Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa
File: vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa (raw, json)
Hash identifier: nw6PuYrQxCJ0rSOnM3T0R5CkZe6WaGcEiSuktc0QJXw=
Subject key identifier: BC:6F:00:A5:1D:42:43:5B:CD:81:ED:DD:C6:D7:42:39:E0:92:61:FA
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 0194244561397D5D18FCCFD9489D80BF6A80
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49972
IP address blocks: 31.214.168.0/21 maxlen: 21
31.214.168.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.175.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.200.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.206.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:61:39:7d:5d:18:fc:cf:d9:48:9d:80:bf:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6f00a51d42435bcd81edddc6d74239e09261fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3f:ad:db:c0:13:f9:a6:0f:03:94:60:e6:20:
04:55:7b:84:33:30:af:d3:c3:9f:53:1d:6d:94:7e:
05:a1:3c:3f:22:8d:47:ec:73:22:40:28:ef:fc:16:
73:df:a5:86:ac:71:c2:a1:93:7f:31:77:68:13:6b:
89:6f:db:82:01:33:fc:e4:bc:31:32:8e:6f:32:76:
bc:be:1a:0e:32:c2:c2:f3:9d:33:26:bc:b9:46:75:
c2:bd:44:96:86:ef:b6:53:48:c4:4a:0d:81:ef:4d:
4c:e5:dc:71:9e:49:59:e8:35:1a:77:a9:26:b7:ac:
a2:4d:c5:b7:6a:d4:8d:d1:14:da:ba:68:99:e5:14:
26:4a:1a:34:26:ce:f7:0c:8d:68:a1:7e:a1:59:be:
17:3b:32:f9:b4:ef:7b:41:3c:26:b9:fd:7d:73:ac:
1d:0e:c7:c9:0b:ed:b0:da:02:c6:cf:81:8a:ac:68:
82:4f:eb:e9:5d:47:dc:ea:b8:3d:1a:c0:3f:6a:57:
84:d0:9c:41:31:b9:89:67:3b:7c:43:44:3e:1e:a7:
a1:c7:d0:35:47:31:56:32:93:36:7b:24:02:3c:51:
9a:0d:d3:df:e7:31:9d:cf:ae:69:d8:fe:44:a2:e4:
13:7b:9c:54:ec:e6:cf:39:db:e9:86:34:68:17:8c:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:00:A5:1D:42:43:5B:CD:81:ED:DD:C6:D7:42:39:E0:92:61:FA
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/vG8ApR1CQ1vNge3dxtdCOeCSYfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
134.255.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:40:db:5b:48:1b:6e:5d:bd:20:aa:50:75:c2:e3:3d:ff:24:
9e:b4:a8:e7:37:8c:2a:8e:c8:0e:a6:09:49:cb:fb:a3:88:d5:
38:b7:0d:6c:46:9b:fa:02:f0:3c:bc:e0:1b:20:b4:d3:ee:af:
ec:3d:c3:a2:a4:6f:3f:aa:90:07:d2:37:08:e8:dc:d4:5c:ab:
79:3f:e1:00:aa:79:9e:c5:98:da:57:2a:dd:1d:42:e1:01:7b:
0e:6c:e2:d6:5d:02:7f:68:83:04:d7:5d:d7:38:ba:4f:0d:ef:
0b:73:df:1f:27:08:5d:80:45:ff:4e:e1:43:eb:20:45:0e:c1:
d2:bb:4b:62:13:62:07:84:da:df:51:60:ca:28:89:85:b6:81:
1b:2f:54:1d:fb:63:9f:76:47:1a:52:3c:1c:a6:1a:35:ab:a9:
f2:14:f7:1d:c8:65:3f:6a:46:f7:b6:80:04:85:1b:6d:67:e4:
f2:07:35:7f:35:ab:b5:30:13:9a:aa:c7:74:35:39:c7:20:9d:
e3:82:04:5b:09:89:81:e5:8b:88:fe:1b:f2:5a:8b:d4:d2:7f:
19:ab:b7:1a:ef:e6:ec:f3:f1:82:ff:bf:0e:d6:b0:88:36:dc:
72:e7:1e:64:df:2f:fe:76:d4:c3:86:65:55:4f:ad:29:a5:9b:
38:b3:36:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:42 2025 by rpki-client on console.sobornost.net