Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fRUZWk56PH4YwimTsjlCNWLkbIU.roa
File: fRUZWk56PH4YwimTsjlCNWLkbIU.roa (raw, json)
Hash identifier: KKn3rEW2Pp26m0vfRXvrLql74m54lPHg5wUD0uyr5sQ=
Subject key identifier: 7D:15:19:5A:4E:7A:3C:7E:18:C2:29:93:B2:39:42:35:62:E4:6C:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194B75C9AB67FB1315859C1CDC1BCA251A5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fRUZWk56PH4YwimTsjlCNWLkbIU.roa
Signing time: Thu 30 Jan 2025 13:18:06 +0000
ROA not before: Thu 30 Jan 2025 13:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 31.58.211.0/24 maxlen: 24
31.58.238.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:5c:9a:b6:7f:b1:31:58:59:c1:cd:c1:bc:a2:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 30 13:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d15195a4e7a3c7e18c22993b239423562e46c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:21:04:bc:4a:0e:76:26:3b:77:62:74:5e:
23:21:c5:c9:f4:b3:2e:c6:e0:38:1d:8a:1c:80:12:
80:ec:3c:25:28:ce:8b:d2:b3:ec:73:e4:45:4e:a6:
f0:f5:e9:ca:68:2a:fe:88:16:1d:78:9e:7c:f5:02:
16:96:50:38:d1:18:d5:57:a9:74:52:f3:d7:ec:21:
16:46:71:3b:4f:67:7d:3e:60:63:33:a8:e3:82:38:
4c:12:70:61:b1:bf:60:77:be:ed:36:a4:14:e4:e5:
43:9a:32:13:70:e1:15:6f:c3:1e:91:b1:c1:d8:c1:
e2:61:c9:ae:be:c7:f1:85:76:7f:38:99:c4:7f:e9:
64:6e:7c:84:ba:8d:cd:69:48:b2:28:62:b7:4b:d9:
4c:68:5a:f6:cf:7b:e3:c2:ba:f9:7d:ec:65:65:ec:
c2:3f:1f:de:37:c0:cf:71:fd:a8:66:ff:45:a5:34:
9e:8b:12:ab:5e:3d:01:91:64:15:41:58:05:7e:a1:
74:29:43:c5:a1:ae:52:f2:b4:8a:c8:16:51:9b:15:
ab:c4:a7:86:6b:92:bb:38:b2:e9:85:e4:06:88:fa:
28:00:53:19:06:75:11:6d:39:9c:b1:a9:16:4f:b1:
4b:8b:93:55:53:17:70:f1:cb:50:52:d4:4d:ce:9d:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:15:19:5A:4E:7A:3C:7E:18:C2:29:93:B2:39:42:35:62:E4:6C:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fRUZWk56PH4YwimTsjlCNWLkbIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.211.0/24
31.58.238.0/24
31.58.244.0-31.58.246.255
31.58.249.0-31.58.251.255
Signature Algorithm: sha256WithRSAEncryption
3a:5f:6f:84:d4:35:00:3e:e6:43:eb:bb:32:ca:df:a3:9b:f0:
bd:09:4e:09:94:ce:60:2d:88:27:e0:cb:3c:ab:56:05:00:a4:
d9:d9:21:7a:a7:5f:52:f2:28:dd:c2:c8:41:cd:5e:00:3a:ba:
57:64:a7:5f:52:6a:ba:c2:91:ed:d2:7c:cb:66:95:c7:c5:b3:
fe:25:04:f0:c5:38:92:48:b0:86:eb:ab:fa:a0:90:4f:ae:fa:
15:98:fc:54:68:e5:95:5c:5a:6c:be:f7:8d:7a:db:c6:ee:82:
62:44:16:37:95:fa:da:cb:11:03:5b:0d:36:2e:8e:c6:dc:b0:
ef:da:89:bb:a9:fa:be:56:87:e5:48:c5:52:eb:0f:d8:b0:d1:
9d:ed:ae:c6:0c:05:6d:fa:44:19:20:19:e9:19:57:ef:c9:89:
27:ef:ce:96:a7:25:09:d5:59:a0:6a:06:cd:59:b6:5c:fd:47:
3f:df:ae:7f:d2:29:d0:79:54:51:f7:be:75:b8:6a:50:71:3b:
cb:d9:e4:92:26:84:16:bc:8f:c2:21:4f:39:cc:0d:47:01:08:
c5:81:fa:15:1e:f7:f7:ec:f0:d8:c6:5e:cf:fb:51:ca:81:bd:
e6:dc:34:15:90:98:f0:11:02:32:aa:5f:5d:e5:6e:41:0d:8c:
fc:54:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:56 2025 by rpki-client