Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa
File: ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa (raw, json)
Hash identifier: tGIGMmrAiBAVPdoPhNgWbiaEcKncDLBEr0fehIJsIkA=
Subject key identifier: A2:FB:A8:62:FF:C8:63:A1:F9:55:63:FB:51:58:45:13:25:2F:65:1F
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 01942B9825909BF5A047C0A45366630E594F
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa
Signing time: Fri 03 Jan 2025 09:56:18 +0000
ROA not before: Fri 03 Jan 2025 09:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51683
IP address blocks: 31.40.241.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
185.115.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:98:25:90:9b:f5:a0:47:c0:a4:53:66:63:0e:59:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Jan 3 09:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2fba862ffc863a1f95563fb51584513252f651f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:0e:57:49:31:d4:ed:ab:ab:56:d1:d4:79:
16:b7:01:4a:01:8c:1b:09:c9:0d:9b:e3:51:f7:3b:
c0:06:5f:1e:82:cf:4c:53:18:b3:f5:ed:1a:c0:47:
95:bf:91:e4:1e:38:d2:b9:c1:4e:9c:38:97:39:17:
4c:3a:50:c8:e5:ba:71:01:79:02:5b:45:24:66:c8:
87:31:8f:f5:87:1d:78:e7:d2:fb:ec:fb:75:93:af:
20:e2:98:92:71:96:44:8a:cb:11:a4:29:e9:0f:dd:
08:c9:16:26:02:0f:29:8f:0d:f1:1c:d7:0b:aa:a1:
4b:09:86:6f:d5:d4:a0:02:6f:ee:2f:8d:e8:3d:b6:
d7:31:91:7c:99:ce:ca:97:7e:a5:0e:df:a7:d6:b7:
7d:be:3b:f1:ac:ff:e4:47:6d:28:eb:02:cf:a8:d0:
d2:07:9a:41:96:2a:cd:4e:0a:20:7d:36:a2:dc:b4:
b8:ef:a8:dc:62:61:17:91:d0:85:bb:29:95:f5:d9:
74:6e:20:70:95:ae:5e:9c:26:7c:d6:da:5d:f3:9f:
bc:95:57:51:53:f2:c7:a1:69:3c:10:32:c8:1b:8c:
5a:00:a8:49:37:98:f7:9d:f2:8a:28:f0:b8:16:39:
c7:04:0a:37:2a:ce:43:80:e8:1e:cc:a2:2f:ff:56:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FB:A8:62:FF:C8:63:A1:F9:55:63:FB:51:58:45:13:25:2F:65:1F
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.241.0/24
31.40.243.0/24
185.9.138.0/24
185.115.209.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4c:57:c5:c1:3f:49:3a:a2:d6:57:1f:e7:84:7d:62:bb:4b:
7f:5f:0a:a5:89:04:f0:45:57:ff:a4:ca:3d:e1:b8:4d:9a:7b:
4c:32:d6:12:a7:db:d5:2a:59:ec:fc:4c:28:45:29:d5:9a:5d:
d4:ba:b5:67:3c:12:54:9c:eb:93:3e:67:76:04:13:fe:85:e9:
93:47:bc:b6:08:c8:ef:58:b6:72:04:c7:34:ee:57:27:3c:de:
56:77:00:b7:d3:8e:0c:a7:43:f0:6b:12:cc:5a:64:ea:82:8c:
57:c0:44:21:ba:a1:6c:8b:7a:21:68:0a:93:2b:69:a6:a6:02:
1d:f6:ed:2e:7d:19:73:1d:e1:e5:c0:3b:aa:8e:b7:e2:bc:50:
1b:4b:68:bc:be:4a:db:de:81:bb:fc:a3:4c:de:a5:d7:f4:47:
ca:67:e7:b0:c8:ce:f5:38:0d:2f:26:ac:a1:63:e0:67:93:39:
24:25:a8:91:5f:7c:24:d9:2a:c9:b4:d4:f4:4f:05:ce:40:cd:
22:7e:31:fe:52:d5:39:f3:7c:40:0e:4a:69:0e:0a:ba:70:dc:
8f:da:8b:24:53:34:61:54:99:a6:51:be:d8:7d:06:a3:27:27:
19:4c:01:c0:2a:21:4b:4c:ec:e4:20:36:91:b7:d6:e9:56:64:
dd:1a:ec:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net