Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/LW4-Oe35V5eJKzg68ztfFqGhSFg.roa
File: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (raw, json)
Hash identifier: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=
Subject key identifier: 2D:6E:3E:39:ED:F9:57:97:89:2B:38:3A:F3:3B:5F:16:A1:A1:48:58
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 01942067C1B7F95A33AEA705FD2594038F5A
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/LW4-Oe35V5eJKzg68ztfFqGhSFg.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197954
IP address blocks: 31.44.112.0/20 maxlen: 20
37.10.80.0/20 maxlen: 20
185.49.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:b7:f9:5a:33:ae:a7:05:fd:25:94:03:8f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d6e3e39edf95797892b383af33b5f16a1a14858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:62:44:ae:6a:a1:c8:6b:36:e8:1a:97:c1:
2a:d4:43:4a:26:9c:5e:4c:68:c2:df:a8:8e:9e:12:
43:59:bc:ba:1c:4e:27:d9:d1:50:3c:7c:19:b5:a9:
82:e7:ac:36:b3:c3:60:f4:22:d8:44:5d:d1:c9:10:
b8:73:38:6e:d2:d8:02:07:18:e3:05:10:46:2b:56:
63:62:24:d4:a8:4a:aa:a8:f5:ca:50:4a:a9:3b:8f:
60:4e:79:97:26:67:63:f3:51:86:93:6d:fd:c6:bf:
37:39:77:56:4c:44:bf:1d:a8:23:e8:64:b4:73:60:
2d:74:1d:c6:a3:47:b4:fb:ba:be:2d:30:48:f0:e8:
47:a4:18:6d:38:5e:72:0b:54:2c:ea:bd:59:76:54:
02:2a:67:cf:8c:48:81:45:54:d6:12:7c:b8:43:e6:
d9:e7:a6:77:a1:1f:c0:0d:56:1d:1a:26:97:59:e6:
bc:f2:66:df:a4:bd:9a:fa:97:21:13:e0:6c:09:57:
69:db:15:ad:9f:95:2c:44:b0:ba:18:df:1a:50:e6:
0f:8f:12:3b:54:80:37:64:b9:3c:aa:78:58:27:47:
06:dd:fd:f0:c0:ba:35:8b:f1:0d:49:45:b9:2d:35:
99:ca:d0:34:e0:f5:ff:a6:a7:33:c9:54:9e:98:32:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:3E:39:ED:F9:57:97:89:2B:38:3A:F3:3B:5F:16:A1:A1:48:58
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/LW4-Oe35V5eJKzg68ztfFqGhSFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.112.0/20
37.10.80.0/20
185.49.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:59:d1:f6:40:66:8a:dc:fd:a3:8f:5c:11:ba:e6:af:23:ca:
c5:27:18:14:6a:7a:3a:2d:09:c9:24:5b:c6:09:c1:65:33:7d:
95:e1:9b:ed:b1:91:db:9e:e9:06:ed:fd:cb:d9:92:4d:da:17:
06:ae:bf:4e:33:54:cc:c0:e6:a2:9a:c1:b1:f5:d3:88:e5:ea:
90:41:74:ad:77:18:42:e2:47:78:b5:93:91:c2:f7:0e:16:7c:
34:fd:18:a7:e8:d9:27:56:1c:d3:98:21:8b:23:0f:04:01:30:
de:14:09:52:78:97:cf:c3:28:03:80:a2:e9:2a:82:1d:1b:de:
f1:90:67:60:92:78:9d:74:dd:33:f4:62:2e:69:11:fd:d5:c6:
44:23:79:d3:ba:aa:b7:d7:70:92:95:1f:63:69:04:a6:ee:31:
51:a4:f6:54:b1:e7:9b:bd:52:54:a8:74:5d:f1:37:97:08:fa:
74:7e:14:ac:36:00:e2:d4:d2:50:d2:93:78:07:ab:33:aa:6a:
44:4d:86:b6:61:df:ac:68:5a:f3:9b:d2:c9:fb:fb:fb:10:33:
18:bf:71:83:51:ab:89:d0:8a:62:59:86:0c:68:60:cc:68:93:
bb:7f:28:b9:86:81:26:b0:23:8c:ec:9b:2e:c9:1c:26:52:48:
76:25:09:d7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQgZ8G3+VozrqcF/SWUA49aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx
ODFhNGMwHhcNMjUwMTAxMDU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDZlM2UzOWVkZjk1Nzk3ODkyYjM4M2FmMzNiNWYxNmExYTE0ODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdiRK5qochrNugal8Eq1ENKJpxe
TGjC36iOnhJDWby6HE4n2dFQPHwZtamC56w2s8Ng9CLYRF3RyRC4czhu0tgCBxjj
BRBGK1ZjYiTUqEqqqPXKUEqpO49gTnmXJmdj81GGk239xr83OXdWTES/Hagj6GS0
c2AtdB3Go0e0+7q+LTBI8OhHpBhtOF5yC1Qs6r1ZdlQCKmfPjEiBRVTWEny4Q+bZ
56Z3oR/ADVYdGiaXWea88mbfpL2a+pchE+BsCVdp2xWtn5UsRLC6GN8aUOYPjxI7
VIA3ZLk8qnhYJ0cG3f3wwLo1i/ENSUW5LTWZytA04PX/pqczyVSemDLvSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC1uPjnt+VeXiSs4OvM7XxahoUhYMB8GA1UdIwQY
MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt
OGNjYzE5NTJlYjRmLzEvTFc0LU9lMzVWNWVKS3pnNjh6dGZGcUdoU0ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm
LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEHyxwAwQE
JQpQAwQCuTHUMA0GCSqGSIb3DQEBCwUAA4IBAQCxWdH2QGaK3P2jj1wRuuavI8rF
JxgUano6LQnJJFvGCcFlM32V4ZvtsZHbnukG7f3L2ZJN2hcGrr9OM1TMwOaimsGx
9dOI5eqQQXStdxhC4kd4tZORwvcOFnw0/Rin6NknVhzTmCGLIw8EATDeFAlSeJfP
wygDgKLpKoIdG97xkGdgkniddN0z9GIuaRH91cZEI3nTuqq313CSlR9jaQSm7jFR
pPZUseebvVJUqHRd8TeXCPp0fhSsNgDi1NJQ0pN4B6szqmpETYa2Yd+saFrzm9LJ
+/v7EDMYv3GDUauJ0IpiWYYMaGDMaJO7fyi5hoEmsCOM7JsuyRwmUkh2JQnX
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:05 2025 by rpki-client