Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/ffZavXQaQNIwwKVW84vxnOTS_2k.roa
File: ffZavXQaQNIwwKVW84vxnOTS_2k.roa (raw, json)
Hash identifier: oA0RmBJXJ8Iaj/uIUokVdX89kZuQ0WJjVTCDBbmztv8=
Subject key identifier: 7D:F6:5A:BD:74:1A:40:D2:30:C0:A5:56:F3:8B:F1:9C:E4:D2:FF:69
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 019428254A0138DB34B351DD2E1B4A424218
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/ffZavXQaQNIwwKVW84vxnOTS_2k.roa
Signing time: Thu 02 Jan 2025 17:51:59 +0000
ROA not before: Thu 02 Jan 2025 17:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199671
IP address blocks: 31.135.168.0/21 maxlen: 21
78.31.209.0/24 maxlen: 24
195.225.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:4a:01:38:db:34:b3:51:dd:2e:1b:4a:42:42:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 17:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df65abd741a40d230c0a556f38bf19ce4d2ff69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:d7:b5:bd:b3:a8:48:0b:b2:9c:0b:2f:3e:
09:fa:a3:76:08:a0:ab:a1:41:cf:d5:08:03:f3:9e:
e5:b5:26:07:65:6c:f1:3f:84:da:63:1b:34:43:c2:
4b:cb:4b:6a:a6:74:aa:e3:cb:b9:8b:59:f4:57:34:
63:8f:50:87:04:46:e2:74:6e:34:8f:67:81:6a:b3:
aa:7b:0d:ac:47:1e:52:89:70:a0:6a:64:ac:a3:c7:
56:bb:02:78:70:b6:37:59:3a:58:2a:17:a3:0a:81:
3f:ab:04:09:46:5c:ed:cf:21:74:d0:4d:84:55:39:
7f:42:38:97:d5:e3:69:42:16:6c:e8:e6:31:0a:54:
62:8a:01:a5:5a:10:f3:06:12:6c:63:2d:dc:39:49:
f8:1b:4f:8a:5f:a5:3c:af:6b:a4:ab:6a:ca:44:94:
9e:60:58:a5:06:39:74:ce:cb:77:b8:c1:04:57:89:
1b:1f:72:2e:c1:06:cc:6b:8e:ed:0b:d5:d2:fe:1f:
ae:9c:93:41:a9:df:e9:8c:48:f3:5b:c9:f4:a5:76:
3f:6d:a1:d1:04:bc:20:78:50:6d:15:82:fc:2a:0b:
e3:fb:29:1a:75:e7:aa:2d:43:06:4c:8a:06:20:96:
6f:ef:12:f9:e7:b3:83:27:b3:09:40:94:8d:f4:5c:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F6:5A:BD:74:1A:40:D2:30:C0:A5:56:F3:8B:F1:9C:E4:D2:FF:69
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/ffZavXQaQNIwwKVW84vxnOTS_2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.168.0/21
78.31.209.0/24
195.225.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:b5:55:71:cf:8e:c4:00:bf:c6:c0:fb:d0:d7:bf:13:5b:44:
d8:d5:70:bc:75:af:28:80:10:b7:88:85:f9:ce:88:98:b4:6d:
c0:89:71:13:4d:4f:bc:35:f2:a3:05:91:dc:ce:50:c7:36:88:
e4:19:da:36:84:84:9f:cd:24:9e:f0:e2:10:1a:ac:9e:6d:11:
a2:2f:06:68:ce:2f:29:3d:0d:a4:c8:43:bb:26:6f:e6:9e:68:
a6:cb:88:40:68:cb:89:b6:c3:dc:62:16:36:9f:a0:25:68:ff:
2e:3b:83:48:ae:93:d0:38:39:cd:44:22:b8:fd:6e:a8:00:a0:
ac:0a:5b:e8:64:f1:57:55:3e:d7:34:42:8c:96:fd:86:c0:bb:
0c:4b:1e:d6:8c:7a:95:46:0f:56:1c:cb:db:c5:9e:44:43:18:
59:0b:99:06:78:c9:c1:69:dc:31:73:16:6d:a0:b8:32:9a:50:
cc:35:ac:63:13:36:a1:c9:71:e5:2a:fb:2a:c9:e9:10:bc:45:
6f:69:a7:1f:bc:22:41:df:4f:c9:a2:27:ab:33:ae:07:1f:a1:
6a:c2:31:0a:c0:18:84:26:68:73:b6:d0:ef:26:6b:3c:81:d1:
55:d4:26:27:fa:cc:5e:7a:f9:d6:98:ae:c8:36:dc:93:31:06:
90:cb:60:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:13 2025 by rpki-client on console.sobornost.net