Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S2o3e74D1pd2eN8rjuNqefdgQiI.roa
File: S2o3e74D1pd2eN8rjuNqefdgQiI.roa (raw, json)
Hash identifier: tfZw9pA+sAp0mxsmTP2bz7LgN4jb313+CjFYPdnXInI=
Subject key identifier: 4B:6A:37:7B:BE:03:D6:97:76:78:DF:2B:8E:E3:6A:79:F7:60:42:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428233D00547F43891833AAD01043390C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S2o3e74D1pd2eN8rjuNqefdgQiI.roa
Signing time: Thu 02 Jan 2025 17:49:45 +0000
ROA not before: Thu 02 Jan 2025 17:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.180.0/22 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/22 maxlen: 24
31.56.192.0/22 maxlen: 24
31.56.196.0/22 maxlen: 24
31.56.204.0/22 maxlen: 24
31.56.208.0/22 maxlen: 24
31.56.212.0/22 maxlen: 24
31.56.216.0/22 maxlen: 24
31.56.220.0/22 maxlen: 24
31.56.224.0/22 maxlen: 24
31.56.228.0/22 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.236.0/22 maxlen: 24
31.58.36.0/22 maxlen: 24
31.58.44.0/22 maxlen: 24
31.58.52.0/22 maxlen: 24
31.58.60.0/22 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.196.0/22 maxlen: 24
31.59.200.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
31.59.212.0/22 maxlen: 24
31.59.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:3d:00:54:7f:43:89:18:33:aa:d0:10:43:39:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b6a377bbe03d6977678df2b8ee36a79f7604222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:de:39:85:7c:55:e0:c2:75:d4:d2:dc:ce:
7b:06:d9:78:24:6a:1c:d9:82:ff:0f:35:21:ec:47:
ff:61:3d:4f:84:26:09:e8:9b:53:18:35:6c:27:d9:
05:d8:66:00:1e:c5:7a:a0:eb:04:11:32:1b:dd:f0:
b9:84:79:51:f6:06:a0:aa:8b:b1:81:82:e0:9d:aa:
eb:6b:c7:f5:e1:67:46:fa:eb:30:91:d1:91:c5:e9:
8f:db:cc:29:bd:5f:4d:18:54:b7:40:3d:a5:bf:6c:
16:4d:ff:fa:7e:97:53:00:7f:37:9f:e8:6f:18:cf:
b4:79:c2:5b:ad:3d:e8:83:d5:ed:28:32:37:dd:60:
5b:cb:bd:73:b4:d4:03:23:07:79:ca:47:db:e2:62:
46:8f:5c:5d:37:22:89:e5:c2:0d:59:68:a3:85:f3:
7a:ec:e0:7e:be:bf:6d:ce:fe:bd:c1:94:f6:de:ee:
c3:3d:cf:c5:d6:8f:e9:f5:18:55:09:ba:c3:3f:57:
45:40:92:8f:b6:54:7a:06:a7:3d:9b:e8:d0:93:2e:
08:e2:a8:e6:a5:f1:c3:ef:e3:4d:6c:b8:ac:07:83:
cb:70:4d:16:87:31:a8:99:a9:83:9a:65:bd:4e:41:
a6:2b:7a:24:2d:6c:8b:06:3b:df:d9:25:2c:50:cd:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:37:7B:BE:03:D6:97:76:78:DF:2B:8E:E3:6A:79:F7:60:42:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/S2o3e74D1pd2eN8rjuNqefdgQiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0-31.56.199.255
31.56.204.0-31.56.239.255
31.58.36.0/22
31.58.44.0/22
31.58.52.0/22
31.58.60.0/22
31.59.36.0/22
31.59.44.0/22
31.59.196.0-31.59.215.255
31.59.220.0/22
Signature Algorithm: sha256WithRSAEncryption
91:38:c2:76:2d:b7:bc:6e:50:e4:36:2e:00:52:92:ad:21:8a:
80:31:ef:d1:ca:be:b2:53:23:23:83:1e:13:74:ee:f2:96:32:
ce:ea:ff:f1:69:73:f2:db:5a:3a:c8:31:0f:53:4d:cb:06:94:
87:2c:cf:52:1f:27:ed:63:4d:a2:f5:2b:1d:74:69:c5:26:aa:
59:39:15:90:62:1e:24:1a:49:33:ad:88:a6:27:5c:10:98:52:
a9:e7:01:b0:63:aa:5e:6f:97:d5:63:83:1b:7e:00:dc:68:7f:
9a:24:c8:6e:1b:7d:73:89:a2:70:00:c0:70:e2:dd:d0:da:57:
23:af:8f:ec:1e:1a:27:5c:40:c1:df:cc:fd:47:69:97:d7:df:
e0:54:b8:10:e8:52:2d:8e:78:a5:4f:43:93:a0:0d:28:c1:c5:
60:fd:08:e2:c3:95:f1:bb:22:88:a8:a4:89:26:63:86:11:26:
6c:26:a6:2f:c4:8d:2c:cd:89:f5:80:25:10:ea:8d:f5:c2:52:
28:ed:d1:19:89:2f:01:e4:2e:58:0a:ec:9b:95:d5:2f:69:fa:
a1:0a:9a:5f:e3:4f:41:60:8c:16:f3:66:f9:bc:9c:8d:ee:8d:
a7:89:fc:62:5d:8b:85:e1:91:5a:12:27:e2:3b:e6:20:56:25:
7e:8d:0e:9e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZQoIz0AVH9DiRgzqtAQQzkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMTAyMTc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjZhMzc3YmJlMDNkNjk3NzY3OGRmMmI4ZWUzNmE3OWY3NjA0MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC7eOYV8VeDCddTS3M57Btl4JGoc
2YL/DzUh7Ef/YT1PhCYJ6JtTGDVsJ9kF2GYAHsV6oOsEETIb3fC5hHlR9gagqoux
gYLgnarra8f14WdG+uswkdGRxemP28wpvV9NGFS3QD2lv2wWTf/6fpdTAH83n+hv
GM+0ecJbrT3og9XtKDI33WBby71ztNQDIwd5ykfb4mJGj1xdNyKJ5cINWWijhfN6
7OB+vr9tzv69wZT23u7DPc/F1o/p9RhVCbrDP1dFQJKPtlR6Bqc9m+jQky4I4qjm
pfHD7+NNbLisB4PLcE0WhzGomamDmmW9TkGmK3okLWyLBjvf2SUsUM2rwwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFEtqN3u+A9aXdnjfK47jann3YEIiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUzJvM2U3NEQxcGQyZU44cmp1TnFlZmRnUWlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUMAwDBAQfOLAD
BAMfOMAwDAMEAh84zAMEBB844AMEAh86JAMEAh86LAMEAh86NAMEAh86PAMEAh87
JAMEAh87LDAMAwQCHzvEAwQDHzvQAwQCHzvcMA0GCSqGSIb3DQEBCwUAA4IBAQCR
OMJ2Lbe8blDkNi4AUpKtIYqAMe/Ryr6yUyMjgx4TdO7yljLO6v/xaXPy21o6yDEP
U03LBpSHLM9SHyftY02i9SsddGnFJqpZORWQYh4kGkkzrYimJ1wQmFKp5wGwY6pe
b5fVY4MbfgDcaH+aJMhuG31ziaJwAMBw4t3Q2lcjr4/sHhonXEDB38z9R2mX19/g
VLgQ6FItjnilT0OToA0owcVg/Qjiw5XxuyKIqKSJJmOGESZsJqYvxI0szYn1gCUQ
6o31wlIo7dEZiS8B5C5YCuybldUvafqhCppf409BYIwW82b5vJyN7o2nifxiXYuF
4ZFaEifiO+YgViV+jQ6e
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:01 2025 by rpki-client