Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/c20FPXhmS4J60vXR5aQj59cGupE.roa
File: c20FPXhmS4J60vXR5aQj59cGupE.roa (raw, json)
Hash identifier: qMroiKqOf/zNPKixTJENs6m6QOcCkRbkPfSaLRwNiK4=
Subject key identifier: 73:6D:05:3D:78:66:4B:82:7A:D2:F5:D1:E5:A4:23:E7:D7:06:BA:91
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 019425216069938DF7E3EB3C85F52A32071F
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/c20FPXhmS4J60vXR5aQj59cGupE.roa
Signing time: Thu 02 Jan 2025 03:48:51 +0000
ROA not before: Thu 02 Jan 2025 03:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203489
IP address blocks: 31.24.136.0/21 maxlen: 21
69.172.96.0/19 maxlen: 19
82.145.160.0/19 maxlen: 19
178.20.72.0/21 maxlen: 21
185.3.36.0/22 maxlen: 22
213.137.32.0/19 maxlen: 21
2a00:fa80::/29 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:60:69:93:8d:f7:e3:eb:3c:85:f5:2a:32:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Jan 2 03:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=736d053d78664b827ad2f5d1e5a423e7d706ba91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:09:95:de:a7:82:1b:cf:d7:88:47:59:ba:
a9:5c:d2:df:5b:1b:67:ae:7e:82:59:3b:74:76:7a:
b4:66:98:5d:0b:9c:a6:32:ef:5e:90:c8:b6:65:5b:
21:5a:b0:b4:1b:46:00:95:e1:48:67:79:10:24:a2:
dc:46:92:ec:87:5c:ef:de:c0:25:0d:80:f2:e7:3d:
84:05:90:75:39:02:11:55:48:41:ff:54:78:ea:23:
7e:2c:5d:3e:56:1e:2e:12:b6:5f:4c:bd:22:57:6c:
18:b5:1f:f3:37:41:d5:60:ee:dc:b4:7a:85:cb:fc:
f0:89:cc:8d:cc:7e:e9:9c:e5:d1:0c:89:c3:e4:b8:
0b:c8:a5:e3:ad:e4:49:9a:3a:60:41:1d:0d:2a:89:
fd:a4:e2:e3:fe:60:f0:86:e1:8f:ba:f2:45:38:ae:
f5:10:6e:ed:ba:b7:41:14:3c:5a:75:72:e5:cd:b9:
24:dc:73:20:c4:a4:aa:3b:e9:b7:d2:93:94:81:7e:
98:53:8a:3d:c2:63:b2:aa:a5:e7:f6:3a:a2:c3:ef:
bf:a0:b3:71:03:66:4a:a2:d3:bd:8d:ac:c6:10:01:
4e:bf:9e:07:19:86:66:92:37:a9:d7:fe:de:1b:e9:
20:79:d2:0b:47:e1:6f:f0:3e:18:30:97:e3:54:74:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:05:3D:78:66:4B:82:7A:D2:F5:D1:E5:A4:23:E7:D7:06:BA:91
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/c20FPXhmS4J60vXR5aQj59cGupE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.136.0/21
69.172.96.0/19
82.145.160.0/19
178.20.72.0/21
185.3.36.0/22
213.137.32.0/19
IPv6:
2a00:fa80::/29
Signature Algorithm: sha256WithRSAEncryption
69:ab:b2:60:75:6a:88:85:d6:e3:77:5f:01:d0:81:7e:1d:3e:
94:91:1b:39:36:fc:44:a3:22:3a:e2:8b:b0:8b:37:08:cd:f6:
08:b4:93:71:70:24:3f:cf:74:4d:da:db:f2:21:4c:28:54:23:
47:c4:2e:78:c3:64:4d:1f:f4:02:73:3a:f5:fe:6c:83:f3:1d:
64:72:ce:94:94:d8:07:33:9e:74:49:b0:3c:ba:c8:9b:41:cb:
e4:48:38:19:e5:99:c6:a2:04:1f:35:4f:dd:4e:87:c9:94:fc:
ef:15:0f:19:d5:4f:2e:cb:6b:d8:86:8b:78:7d:06:db:e8:60:
30:bd:e5:fc:0d:80:cf:e1:28:c6:f4:0f:ec:9f:79:42:69:6a:
ca:b7:17:f7:2f:7c:7b:7b:d1:cd:a6:50:ff:f0:e9:fe:5b:d5:
82:96:0a:52:b7:56:a7:71:26:2f:a6:c6:e7:8f:e4:e6:41:bf:
70:bf:39:c8:f0:13:38:53:ca:ba:35:08:3e:07:9e:ff:e2:61:
8f:c1:67:1b:06:90:61:26:e7:1c:5a:3b:99:1b:93:fd:e0:45:
5b:ee:5d:37:1a:5b:db:48:2b:73:c8:ce:64:bf:83:5f:7d:55:
86:81:dd:bc:05:1a:88:18:fb:36:2b:f3:c0:fd:42:64:40:d3:
01:9b:1f:de
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZQlIWBpk4334+s8hfUqMgcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjdiOWNlZTAwNDMwMGVhZmUwOWJmMTJmY2I2ZGExZGQz
MGE0ZDcwHhcNMjUwMTAyMDM0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzZkMDUzZDc4NjY0YjgyN2FkMmY1ZDFlNWE0MjNlN2Q3MDZiYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFgJld6nghvP14hHWbqpXNLfWxtn
rn6CWTt0dnq0ZphdC5ymMu9ekMi2ZVshWrC0G0YAleFIZ3kQJKLcRpLsh1zv3sAl
DYDy5z2EBZB1OQIRVUhB/1R46iN+LF0+Vh4uErZfTL0iV2wYtR/zN0HVYO7ctHqF
y/zwicyNzH7pnOXRDInD5LgLyKXjreRJmjpgQR0NKon9pOLj/mDwhuGPuvJFOK71
EG7turdBFDxadXLlzbkk3HMgxKSqO+m30pOUgX6YU4o9wmOyqqXn9jqiw++/oLNx
A2ZKotO9jazGEAFOv54HGYZmkjep1/7eG+kgedILR+Fv8D4YMJfjVHShGQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFHNtBT14ZkuCetL10eWkI+fXBrqRMB8GA1UdIwQY
MBaAFGq3uc7gBDAOr+Cb8S/LbaHdMKTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYt
ODhhYTZmZDBhYThlLzEvYzIwRlBYaG1TNEo2MHZYUjVhUWo1OWNHdXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYtODhhYTZmZDBhYThl
LzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDHxiIAwQF
RaxgAwQFUpGgAwQDshRIAwQCuQMkAwQF1YkgMA0EAgACMAcDBQMqAPqAMA0GCSqG
SIb3DQEBCwUAA4IBAQBpq7JgdWqIhdbjd18B0IF+HT6UkRs5NvxEoyI64ouwizcI
zfYItJNxcCQ/z3RN2tvyIUwoVCNHxC54w2RNH/QCczr1/myD8x1kcs6UlNgHM550
SbA8usibQcvkSDgZ5ZnGogQfNU/dTofJlPzvFQ8Z1U8uy2vYhot4fQbb6GAwveX8
DYDP4SjG9A/sn3lCaWrKtxf3L3x7e9HNplD/8On+W9WClgpSt1ancSYvpsbnj+Tm
Qb9wvznI8BM4U8q6NQg+B57/4mGPwWcbBpBhJuccWjuZG5P94EVb7l03GlvbSCtz
yM5kv4NffVWGgd28BRqIGPs2K/PA/UJkQNMBmx/e
-----END CERTIFICATE-----
Generated at Tue Apr 1 17:23:49 2025 by rpki-client on console.sobornost.net