Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/Tu17x9XAFcfPluiVQ7rCjctGRFw.roa
File: Tu17x9XAFcfPluiVQ7rCjctGRFw.roa (raw, json)
Hash identifier: ttIpGzcDggH5Iob34v+YFlS3wncd3sbR1m+4Xf/6AeI=
Subject key identifier: 4E:ED:7B:C7:D5:C0:15:C7:CF:96:E8:95:43:BA:C2:8D:CB:46:44:5C
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0194221F91D7B75DD42D2869974931AE9F49
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/Tu17x9XAFcfPluiVQ7rCjctGRFw.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200043
IP address blocks: 31.3.168.0/22 maxlen: 24
31.3.172.0/22 maxlen: 24
31.3.176.0/20 maxlen: 24
62.220.80.0/21 maxlen: 24
62.220.88.0/21 maxlen: 24
109.238.124.0/23 maxlen: 24
109.238.126.0/23 maxlen: 24
185.63.168.0/23 maxlen: 24
185.98.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:d7:b7:5d:d4:2d:28:69:97:49:31:ae:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eed7bc7d5c015c7cf96e89543bac28dcb46445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:a2:75:83:28:90:17:e3:8c:3b:91:de:df:
be:8e:31:5b:24:4e:99:ff:ae:b7:d6:8e:8b:83:f0:
01:2f:6f:a9:30:bc:5c:f3:bb:84:6f:9e:4b:a9:bb:
80:0f:ec:3c:5d:83:f2:dd:33:22:18:08:d7:f5:b6:
39:a5:9a:f3:ec:5e:34:93:a6:6e:bb:19:d5:99:65:
d7:a2:9f:22:14:ab:d0:b1:77:33:2b:3b:7b:5d:60:
fd:aa:42:a7:86:80:eb:5b:8e:15:82:09:55:9b:31:
1f:1e:fc:20:01:44:0c:d7:b7:df:b7:2e:b2:e1:01:
8b:56:19:b7:6f:6d:3c:24:8d:55:d9:22:22:6e:f2:
0b:6f:9d:26:b4:f1:a9:c3:83:d2:58:fc:6e:29:2f:
cc:96:8f:bb:ff:49:4e:1b:d4:3d:25:40:4a:02:10:
3a:ac:a0:5c:6c:d6:d4:ee:4b:69:04:72:2a:67:0d:
fe:b1:58:67:98:2e:da:8c:04:14:bd:03:4e:52:a0:
e3:7a:d6:14:f5:cc:b5:1e:70:c1:64:c4:55:a5:39:
38:c0:65:92:7f:14:6c:d3:0b:e3:ff:1a:34:1b:ee:
f4:6f:84:10:22:5a:e4:0a:44:b4:4f:61:6c:41:8e:
36:26:f9:49:d6:2c:e6:16:fc:d9:1d:2c:fa:fb:c4:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:7B:C7:D5:C0:15:C7:CF:96:E8:95:43:BA:C2:8D:CB:46:44:5C
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/Tu17x9XAFcfPluiVQ7rCjctGRFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.168.0-31.3.191.255
62.220.80.0/20
109.238.124.0/22
185.63.168.0/23
185.98.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:17:2e:69:28:c1:8c:56:e9:51:6c:7b:50:28:7e:85:4d:16:
e8:c5:fc:3d:29:16:fd:e0:43:ae:c0:b1:63:d1:44:b6:c5:c9:
73:b0:88:fd:ed:d3:07:43:b7:3f:cb:57:d9:fe:6c:ac:76:e4:
5f:b7:4c:17:35:b4:93:d6:d1:a5:19:ca:08:26:3e:08:24:79:
b2:ca:fb:c5:e4:45:60:75:05:c3:a8:51:7b:64:27:07:76:e1:
92:10:14:cc:58:68:de:ff:ac:fe:99:db:01:de:22:89:d0:f6:
39:a1:39:b7:87:08:ea:f5:2b:94:e2:35:d2:67:64:26:c7:cb:
a5:36:e0:56:4e:db:e1:88:25:e6:a2:7e:83:db:48:00:25:f2:
ac:6c:91:32:ff:79:35:1e:09:be:5a:16:de:23:bc:2e:70:56:
2c:4a:db:10:35:00:13:91:ee:78:52:c6:1b:33:98:fc:d4:7d:
e6:d5:d6:cb:12:ff:0a:3b:56:3a:c9:5e:ee:65:7b:a1:e7:a4:
53:ff:a0:91:1c:93:d2:e2:b5:5f:e5:05:27:27:a3:35:23:2d:
c8:ef:12:e4:4c:36:16:80:93:37:7a:35:20:e7:c3:83:93:97:
0c:19:22:e5:4e:3b:b5:81:83:d5:47:e3:93:ac:dc:c2:30:c1:
4a:f4:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:10 2025 by rpki-client