Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/5cvTQhZb21i8dsjZHSMpM2dxt9k.roa
File: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (raw, json)
Hash identifier: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=
Subject key identifier: E5:CB:D3:42:16:5B:DB:58:BC:76:C8:D9:1D:23:29:33:67:71:B7:D9
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 0194221FC5BF73F53280A1FE56E70DBEA974
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/5cvTQhZb21i8dsjZHSMpM2dxt9k.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56632
IP address blocks: 31.7.129.0/24 maxlen: 24
31.7.130.0/24 maxlen: 24
31.7.131.0/24 maxlen: 24
31.7.133.0/24 maxlen: 24
31.7.135.0/24 maxlen: 24
31.7.136.0/24 maxlen: 24
31.7.137.0/24 maxlen: 24
31.7.138.0/24 maxlen: 24
31.7.139.0/24 maxlen: 24
31.7.140.0/24 maxlen: 24
31.7.142.0/24 maxlen: 24
31.7.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c5:bf:73:f5:32:80:a1:fe:56:e7:0d:be:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5cbd342165bdb58bc76c8d91d2329336771b7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:ec:83:ec:44:74:70:3b:d5:df:e0:37:5e:
dc:e5:8d:12:ea:a4:3b:52:27:f6:c1:f2:b9:71:ce:
84:37:4f:a5:d7:dc:d9:4a:9c:f8:20:2f:60:b3:85:
21:f5:a9:40:1c:2f:de:46:4f:57:c0:ad:27:ea:c5:
b1:94:c1:0f:b9:a1:06:d1:79:55:5c:3d:a3:0c:5c:
54:e1:1b:41:3c:cf:f7:13:ff:4a:b2:8b:30:9f:0e:
f9:45:aa:d8:72:b4:f6:d9:d0:da:bc:92:78:da:1d:
83:18:65:6f:c9:94:d8:1e:92:86:21:b7:c5:7a:05:
a3:21:ef:cd:1e:c3:e7:10:58:3c:58:8c:eb:fe:8e:
aa:fb:a5:25:52:78:34:67:19:90:ad:60:11:f3:fc:
a3:25:dd:cf:52:62:05:28:c4:d8:b8:51:20:bd:8c:
62:6c:24:79:a5:d3:50:91:01:0e:47:a7:1f:fd:ba:
c9:cd:23:09:72:71:b1:a6:70:96:b3:cf:a7:bf:ca:
39:82:3a:6c:f5:7e:bd:31:db:d3:86:13:a6:09:d6:
eb:94:a3:b8:be:77:2e:9e:ac:22:b9:d6:e5:55:cb:
d0:f2:14:ae:e9:01:22:b8:79:a7:af:d0:f5:8c:f1:
5d:57:67:3f:8e:07:ad:da:3b:31:f2:46:ab:df:5a:
66:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CB:D3:42:16:5B:DB:58:BC:76:C8:D9:1D:23:29:33:67:71:B7:D9
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/5cvTQhZb21i8dsjZHSMpM2dxt9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.129.0-31.7.131.255
31.7.133.0/24
31.7.135.0-31.7.140.255
31.7.142.0/23
Signature Algorithm: sha256WithRSAEncryption
70:97:c4:72:94:61:4f:c6:5d:7e:d9:14:48:89:a6:62:2a:27:
f3:38:dc:c7:46:d4:5a:20:b8:e3:a9:99:53:c7:94:e9:63:bb:
29:20:8a:91:00:25:d8:bf:b8:bc:08:e0:64:87:1f:04:b3:4e:
55:ce:e2:4a:2c:54:09:54:d3:db:2d:74:4a:1c:92:93:26:1d:
a2:e4:1f:13:8e:e4:b3:49:7f:05:a3:ba:a9:91:c5:00:ec:af:
d8:32:a5:67:03:ed:14:b3:38:bf:ee:ee:97:c7:5b:fa:32:3b:
0b:d3:8f:84:1e:63:fd:e5:7b:c2:dd:ad:fd:a9:21:76:b3:8b:
63:59:f8:5b:4b:de:fb:23:94:a2:e0:12:f9:a9:73:c7:e3:7f:
9e:1c:88:ec:c5:c7:74:dc:15:f1:e6:44:03:48:52:47:64:e4:
e0:76:d9:d1:a3:3c:c1:f5:2b:7b:c1:ad:18:74:04:12:d8:e6:
90:81:e4:66:90:66:c3:02:2d:95:f4:2b:d0:bd:68:03:dd:2c:
e9:c0:5c:93:45:58:47:74:6f:24:c4:71:ce:47:9d:a7:0b:a3:
e0:b5:46:79:9d:50:ec:16:cb:75:f6:93:aa:6a:86:bf:77:5f:
46:11:d8:f1:7e:5e:d5:0e:6d:49:85:c2:df:e5:06:61:6f:41:
c4:44:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net