Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/YVWuJ6FTMU1uU3iR7ed746pUzUU.roa
File: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (raw, json)
Hash identifier: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=
Subject key identifier: 61:55:AE:27:A1:53:31:4D:6E:53:78:91:ED:E7:7B:E3:AA:54:CD:45
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019427B5DC8DBF18C3F45874F5F73B558F1F
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/YVWuJ6FTMU1uU3iR7ed746pUzUU.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21245
IP address blocks: 31.3.0.0/24 maxlen: 24
31.3.1.0/24 maxlen: 24
31.3.2.0/24 maxlen: 24
31.3.3.0/24 maxlen: 24
31.3.4.0/24 maxlen: 24
31.3.5.0/24 maxlen: 24
31.3.6.0/24 maxlen: 24
31.3.7.0/24 maxlen: 24
80.91.216.0/24 maxlen: 24
146.19.176.0/24 maxlen: 24
185.21.180.0/24 maxlen: 24
185.21.181.0/24 maxlen: 24
185.21.182.0/24 maxlen: 24
185.21.183.0/24 maxlen: 24
185.22.160.0/24 maxlen: 24
185.22.161.0/24 maxlen: 24
185.22.162.0/24 maxlen: 24
185.22.163.0/24 maxlen: 24
185.87.172.0/24 maxlen: 24
185.87.173.0/24 maxlen: 24
185.87.174.0/24 maxlen: 24
185.87.175.0/24 maxlen: 24
185.155.102.0/24 maxlen: 24
185.201.196.0/24 maxlen: 24
185.201.197.0/24 maxlen: 24
185.201.198.0/24 maxlen: 24
185.230.16.0/24 maxlen: 24
185.230.17.0/24 maxlen: 24
185.230.19.0/24 maxlen: 24
185.235.10.0/24 maxlen: 24
185.241.63.0/24 maxlen: 24
2a03:3f00::/48 maxlen: 48
2a03:3f00:1::/48 maxlen: 48
2a03:3f00:2::/48 maxlen: 48
2a03:3f00:3::/48 maxlen: 48
2a03:3f00:4::/48 maxlen: 48
2a03:3f00:5::/48 maxlen: 48
2a03:3f00:6::/48 maxlen: 48
2a03:3f00:7::/48 maxlen: 48
2a03:3f00:10::/48 maxlen: 48
2a03:3f00:17::/48 maxlen: 48
2a03:3f00:19::/48 maxlen: 48
2a03:3f00:31::/48 maxlen: 48
2a03:3f00:160::/48 maxlen: 48
2a03:3f00:161::/48 maxlen: 48
2a03:3f00:162::/48 maxlen: 48
2a03:3f00:163::/48 maxlen: 48
2a03:3f00:172::/48 maxlen: 48
2a03:3f00:174::/48 maxlen: 48
2a03:3f00:175::/48 maxlen: 48
2a03:3f00:180::/48 maxlen: 48
2a03:3f00:181::/48 maxlen: 48
2a03:3f00:182::/48 maxlen: 48
2a03:3f00:183::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dc:8d:bf:18:c3:f4:58:74:f5:f7:3b:55:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6155ae27a153314d6e537891ede77be3aa54cd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:22:9a:ea:95:7f:e6:2f:ab:d4:a4:39:c7:68:
1b:c5:bd:6d:58:c7:70:36:16:be:66:9e:d4:0d:88:
b0:98:16:a9:e7:3a:c6:52:26:8c:6c:10:c0:17:83:
4d:37:59:22:89:78:2f:d7:bd:20:cf:ba:6e:16:e7:
fb:c2:2b:02:d6:e6:73:e0:44:a6:cb:69:0d:b6:28:
11:cf:2b:f7:c9:b9:00:52:39:45:c1:3c:e4:4c:36:
a3:44:2f:da:14:b8:bd:56:fa:46:1b:2f:f5:67:3a:
a7:6b:3a:d0:f8:97:50:5f:b8:15:21:81:c7:73:59:
49:fc:9e:e7:73:a6:62:2e:ab:11:cb:6a:a5:ab:68:
32:54:e8:58:d8:b6:f7:9e:2b:90:80:74:30:ff:dd:
02:7e:8f:43:a0:d5:56:df:18:56:a7:7d:97:01:a4:
7d:65:98:20:c4:3f:e4:5e:2d:dc:6f:3c:17:7c:b6:
4c:2e:75:7f:48:00:3e:41:65:5a:92:13:3c:c2:51:
30:61:cc:6d:b6:3b:82:f6:6e:97:b4:d2:a3:9e:dd:
54:54:66:3f:8b:4f:06:1c:be:42:12:b2:90:f9:11:
ac:ed:ce:ef:e9:c9:b7:82:8b:fe:81:6a:5c:67:b9:
d3:5a:97:72:a9:a2:eb:1b:ee:c2:eb:8a:3e:72:05:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:55:AE:27:A1:53:31:4D:6E:53:78:91:ED:E7:7B:E3:AA:54:CD:45
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/YVWuJ6FTMU1uU3iR7ed746pUzUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.0.0/21
80.91.216.0/24
146.19.176.0/24
185.21.180.0/22
185.22.160.0/22
185.87.172.0/22
185.155.102.0/24
185.201.196.0-185.201.198.255
185.230.16.0/23
185.230.19.0/24
185.235.10.0/24
185.241.63.0/24
IPv6:
2a03:3f00::/45
2a03:3f00:10::/48
2a03:3f00:17::/48
2a03:3f00:19::/48
2a03:3f00:31::/48
2a03:3f00:160::/46
2a03:3f00:172::/48
2a03:3f00:174::/47
2a03:3f00:180::/46
Signature Algorithm: sha256WithRSAEncryption
82:6e:99:19:9e:ca:1c:13:d7:4d:d9:a7:2d:b9:c6:30:f8:9b:
22:af:15:46:ae:c0:3f:a4:0f:e8:b7:92:c3:9a:d9:55:ca:0b:
39:a3:f8:92:ea:35:59:21:3e:bf:56:a4:0a:2c:24:6f:df:1d:
34:26:1a:e6:05:d3:52:f0:73:a3:14:af:d9:c8:1c:06:fd:ce:
ac:89:13:d4:83:e0:65:c8:d9:41:91:29:67:bd:0c:cf:ad:62:
b0:00:c5:8f:91:03:2c:0b:13:59:a3:dc:99:bc:0d:d3:1d:e3:
73:55:9e:fc:50:05:83:88:57:02:3d:db:11:64:82:47:49:ff:
e4:08:62:62:82:7c:5e:2e:2b:f4:45:cd:50:79:4a:8c:9a:5c:
f6:9d:fe:bb:7d:3d:62:74:9f:49:2f:be:56:a5:27:01:e3:8a:
92:a3:ae:aa:aa:4a:97:4b:c2:fd:02:f6:c9:ed:cf:bd:9d:f7:
67:32:a4:74:81:22:3b:b3:2f:08:3c:fe:a1:66:2a:77:6b:c4:
09:7c:b2:ab:15:ae:c4:f6:cc:2a:8c:8f:db:6e:51:69:fb:fc:
c9:97:fc:ea:b6:42:15:4c:d9:8e:73:0e:43:47:7a:71:65:45:
cd:a4:6a:68:97:89:36:84:0c:de:cf:7f:47:7a:e5:6b:ca:7d:
e0:01:5e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:50:04 2025 by rpki-client