Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa
File: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (raw, json)
Hash identifier: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=
Subject key identifier: 5B:76:F6:73:76:96:06:41:8B:3C:84:71:D3:F9:A6:16:B5:45:49:55
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 019425FDD20BC478EC4D6FA3881C868AA8C6
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48573
IP address blocks: 31.185.0.0/21 maxlen: 21
31.185.0.0/22 maxlen: 22
31.185.0.0/24 maxlen: 24
31.185.1.0/24 maxlen: 24
31.185.2.0/24 maxlen: 24
31.185.3.0/24 maxlen: 24
31.185.4.0/22 maxlen: 22
31.185.4.0/24 maxlen: 24
31.185.5.0/24 maxlen: 24
31.185.6.0/24 maxlen: 24
94.143.40.0/21 maxlen: 21
94.143.40.0/22 maxlen: 22
94.143.40.0/24 maxlen: 24
94.143.42.0/23 maxlen: 23
94.143.44.0/22 maxlen: 22
95.215.136.0/22 maxlen: 22
95.215.136.0/23 maxlen: 23
95.215.138.0/23 maxlen: 23
185.43.8.0/22 maxlen: 22
185.43.8.0/23 maxlen: 23
185.43.8.0/24 maxlen: 24
185.43.10.0/23 maxlen: 23
193.29.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d2:0b:c4:78:ec:4d:6f:a3:88:1c:86:8a:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b76f673769606418b3c8471d3f9a616b5454955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:e9:bb:91:84:c6:51:a3:c4:c3:a1:57:62:
a5:bb:df:38:0d:8f:15:5d:9f:dc:e1:47:b1:ba:d8:
01:63:55:92:0f:ec:dc:aa:c7:9b:d3:5e:71:b0:2a:
cc:b3:f1:f9:c7:ce:e1:e2:1f:a0:b3:8f:ad:b9:20:
4f:74:1f:ec:fb:b1:f6:ea:cf:2d:a9:11:07:e9:aa:
99:a0:06:b0:b0:7d:ef:89:4b:08:97:86:a9:1e:bd:
94:bc:0d:ac:00:79:d6:23:63:2d:f4:c1:c7:17:5a:
8a:50:13:6d:a4:d1:91:1a:2d:15:cd:6c:04:05:30:
8c:ae:4c:20:bd:50:95:96:0f:a2:dd:5a:25:fc:6c:
da:8b:a5:25:24:45:21:1f:fc:13:a6:53:00:e4:86:
d6:ac:9e:cd:6c:77:5d:8d:6e:62:3b:40:b8:c5:75:
f7:74:cf:a9:60:00:5b:81:66:34:13:02:12:50:a8:
ba:da:b7:8c:58:f4:37:bc:f6:7e:5c:2e:b4:86:80:
36:e4:16:e2:79:88:58:e7:73:3b:21:f6:da:d2:9f:
7f:9c:01:c5:0d:ef:b5:0f:bc:2b:cf:bc:b2:94:d2:
22:bf:82:0c:33:b1:4f:01:46:13:a2:38:fe:26:bc:
b1:6e:f2:de:41:ae:88:85:6e:26:df:3b:c0:df:ca:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:F6:73:76:96:06:41:8B:3C:84:71:D3:F9:A6:16:B5:45:49:55
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.0.0/21
94.143.40.0/21
95.215.136.0/22
185.43.8.0/22
193.29.230.0/23
Signature Algorithm: sha256WithRSAEncryption
99:19:75:81:49:5b:6e:52:51:12:8b:b8:05:aa:a8:32:7b:97:
45:44:9d:90:9c:a6:72:e5:72:47:bb:42:04:97:cd:58:8c:dd:
24:cf:b6:14:6f:0c:54:ef:62:c3:b8:fc:7a:42:7f:98:11:5a:
b5:32:86:e8:f6:1d:5f:cb:73:e7:90:aa:24:50:63:9f:4e:a0:
8a:c4:4b:e5:6f:3b:63:ef:f4:ae:da:7b:a7:7f:1a:d8:29:be:
9b:20:9b:4a:78:6a:d8:c0:d5:61:25:41:f9:04:89:ea:57:5a:
f0:42:be:ac:e2:a7:7a:5c:70:bd:95:50:ea:2b:57:d1:d5:12:
0c:2d:9d:78:4d:11:08:26:4e:13:83:81:19:89:92:0b:97:4c:
c3:f3:c6:9a:e2:54:9d:af:21:e1:3f:1e:ec:4a:34:94:4d:fc:
b7:0a:d2:7f:27:9d:cd:84:51:22:86:b3:4a:7b:3d:68:8f:f2:
d3:0f:e1:39:0e:d1:f8:bb:c1:a5:c5:a4:4e:53:c9:d9:63:b0:
33:cf:b0:36:3f:7d:f5:82:2e:4e:6d:2d:72:2a:61:3e:aa:f4:
03:e2:2b:89:12:fe:40:1b:4f:2c:d6:81:ce:9c:b2:b4:41:8e:
b7:79:0c:c5:0f:4c:a6:1f:e4:57:b8:ff:cc:9d:b7:af:80:d9:
46:a2:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:21 2025 by rpki-client