Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/r2xu2vYy4qZ8-Aoxpx2ZFtcV2G0.roa
File: r2xu2vYy4qZ8-Aoxpx2ZFtcV2G0.roa (raw, json)
Hash identifier: 8v3MP030cdmlc6aIpjDlbkmb4RRTR2cFNs92YWI4mrs=
Subject key identifier: AF:6C:6E:DA:F6:32:E2:A6:7C:F8:0A:31:A7:1D:99:16:D7:15:D8:6D
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 019427474AB1DB435DC55231FE2C9C4C3CCB
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/r2xu2vYy4qZ8-Aoxpx2ZFtcV2G0.roa
Signing time: Thu 02 Jan 2025 13:49:31 +0000
ROA not before: Thu 02 Jan 2025 13:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
85.202.192.0/23 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4a:b1:db:43:5d:c5:52:31:fe:2c:9c:4c:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jan 2 13:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af6c6edaf632e2a67cf80a31a71d9916d715d86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:ca:e6:13:ef:7b:72:3c:28:f4:18:9f:3e:
91:3f:db:07:54:5e:d3:a0:d5:4e:9d:92:ff:91:6f:
2d:96:02:5f:ee:63:23:3f:c8:e7:c0:20:f3:c6:c9:
38:58:f1:53:e7:95:f3:71:8a:7b:76:20:e4:c6:c1:
f3:fe:24:98:1f:4a:f4:b4:bb:7c:ed:2d:8c:1b:96:
fb:6c:bf:b3:55:0f:83:c7:2b:fb:28:e1:cc:2c:24:
7d:6c:ea:a9:c1:7a:dc:b4:be:2d:7f:3e:44:dc:8a:
ad:ac:af:56:bc:01:dc:f8:77:d8:ea:75:2e:bd:a2:
06:da:66:84:f8:a5:3a:d5:69:58:60:77:2c:d5:e7:
db:fd:0c:3f:ba:09:64:ca:07:2f:02:8f:e9:a9:cb:
89:9a:34:5a:09:78:e7:50:ff:f1:51:4b:f6:d6:6b:
a9:06:6e:59:e6:94:f4:0b:3c:98:2a:2d:2f:7b:4d:
6b:35:f3:a2:ec:e6:88:38:a4:fd:c8:8d:76:d2:41:
f5:7d:2d:af:b3:50:0c:1f:a8:3a:72:4a:ad:0b:aa:
ee:ed:92:99:b4:13:a1:55:b1:f6:6f:e9:22:38:19:
a1:15:67:71:15:9b:5b:02:78:3d:d0:00:17:96:6f:
a1:f5:22:27:d1:aa:5e:86:ad:0f:3c:0d:d1:6b:a8:
ba:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:6E:DA:F6:32:E2:A6:7C:F8:0A:31:A7:1D:99:16:D7:15:D8:6D
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/r2xu2vYy4qZ8-Aoxpx2ZFtcV2G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
85.202.192.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
bb:8e:f3:60:d0:f8:a8:4e:7f:29:71:e3:60:02:97:58:db:d1:
75:3f:af:af:45:14:4c:75:6d:0e:94:9a:b2:33:4a:c9:cb:39:
f7:0f:10:d1:53:ae:7e:19:ff:12:48:3b:f9:dc:78:14:a2:1a:
a2:c8:80:02:ba:d2:7e:db:51:d8:c3:5b:95:86:e8:63:18:da:
d5:66:bd:63:29:f9:0d:86:65:75:8b:38:16:65:52:7c:79:55:
54:47:90:b3:e0:d4:a5:05:06:f4:0b:f5:49:0b:27:a8:66:78:
5f:e1:23:5c:1d:80:80:b8:f0:57:3e:65:a1:4c:f9:55:a6:c9:
ad:1b:cf:40:8e:96:db:73:3a:38:f0:c8:de:56:ee:77:1d:3a:
60:d9:b4:65:51:e9:80:66:ca:99:9d:85:9d:8d:d0:c7:ef:99:
70:88:6d:ef:60:af:c1:9c:34:72:8d:83:5b:07:17:82:dc:4b:
89:cb:9b:39:98:56:d3:32:46:af:30:0e:26:f9:1e:b3:42:80:
89:52:42:96:16:73:92:7e:cf:87:53:e4:24:d6:07:3f:6f:8c:
6c:5a:a4:aa:5a:74:64:87:c6:a8:64:ce:35:23:ab:95:35:6e:
dc:a6:85:21:45:04:ad:0a:b7:01:35:9c:e9:14:56:13:4e:80:
39:36:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:26:25 2025 by rpki-client on console.sobornost.net