Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa
File: 3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa (raw, json)
Hash identifier: REslMcuG9HXm7BovLzYOAaMUk36BGxFiDYcZuAUfor8=
Subject key identifier: DE:C3:02:3E:1F:D3:49:86:38:1A:93:AC:5D:37:F4:92:92:45:24:91
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 0194274842F0FE35EAA8222E620F8B6DF725
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56616
IP address blocks: 31.7.88.0/22 maxlen: 24
31.7.88.0/23 maxlen: 23
31.7.88.0/24 maxlen: 24
31.7.89.0/24 maxlen: 24
31.7.90.0/23 maxlen: 23
31.7.90.0/24 maxlen: 24
31.7.91.0/24 maxlen: 24
185.116.20.0/22 maxlen: 24
185.116.20.0/23 maxlen: 23
185.116.20.0/24 maxlen: 24
185.116.21.0/24 maxlen: 24
185.116.22.0/23 maxlen: 23
185.116.22.0/24 maxlen: 24
185.116.23.0/24 maxlen: 24
2a0a:d340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:42:f0:fe:35:ea:a8:22:2e:62:0f:8b:6d:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dec3023e1fd34986381a93ac5d37f49292452491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:00:48:4c:a0:c9:b4:39:32:b0:46:4c:27:
82:61:e4:16:ec:16:78:2c:80:78:bd:0b:93:0a:fc:
ea:1e:fb:78:1a:34:59:95:1f:d5:bc:3f:aa:c5:34:
f5:04:f8:2c:62:4c:dd:19:d5:f6:41:cd:99:31:1e:
66:8c:4c:26:11:b9:10:d0:ee:d9:80:ac:ee:f2:d0:
9f:78:2e:1d:a2:f7:e7:69:55:6e:de:35:6c:e6:0b:
81:9d:95:f0:1e:38:b9:3e:54:e0:06:c4:19:0b:3b:
cb:53:26:a5:1f:f5:39:38:03:5d:55:7d:e4:fb:c2:
7d:7d:ea:16:20:51:7a:ab:cd:6a:37:a9:c8:50:52:
2d:b6:2b:0a:86:01:b7:ac:2f:40:ac:fa:ec:28:e3:
63:ca:11:85:42:c5:45:89:98:8a:b1:3a:35:ad:0f:
a1:9c:33:9e:69:2b:4e:5c:83:ad:97:30:44:fc:63:
ee:77:c6:1e:2f:68:8b:db:47:dd:7e:6b:05:b6:98:
d0:af:0f:05:5b:0a:88:27:53:9d:42:4d:5d:ee:70:
0b:bf:5f:1a:ce:df:c5:ce:f5:8a:c2:a6:22:74:21:
4c:86:68:9a:79:36:6a:8a:78:6e:86:22:32:60:e3:
c3:3b:ed:38:41:64:5e:d3:01:b9:0b:28:69:cd:e5:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:02:3E:1F:D3:49:86:38:1A:93:AC:5D:37:F4:92:92:45:24:91
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/3sMCPh_TSYY4GpOsXTf0kpJFJJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
1d:d2:17:9b:58:7d:61:79:77:7c:9e:49:a1:01:05:a9:1e:6f:
77:01:82:9e:97:86:55:9b:5e:bd:c3:e7:d5:9b:03:02:86:0d:
d1:6d:7c:e0:a2:7a:c4:e9:59:f1:10:4a:cb:f2:b1:41:2b:7c:
e3:55:67:ed:0c:d7:db:58:7b:02:48:9e:94:c1:02:6d:13:f8:
b9:f5:fc:2f:0d:c3:91:df:72:7b:9a:44:84:2f:b9:20:2a:2c:
b8:26:2d:eb:e8:92:29:95:74:d5:2f:bc:e3:9c:f6:ae:ba:98:
ca:be:28:9e:7b:02:dc:9e:2d:c4:1e:e8:e2:46:dd:b8:4c:88:
78:4d:13:8e:ff:5d:40:ce:69:10:2c:0e:e0:3e:25:82:40:20:
fe:76:b0:ba:31:29:fd:e5:5b:b1:6f:b1:79:8a:2b:1f:7c:69:
1e:33:40:a4:86:58:12:b0:bf:70:70:3c:de:11:a1:92:3e:80:
6a:ec:8a:51:f8:83:2f:4b:09:54:ad:28:6c:43:8c:bc:c7:03:
6e:6b:50:df:eb:5d:30:6a:84:f6:a3:b7:b7:05:56:73:03:ba:
9a:a9:d0:f0:f4:e5:37:38:51:98:5e:1e:4e:b4:6e:35:d9:2c:
22:ad:15:e3:7c:36:fb:7c:db:92:4d:59:af:47:43:d1:96:bc:
09:9c:c3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:44:01 2025 by rpki-client