Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/IDbbddFc14SqQa3mZmElYtVTmQY.roa
File: IDbbddFc14SqQa3mZmElYtVTmQY.roa (raw, json)
Hash identifier: 27Hv+jULUbGOWBtj+jEisHYpbRo4f4IxlnI8y0WtgFs=
Subject key identifier: 20:36:DB:75:D1:5C:D7:84:AA:41:AD:E6:66:61:25:62:D5:53:99:06
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 0194258E6486B7401329C8FDA1D24230547E
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/IDbbddFc14SqQa3mZmElYtVTmQY.roa
Signing time: Thu 02 Jan 2025 05:47:56 +0000
ROA not before: Thu 02 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25184
IP address blocks: 31.14.112.0/20 maxlen: 24
31.47.32.0/19 maxlen: 24
46.102.128.0/20 maxlen: 24
78.109.192.0/20 maxlen: 24
79.175.128.0/18 maxlen: 24
80.75.0.0/20 maxlen: 24
81.90.144.0/20 maxlen: 24
86.104.32.0/20 maxlen: 24
93.113.224.0/20 maxlen: 24
185.3.124.0/22 maxlen: 24
217.11.16.0/20 maxlen: 24
2a03:4680::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:64:86:b7:40:13:29:c8:fd:a1:d2:42:30:54:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Jan 2 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2036db75d15cd784aa41ade666612562d5539906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:ac:4d:d2:1e:91:37:41:db:ad:a4:e2:fe:
34:53:37:f5:c5:ae:60:04:d0:6c:cf:54:ef:cc:85:
98:d8:1c:78:d7:6c:85:37:64:6a:30:05:45:79:8c:
b8:38:58:92:e0:5b:d6:c7:19:27:8b:01:63:34:a3:
95:85:91:6d:20:07:02:57:94:fb:d8:71:19:60:2a:
18:a3:6b:db:d3:8e:bd:a5:a1:5d:8a:88:85:73:f5:
c4:84:b4:e2:47:b0:c0:79:e2:84:dc:46:42:ad:f7:
7c:c0:4b:6e:74:6b:6e:77:a4:0c:5f:07:c0:47:6c:
ea:28:5d:14:8f:e3:6b:19:54:8a:e6:50:c0:b6:9b:
36:48:8d:fa:11:9e:f6:71:e3:08:fc:c5:9e:b2:1f:
9c:34:37:fa:78:eb:ce:f2:b3:3e:72:b0:c5:e1:a0:
c2:aa:4d:ad:87:d5:43:67:78:76:98:b4:d3:b0:41:
26:32:3e:10:ed:d3:72:8d:cb:94:a1:1c:ac:53:fb:
ea:d2:e0:86:0d:8e:7a:4c:c0:d6:52:df:df:be:56:
32:22:54:bd:b2:15:bf:64:8e:da:82:47:79:65:8e:
28:76:86:a8:dd:82:36:5a:ab:7f:23:16:52:9b:39:
2f:12:2b:3e:33:87:af:86:16:58:fa:30:b2:1d:08:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:DB:75:D1:5C:D7:84:AA:41:AD:E6:66:61:25:62:D5:53:99:06
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/IDbbddFc14SqQa3mZmElYtVTmQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.112.0/20
31.47.32.0/19
46.102.128.0/20
78.109.192.0/20
79.175.128.0/18
80.75.0.0/20
81.90.144.0/20
86.104.32.0/20
93.113.224.0/20
185.3.124.0/22
217.11.16.0/20
IPv6:
2a03:4680::/29
Signature Algorithm: sha256WithRSAEncryption
5f:c9:cb:0f:08:d2:11:a5:c9:e5:b8:b4:e2:6b:b5:ec:52:d8:
7a:db:c1:80:ea:de:8d:e4:22:68:56:91:41:4b:eb:26:a0:71:
6e:da:8f:0e:f2:0f:cd:b5:64:83:92:66:b1:5f:36:65:1d:1e:
6b:92:68:e4:85:37:e3:6d:52:10:9e:14:1f:5a:a1:e5:17:bd:
21:cc:88:7e:23:f4:11:4e:bd:f3:3f:d1:e5:de:bc:07:72:8c:
aa:a8:d8:81:b6:80:86:a4:51:cd:b7:31:2b:50:09:c4:38:a4:
d7:f2:05:a7:7e:2d:d3:bd:ce:1b:64:2c:51:31:6c:96:a4:f8:
26:7e:08:58:da:7e:c5:ca:cf:bc:11:ac:f0:8c:3a:4b:6c:44:
db:fb:cc:67:d0:cb:41:e2:69:28:c8:7b:12:da:6b:87:02:dc:
07:f5:1f:3c:ee:e6:58:3b:ee:3a:5a:34:35:59:73:10:0b:f0:
8e:99:e0:b0:4d:9f:2b:1c:06:e5:a6:86:1a:56:76:0c:b6:53:
0e:05:c7:a9:11:44:9f:41:4d:62:f7:d7:4a:ad:0f:09:1a:d5:
2d:3c:db:20:c5:b1:66:92:35:bf:f1:27:c2:c7:52:82:64:12:
46:61:82:70:6c:0e:3c:fc:b4:c4:5a:ba:9a:70:5b:ac:46:38:
52:db:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:07:13 2025 by rpki-client