Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa
File: BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa (raw, json)
Hash identifier: 5RpGYLrJit43EcAURB9h1zI7H1uWOJSb9Qx7yrRnckQ=
Subject key identifier: 04:B5:ED:B0:E5:0A:CA:37:73:2B:A6:94:3A:70:A2:EF:53:23:AD:FA
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266AB958476257999FB2F47B49A3DE78
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa
Signing time: Thu 02 Jan 2025 09:48:36 +0000
ROA not before: Thu 02 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51411
IP address blocks: 31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
178.236.32.0/22 maxlen: 22
178.236.32.0/24 maxlen: 24
178.236.33.0/24 maxlen: 24
178.236.34.0/24 maxlen: 24
178.236.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b9:58:47:62:57:99:9f:b2:f4:7b:49:a3:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04b5edb0e50aca37732ba6943a70a2ef5323adfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:95:88:22:7c:fd:f7:76:3f:02:c8:87:92:
91:4b:37:be:f9:d4:66:59:c7:2d:35:df:fb:a4:4e:
3d:1b:fe:6f:a2:2e:dc:5c:2e:f5:0e:04:a9:b2:c4:
62:bd:02:b8:a5:68:89:3c:38:db:aa:e4:7f:f9:08:
ed:a9:a5:0e:8b:88:73:1d:80:28:d0:c9:38:bd:73:
5a:88:25:bc:79:c1:88:d4:38:88:df:56:17:ee:0d:
b9:05:d3:39:83:e8:d8:fc:77:4b:84:f1:78:b1:c0:
b1:db:e9:3e:6f:89:e9:90:b1:cf:bc:37:ec:40:c1:
46:7e:df:86:47:cd:06:95:e4:f1:c5:4c:d8:c1:ef:
1d:d8:dc:48:d2:c8:9d:4f:db:17:53:f3:b1:26:36:
bb:b6:f4:96:14:61:4b:3e:c6:a7:ae:62:e4:e7:aa:
34:cf:29:66:1d:37:19:31:d4:93:20:b8:cc:43:f2:
92:95:04:b2:a0:ca:5c:de:ab:8e:c2:3c:be:59:47:
ce:01:47:bb:0c:9e:ec:c0:cd:15:30:8a:fb:45:66:
ea:16:5c:01:69:0b:17:e4:96:c3:7b:3b:d9:fe:cf:
8c:bf:37:8b:57:d9:80:a6:33:7e:cf:95:5c:52:b3:
b1:89:bc:de:b8:d2:60:9d:96:cc:4a:ef:c2:9f:b0:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B5:ED:B0:E5:0A:CA:37:73:2B:A6:94:3A:70:A2:EF:53:23:AD:FA
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/BLXtsOUKyjdzK6aUOnCi71Mjrfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:1f:e2:3a:e8:2d:17:98:8b:22:fc:d2:b2:01:7b:eb:d2:bc:
b0:01:69:8c:fc:31:36:ad:13:91:6b:c1:f4:6b:ac:0a:9f:c3:
bd:51:a2:2e:a3:6b:da:c2:88:0d:6d:3b:7b:58:d1:cc:83:af:
12:c3:b5:a2:f2:90:7b:f2:82:f7:e6:e1:2e:20:98:5a:da:7d:
27:7b:22:bd:e3:0c:a3:48:3d:b3:b7:cc:c1:b4:dc:5f:97:e0:
d6:47:a3:02:99:30:30:98:76:73:02:0b:b2:db:96:dc:bb:40:
2f:87:c9:46:b0:2d:52:33:55:8f:cd:63:71:7a:e9:81:d7:dd:
d7:10:6f:ce:c8:38:a7:b0:fc:60:3e:3f:4b:ed:ed:60:d2:21:
d8:4f:cb:f7:ad:c9:68:b1:29:3a:03:c8:2c:9b:eb:b2:01:fb:
ad:2a:c9:eb:dd:19:ff:c1:5d:f7:4e:73:80:52:5c:04:c1:0a:
6c:f1:1c:2d:c6:db:0a:7f:a2:1a:9b:e8:28:a7:d4:43:2c:2e:
c6:67:49:e2:81:4e:4d:cb:b2:24:ff:32:77:cb:80:3d:a5:be:
7f:a0:4a:20:f2:05:38:d6:35:8d:1d:0b:a5:f6:c4:16:83:90:
c2:d5:9b:5a:cb:20:1c:f4:a5:71:3e:95:14:f0:95:f5:df:84:
ce:a0:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:26 2025 by rpki-client