f:00:b3:dd:f3:5d:fd:38:74:11:12:
22:a3:ca:92:ba:9d:4b:1f:d9:50:77:47:4d:4a:bd:
8e:11:7b:94:34:37:b6:59:0f:ca:84:a1:7c:ee:d9:
b7:bf:87:66:07:87:f0:41:67:42:dd:9d:39:21:5d:
4f:28:94:4e:1d:f4:16:ec:0a:de:b0:46:2f:14:d7:
76:ad:da:6f:f2:10:53:9f:10:f3:9c:43:5f:df:5b:
0c:35:c7:7d:83:7f:b9:cb:87:5b:b0:26:9d:a5:83:
f4:a9:e8:20:f2:f6:2e:3c:cb:b9:66:e6:fe:a6:9d:
e0:e4:b1:74:94:2b:98:b4:68:39:00:44:81:5c:03:
39:bd:75:be:a7:b7:bd:b6:cf:35:60:ba:ae:12:db:
35:7c:5a:26:1c:91:26:9f:19:e4:46:c8:70:43:1d:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:04:CF:AD:07:E4:1F:9E:CE:88:3C:46:0B:9F:0E:A2:0E:7B:8B
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/ymgEz60H5B-ezog8RgufDqIOe4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.60.0/22
93.191.192.0/23
93.191.196.0/24
93.191.199.0/24
Signature Algorithm: sha256WithRSAEncryption
74:14:0d:1f:d5:f4:40:7e:64:b7:fd:76:4b:c4:c0:06:26:ea:
34:af:61:0c:7b:4a:72:04:ca:05:c1:5d:6b:43:23:70:9c:13:
7a:87:66:ed:a9:3d:2d:9e:a5:55:80:d6:14:1b:bd:ba:1a:72:
5b:3c:4c:0d:87:24:de:86:07:4b:a1:be:5d:92:96:26:7e:d0:
da:fc:6f:17:1e:3d:59:3d:da:4d:19:98:d7:96:85:1d:2b:93:
68:de:f4:72:a6:a6:f0:d6:60:7b:7e:9a:61:57:de:ca:aa:21:
d2:56:b6:6e:2e:b0:cc:14:2f:08:60:22:07:a4:d7:9e:99:82:
8f:d1:c8:5f:32:a3:75:5f:14:f8:c7:f3:90:e7:3a:7a:1a:38:
46:ef:e2:4c:7b:88:41:29:1f:ed:3a:bb:3f:e8:6f:81:52:fc:
47:a6:21:14:23:aa:cd:b7:67:dc:f8:b8:22:e4:01:92:ee:21:
84:c5:ec:62:b3:d3:09:1c:1b:c8:7b:a5:57:71:28:bc:7d:62:
66:e4:4a:7a:9e:8c:76:7b:f5:cd:72:49:88:16:a5:4c:76:b0:
fb:a9:c6:6e:42:38:61:f6:10:90:5e:b7:cb:e8:44:09:ae:a6:
8a:91:37:81:50:60:7d:f3:aa:7b:bc:f6:0c:09:da:d3:fa:b0:
ec:c4:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:23 2025 by rpki-client