Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/VLeNnvBLMYk8gOHR_-22dfW6G44.roa
File: VLeNnvBLMYk8gOHR_-22dfW6G44.roa (raw, json)
Hash identifier: 5HG6qzXH+BEADfnhDBzANANoNu5RH4EARqzx79X5k7M=
Subject key identifier: 54:B7:8D:9E:F0:4B:31:89:3C:80:E1:D1:FF:ED:B6:75:F5:BA:1B:8E
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0193D3A938FD31EFF79C4403A8C332A530A4
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/VLeNnvBLMYk8gOHR_-22dfW6G44.roa
Signing time: Tue 17 Dec 2024 08:08:22 +0000
ROA not before: Tue 17 Dec 2024 08:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/19 maxlen: 19
31.221.160.0/19 maxlen: 19
31.221.192.0/19 maxlen: 19
31.221.224.0/19 maxlen: 19
37.29.128.0/17 maxlen: 17
46.6.0.0/18 maxlen: 18
46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
46.6.112.0/24 maxlen: 24
46.6.113.0/24 maxlen: 24
46.6.114.0/24 maxlen: 24
46.6.128.0/17 maxlen: 17
46.222.0.0/17 maxlen: 17
46.222.128.0/17 maxlen: 17
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.240.0/24 maxlen: 24
95.169.241.0/24 maxlen: 24
95.169.246.0/24 maxlen: 24
109.227.128.0/19 maxlen: 19
109.227.128.0/20 maxlen: 20
109.227.144.0/20 maxlen: 20
109.227.178.0/24 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:a9:38:fd:31:ef:f7:9c:44:03:a8:c3:32:a5:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Dec 17 08:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54b78d9ef04b31893c80e1d1ffedb675f5ba1b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:0c:d7:7d:57:6a:03:3e:24:49:9e:dd:6f:
0d:ee:76:b9:10:e3:30:20:67:5f:7a:a5:9f:da:58:
54:51:c6:41:2d:09:e5:83:77:65:18:3e:2f:c2:47:
eb:f1:9d:81:c9:45:43:6b:bc:f3:d9:5e:47:46:1c:
b7:2e:fd:f7:99:21:4e:85:2c:1a:82:89:e8:0f:2d:
ec:c5:f3:a8:7b:f2:5d:d5:68:65:55:6e:8f:d6:23:
ce:2b:08:92:7c:fb:3f:4a:98:a3:8c:cd:d2:c6:e6:
1b:76:17:ab:fc:74:73:93:11:c8:0d:41:12:c5:f5:
ea:db:9f:54:b6:22:0e:66:f3:8e:cf:13:ca:78:2d:
20:2d:79:dc:58:4b:74:28:81:ad:e5:60:d7:ec:fa:
4d:15:bd:ef:8d:9b:19:cd:ef:23:b7:02:2c:ac:2a:
c9:f0:3d:8d:4e:01:c3:04:88:39:b8:b0:13:34:81:
8c:4c:22:39:5d:6f:41:f5:35:64:83:05:d5:59:ae:
23:7d:2f:6c:f4:c4:c0:9c:b3:0c:68:12:ba:31:d5:
49:b2:d6:5d:9d:05:11:51:12:c1:74:8c:8e:b5:e1:
b2:73:75:71:7b:d6:b5:e3:fb:5a:11:71:15:1c:f1:
8e:e9:20:07:57:a0:ee:9b:99:29:65:b3:0a:2c:d5:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:8D:9E:F0:4B:31:89:3C:80:E1:D1:FF:ED:B6:75:F5:BA:1B:8E
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/VLeNnvBLMYk8gOHR_-22dfW6G44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/18
46.6.112.0-46.6.114.255
46.6.128.0/17
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.240.0/23
95.169.246.0/24
109.227.128.0/19
109.227.178.0/24
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:a9:f1:1e:40:81:05:89:bd:12:3f:79:bb:4d:25:96:76:c4:
99:e7:3f:aa:fe:e2:e1:77:c3:9c:ec:83:c4:ca:87:c2:f8:ed:
7a:05:77:46:ec:bf:32:d3:01:93:e2:9c:b6:b6:61:04:0f:8c:
e1:bd:85:6c:75:64:9c:a5:d4:05:d6:44:e4:f9:a8:c0:b5:bb:
6c:9a:80:dc:b2:1b:6d:f3:19:9b:d9:f2:98:f7:4c:19:b0:4e:
ae:fb:8d:0a:05:be:e0:44:4c:05:cd:40:a3:0c:cc:d8:13:52:
7d:22:3b:cd:fa:b6:21:d2:46:95:2e:22:9c:03:77:73:22:06:
e2:18:2e:f0:05:ac:af:2b:d5:98:f2:4e:b2:be:8a:f3:f5:c6:
6f:9a:47:b7:bd:35:54:93:1e:45:1d:92:ee:87:f3:19:e3:81:
e8:4a:01:56:24:25:8e:b4:11:57:4b:71:ac:15:29:e2:43:67:
b3:61:cc:97:41:01:ad:7a:85:8a:00:a9:04:2b:4c:5a:03:4e:
67:cc:d2:7a:7e:31:5a:1c:22:be:22:17:77:c5:b7:41:0d:55:
ee:0a:9f:9a:03:4d:f8:4d:8b:6f:1c:5b:c2:50:b3:05:ff:ca:
6e:13:c6:04:d8:8f:d7:a8:43:3d:0d:74:73:cf:38:4a:8a:ac:
8a:b9:df:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:04 2024 by rpki-client on console.sobornost.net