Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VchI1To_PFkj_TIsjLTso66-f7I.roa
File: VchI1To_PFkj_TIsjLTso66-f7I.roa (raw, json)
Hash identifier: JXcA5335eDffxMeCWiA3aJgTwKxycgOQJWr72MN/e58=
Subject key identifier: 55:C8:48:D5:3A:3F:3C:59:23:FD:32:2C:8C:B4:EC:A3:AE:BE:7F:B2
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 019424449ADB43DF1DF1DA2B1C2ADC1FF0DB
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VchI1To_PFkj_TIsjLTso66-f7I.roa
Signing time: Wed 01 Jan 2025 23:47:43 +0000
ROA not before: Wed 01 Jan 2025 23:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42109
IP address blocks: 31.7.160.0/21 maxlen: 21
31.7.160.0/24 maxlen: 24
31.7.161.0/24 maxlen: 24
31.7.163.0/24 maxlen: 24
31.7.164.0/24 maxlen: 24
31.7.165.0/24 maxlen: 24
91.103.24.0/21 maxlen: 21
91.103.24.0/24 maxlen: 24
91.103.25.0/24 maxlen: 24
91.103.26.0/24 maxlen: 24
91.103.27.0/24 maxlen: 24
91.103.28.0/24 maxlen: 24
91.103.29.0/24 maxlen: 24
91.103.30.0/24 maxlen: 24
93.94.216.0/21 maxlen: 21
93.94.217.0/24 maxlen: 24
93.94.219.0/24 maxlen: 24
93.94.221.0/24 maxlen: 24
95.140.192.0/20 maxlen: 20
95.140.192.0/24 maxlen: 24
95.140.194.0/24 maxlen: 24
95.140.195.0/24 maxlen: 24
95.140.196.0/24 maxlen: 24
95.140.197.0/24 maxlen: 24
95.140.198.0/23 maxlen: 23
95.140.200.0/24 maxlen: 24
95.140.201.0/24 maxlen: 24
95.140.202.0/24 maxlen: 24
95.140.203.0/24 maxlen: 24
95.140.204.0/22 maxlen: 22
185.79.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9a:db:43:df:1d:f1:da:2b:1c:2a:dc:1f:f0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c848d53a3f3c5923fd322c8cb4eca3aebe7fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:70:44:f3:40:14:c9:c9:3b:b7:73:fa:ce:b0:
2c:f2:a8:b0:2e:0f:94:87:5c:c0:6d:2a:7b:5b:56:
5b:53:07:6d:32:34:06:fa:f0:96:87:22:62:d7:c1:
14:21:01:d8:8a:90:fc:74:7c:71:5f:a9:6e:c2:33:
a8:73:a0:1f:dd:30:d9:57:9d:17:8a:9c:00:aa:b0:
9b:6c:81:ab:11:a9:95:df:d6:ac:c4:02:9f:1b:9c:
03:0c:48:5e:f6:09:8b:55:72:d5:f3:ef:73:45:e2:
db:6c:2f:35:60:cb:03:85:f5:5d:45:2b:73:cb:d9:
2c:f6:a5:f2:16:ea:a5:33:4d:bb:89:d5:22:4f:5f:
62:bd:0e:14:29:ef:05:3a:70:b5:5c:4a:5c:2a:7e:
c2:af:f8:68:50:b2:a0:4d:74:ad:73:1a:ff:a7:c6:
f9:e4:fc:34:4a:6c:69:ee:e4:99:81:7e:68:e9:f2:
83:d5:e2:08:31:55:18:08:dc:69:80:78:52:27:09:
b4:d3:92:4c:68:af:53:60:2f:35:3d:8f:80:0f:b2:
33:13:ca:0a:2e:9a:52:55:90:f0:a0:34:17:c3:d8:
50:c4:df:dc:d8:26:27:b9:52:42:da:59:ba:a8:40:
0c:06:37:9b:b1:ad:dd:88:6d:6f:99:4d:d1:24:59:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:48:D5:3A:3F:3C:59:23:FD:32:2C:8C:B4:EC:A3:AE:BE:7F:B2
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/VchI1To_PFkj_TIsjLTso66-f7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.160.0/21
91.103.24.0/21
93.94.216.0/21
95.140.192.0/20
185.79.0.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d1:97:64:67:ca:8d:18:57:3b:2b:8a:f4:b8:96:2f:2a:cc:
5a:84:65:39:81:cf:24:3a:d4:f6:68:cb:5a:50:c9:e9:2a:ee:
21:ad:f5:ea:f3:82:c9:da:8e:fd:8c:80:56:47:8b:c9:88:82:
25:98:a9:ec:01:1a:88:e8:a9:57:f8:c0:b6:62:83:c3:e7:50:
41:52:08:12:4d:0e:74:97:d8:dd:a1:eb:3b:47:62:7a:08:61:
60:50:72:53:ab:73:f5:1f:1b:af:fd:98:25:b6:18:5a:23:d2:
fa:01:e0:f8:1e:f5:79:09:6e:3f:3b:52:5a:43:f6:b5:5c:2a:
86:69:ce:2f:5a:e2:40:e5:07:b4:c4:2b:ed:93:be:0c:51:97:
be:ea:b1:69:e8:bb:c0:fb:7b:b9:a2:a3:fd:8c:71:ce:93:87:
68:95:41:e6:55:21:4e:81:3a:bb:e5:48:d2:f5:65:2b:28:85:
ce:28:0e:41:6e:6a:da:8b:dc:4b:47:32:e8:10:6c:71:29:0f:
5a:2a:cd:48:c9:00:8f:e4:cf:d4:29:47:53:d5:f6:ef:46:5e:
f7:89:d9:ec:18:f3:fd:58:ca:51:df:b1:86:9f:b3:fb:69:3f:
46:1a:32:3d:41:cb:9e:90:90:28:f2:c6:8a:e6:c9:53:a5:e4:
97:1d:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:29 2025 by rpki-client