Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/Acbly_fCXeuRyFDFzZjmCcQPl8U.roa
File: Acbly_fCXeuRyFDFzZjmCcQPl8U.roa (raw, json)
Hash identifier: 97l8f98tI95Opzr22XniXOh4lBsa/Ac1EBZZQOTU4Lo=
Subject key identifier: 01:C6:E5:CB:F7:C2:5D:EB:91:C8:50:C5:CD:98:E6:09:C4:0F:97:C5
Certificate issuer: /CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Certificate serial: 019427B5536739303F5A66C00A47320D33A9
Authority key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/Acbly_fCXeuRyFDFzZjmCcQPl8U.roa
Signing time: Thu 02 Jan 2025 15:49:42 +0000
ROA not before: Thu 02 Jan 2025 15:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47868
IP address blocks: 31.177.24.0/21 maxlen: 21
94.125.216.0/21 maxlen: 21
2a00:db00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:53:67:39:30:3f:5a:66:c0:0a:47:32:0d:33:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01c6e5cbf7c25deb91c850c5cd98e609c40f97c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:4f:a9:a0:ae:2c:46:8b:b4:a8:6b:ff:01:
14:18:a4:9f:44:92:47:53:0b:a1:b4:bb:fd:d1:d2:
f3:2b:a9:51:dd:e9:3b:91:58:28:d5:bb:87:ba:8e:
02:5b:b3:1a:a7:d5:e4:8b:74:34:fc:92:e7:8d:1b:
af:b5:54:2f:2a:c4:79:ee:f6:55:85:38:f9:6c:c9:
cd:8e:bf:9c:62:2e:e2:dd:0d:02:90:08:53:ff:d1:
7a:93:60:5e:43:b2:db:a6:be:6a:ed:4b:5b:6b:e9:
c7:6b:b8:65:ce:75:77:28:1b:35:aa:12:4e:0e:31:
91:cd:ba:43:60:80:d9:3b:f3:22:ed:6d:0c:eb:69:
42:6d:7b:4a:e6:c9:f5:25:a1:ce:24:67:8d:76:ec:
b0:94:b8:bb:ce:8a:8c:2f:cf:ac:d0:5c:30:46:32:
d1:10:ac:69:4b:d2:bc:82:59:0e:91:da:6c:89:51:
cf:cd:2b:4e:db:c6:11:35:43:8d:29:22:86:46:fd:
36:c6:35:84:28:68:d1:a8:e8:29:b7:79:71:d3:46:
7c:cf:d0:c9:c5:06:1d:89:8b:44:ae:9a:a7:42:de:
f9:00:0d:a9:24:05:7a:0d:85:cb:17:ec:e8:2d:bc:
ad:d8:11:8a:f9:bf:56:17:9e:27:a8:3c:ab:da:1b:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C6:E5:CB:F7:C2:5D:EB:91:C8:50:C5:CD:98:E6:09:C4:0F:97:C5
X509v3 Authority Key Identifier:
keyid:C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/Acbly_fCXeuRyFDFzZjmCcQPl8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.24.0/21
94.125.216.0/21
IPv6:
2a00:db00::/32
Signature Algorithm: sha256WithRSAEncryption
2e:04:e4:88:26:d9:2e:27:10:30:3d:9d:41:b4:cb:b0:22:b5:
21:ea:8a:3a:45:fe:df:66:00:63:bd:9f:12:a9:cc:00:25:e7:
4b:9e:a1:25:82:2e:ca:f1:a8:b1:3f:73:64:86:c4:70:6b:b7:
e5:7e:94:e6:36:ef:96:1c:5e:ed:f5:ed:e5:0d:9a:15:6d:cc:
40:b1:fc:e3:54:5b:6c:7c:49:d0:bc:b4:18:b8:fb:dc:1b:2d:
18:d2:7b:92:e5:db:73:4b:b8:cb:db:f8:57:89:2f:b8:f9:09:
30:01:ab:f9:30:d6:c7:5b:67:bf:a1:12:d2:75:71:0e:b3:1d:
24:11:a9:dc:c0:ff:fc:ff:4e:cd:8e:a0:b8:15:b3:d3:45:98:
df:a9:21:93:ef:2d:ad:ef:62:c8:d2:b2:6e:ea:94:2b:68:bf:
49:31:f8:fa:10:b3:3d:84:ae:46:89:39:89:73:c2:5e:00:b9:
fc:66:83:cc:c6:5c:0a:00:e5:76:b7:69:ae:f1:91:dc:19:32:
7f:c7:3e:ee:22:ac:11:de:b3:1d:48:5c:5b:9f:64:88:67:87:
c0:72:b1:c6:4e:85:df:7a:3e:d3:97:66:fe:b1:c4:02:05:c3:
70:c6:d8:63:52:ee:4e:fa:45:a4:ee:b4:87:70:64:f3:e7:aa:
1f:85:b5:cd
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQntVNnOTA/WmbACkcyDTOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZDc2YzFhZjhmYWQyZWJjNjM0ZWEyZTIzMzcwZjEwYzVj
NTlkMGIwHhcNMjUwMTAyMTU0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWM2ZTVjYmY3YzI1ZGViOTFjODUwYzVjZDk4ZTYwOWM0MGY5N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6dPqaCuLEaLtKhr/wEUGKSfRJJH
UwuhtLv90dLzK6lR3ek7kVgo1buHuo4CW7Map9Xki3Q0/JLnjRuvtVQvKsR57vZV
hTj5bMnNjr+cYi7i3Q0CkAhT/9F6k2BeQ7Lbpr5q7Utba+nHa7hlznV3KBs1qhJO
DjGRzbpDYIDZO/Mi7W0M62lCbXtK5sn1JaHOJGeNduywlLi7zoqML8+s0FwwRjLR
EKxpS9K8glkOkdpsiVHPzStO28YRNUONKSKGRv02xjWEKGjRqOgpt3lx00Z8z9DJ
xQYdiYtErpqnQt75AA2pJAV6DYXLF+zoLbyt2BGK+b9WF54nqDyr2hvDxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAHG5cv3wl3rkchQxc2Y5gnED5fFMB8GA1UdIwQY
MBaAFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQt
ZmRlNmZiOWFmMjMwLzEvQWNibHlfZkNYZXVSeUZERnpaam1DY1FQbDhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMjk1MzItNWM4OC00NjhlLWI0MWQtZmRlNmZiOWFmMjMw
LzEveGRkc0d2ajYwdXZHTk9vdUl6Y1BFTVhGblFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH7EYAwQD
Xn3YMA0EAgACMAcDBQAqANsAMA0GCSqGSIb3DQEBCwUAA4IBAQAuBOSIJtkuJxAw
PZ1BtMuwIrUh6oo6Rf7fZgBjvZ8SqcwAJedLnqElgi7K8aixP3NkhsRwa7flfpTm
Nu+WHF7t9e3lDZoVbcxAsfzjVFtsfEnQvLQYuPvcGy0Y0nuS5dtzS7jL2/hXiS+4
+QkwAav5MNbHW2e/oRLSdXEOsx0kEancwP/8/07NjqC4FbPTRZjfqSGT7y2t72LI
0rJu6pQraL9JMfj6ELM9hK5GiTmJc8JeALn8ZoPMxlwKAOV2t2mu8ZHcGTJ/xz7u
IqwR3rMdSFxbn2SIZ4fAcrHGToXfej7Tl2b+scQCBcNwxthjUu5O+kWk7rSHcGTz
56ofhbXN
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:50 2025 by rpki-client on console.sobornost.net