Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/c8dGTAIiEoMZuysXoy8i3no4WTc.roa
File: c8dGTAIiEoMZuysXoy8i3no4WTc.roa (raw, json)
Hash identifier: +ywYYlTkpKv0jVYlOU3bPsTHKcPGyi9I418DkO4SDBk=
Subject key identifier: 73:C7:46:4C:02:22:12:83:19:BB:2B:17:A3:2F:22:DE:7A:38:59:37
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0195B23C95E8EB89859AE1AF8F89608ABE13
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/c8dGTAIiEoMZuysXoy8i3no4WTc.roa
Signing time: Thu 20 Mar 2025 06:27:49 +0000
ROA not before: Thu 20 Mar 2025 06:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1547
IP address blocks: 31.31.0.0/19 maxlen: 19
31.31.0.0/20 maxlen: 20
31.31.16.0/20 maxlen: 20
37.26.128.0/20 maxlen: 20
62.221.64.0/18 maxlen: 18
62.221.64.0/19 maxlen: 19
62.221.96.0/19 maxlen: 19
77.235.96.0/19 maxlen: 19
77.235.96.0/20 maxlen: 20
77.235.112.0/20 maxlen: 20
80.94.240.0/20 maxlen: 20
80.94.240.0/24 maxlen: 24
80.94.241.0/24 maxlen: 24
80.94.242.0/24 maxlen: 24
80.94.243.0/24 maxlen: 24
80.94.244.0/24 maxlen: 24
80.94.245.0/24 maxlen: 24
80.94.246.0/24 maxlen: 24
80.94.247.0/24 maxlen: 24
80.94.248.0/24 maxlen: 24
80.94.249.0/24 maxlen: 24
80.94.250.0/24 maxlen: 24
80.94.251.0/24 maxlen: 24
80.94.252.0/24 maxlen: 24
80.94.253.0/24 maxlen: 24
80.94.254.0/24 maxlen: 24
80.94.255.0/24 maxlen: 24
95.153.64.0/18 maxlen: 18
95.153.64.0/19 maxlen: 19
95.153.96.0/19 maxlen: 19
185.10.20.0/22 maxlen: 22
217.19.208.0/20 maxlen: 20
217.19.208.0/24 maxlen: 24
217.19.209.0/24 maxlen: 24
217.19.210.0/24 maxlen: 24
217.19.211.0/24 maxlen: 24
217.19.212.0/24 maxlen: 24
217.19.213.0/24 maxlen: 24
217.19.214.0/24 maxlen: 32
217.19.215.0/24 maxlen: 24
217.19.216.0/24 maxlen: 24
217.19.217.0/24 maxlen: 24
217.19.218.0/24 maxlen: 24
217.19.219.0/24 maxlen: 24
217.19.220.0/24 maxlen: 24
217.19.221.0/24 maxlen: 24
217.19.222.0/24 maxlen: 24
217.19.223.0/24 maxlen: 24
2a03:f680::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:3c:95:e8:eb:89:85:9a:e1:af:8f:89:60:8a:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Mar 20 06:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73c7464c0222128319bb2b17a32f22de7a385937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:71:0f:1e:01:51:d9:2f:99:48:90:1d:a0:
ef:53:56:94:3a:4f:60:c2:7d:b9:83:48:86:25:12:
6a:c2:80:b3:53:c9:e6:e2:9d:41:41:cc:79:fa:d2:
38:d7:03:d7:9e:b2:37:9f:3d:4b:96:eb:33:1b:ca:
c5:4c:7e:52:55:8c:bb:46:b2:c7:9e:c6:d7:66:18:
ef:15:ab:98:27:6d:b3:5f:e4:35:3a:8e:2d:76:45:
95:51:bd:06:e6:69:fe:f0:e4:ce:47:a5:0c:29:86:
18:e0:5a:32:f7:64:03:46:29:49:02:01:80:0c:14:
25:f2:94:bc:47:b6:f6:cb:c2:d8:c4:a3:50:3c:8a:
9b:2e:cf:45:2a:d2:c5:7c:7b:f4:0c:f0:23:14:d0:
cb:87:12:0b:92:79:ee:76:7e:33:51:3f:92:1e:ab:
a0:7c:7c:b2:96:1b:a1:2b:60:16:36:18:16:95:a6:
71:64:b7:d1:e0:2d:1a:4e:a8:a6:be:f5:1b:13:d5:
9f:79:15:c4:b7:43:51:c7:fc:17:bd:89:44:8a:d3:
3e:b9:12:a3:00:34:b3:60:35:52:29:5e:51:1f:3f:
b3:cc:72:e1:67:23:d6:e8:86:89:a8:5f:fb:57:a9:
e0:bd:9a:ac:b1:70:ed:23:3e:c6:8e:bb:9b:1f:65:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:46:4C:02:22:12:83:19:BB:2B:17:A3:2F:22:DE:7A:38:59:37
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/c8dGTAIiEoMZuysXoy8i3no4WTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.0.0/19
37.26.128.0/20
62.221.64.0/18
77.235.96.0/19
80.94.240.0/20
95.153.64.0/18
185.10.20.0/22
217.19.208.0/20
IPv6:
2a03:f680::/32
Signature Algorithm: sha256WithRSAEncryption
52:1d:ed:d1:a6:a8:9c:06:6f:7c:ef:a9:02:2b:d0:7b:fa:c7:
0d:63:c4:ec:fc:84:9d:4c:49:3a:a1:39:fc:65:a8:dc:e3:3c:
8f:3e:25:18:35:07:ae:52:07:58:79:40:c2:5f:17:92:08:3b:
51:67:7f:1f:7f:67:cc:d4:9d:02:8c:50:1d:82:f6:7f:a6:0d:
68:b3:bf:8d:31:07:80:28:ec:2b:ad:86:04:c3:35:87:e7:20:
3a:4a:bc:41:52:7a:8d:f6:16:27:04:58:c4:5d:09:60:eb:20:
f2:67:34:f9:14:0e:62:c1:0a:b3:9e:a9:a7:f2:c9:3a:5b:ad:
21:eb:18:89:35:f7:f4:4e:bd:32:ec:cf:a6:1b:4e:dd:9b:ca:
3d:a2:c1:be:36:b7:a5:24:53:15:33:97:5d:db:31:b3:02:54:
48:2c:84:75:28:8b:e3:d5:38:7e:be:4d:60:73:75:aa:ed:5b:
b5:7e:5c:f7:8f:c3:af:32:88:ad:6c:e6:52:df:53:43:16:4c:
f4:e6:94:4a:ba:d5:17:c5:6e:8f:4b:e1:c3:9f:6d:35:4f:2a:
d9:fc:b5:83:12:c4:7a:0c:b7:42:eb:e1:1c:c6:ec:98:a5:07:
ce:27:76:95:58:0a:ce:83:6d:df:61:a0:b9:af:b0:f9:7d:8d:
74:e8:71:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:13:49 2025 by rpki-client on console.sobornost.net