Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/pkgQahpzHWh56tzgd9d98n8d-uM.roa
File: pkgQahpzHWh56tzgd9d98n8d-uM.roa (raw, json)
Hash identifier: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=
Subject key identifier: A6:48:10:6A:1A:73:1D:68:79:EA:DC:E0:77:D7:7D:F2:7F:1D:FA:E3
Certificate issuer: /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial: 019425FBFFD8B6DB5B4AD61474447C5D1556
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/pkgQahpzHWh56tzgd9d98n8d-uM.roa
Signing time: Thu 02 Jan 2025 07:47:39 +0000
ROA not before: Thu 02 Jan 2025 07:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56851
IP address blocks: 31.131.16.0/20 maxlen: 24
193.111.60.0/22 maxlen: 24
2001:67c:15e4::/48 maxlen: 48
2001:67c:15f0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:ff:d8:b6:db:5b:4a:d6:14:74:44:7c:5d:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a648106a1a731d6879eadce077d77df27f1dfae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:9b:aa:d7:0f:05:4f:90:be:98:b7:0a:80:
a4:88:b9:3a:fb:50:e8:56:45:a6:54:3d:4b:ed:23:
35:ae:94:18:15:94:77:52:34:73:39:0f:4b:21:e1:
c6:d7:ff:8f:d4:41:94:92:f7:db:a9:1d:f3:4a:98:
f3:ff:8e:a7:0e:4a:df:24:fa:f0:89:69:86:ef:dc:
4e:68:e1:ea:ab:27:28:64:b5:6a:f9:91:10:0d:26:
5a:85:09:73:9e:23:0f:2a:c6:ed:de:b5:66:e0:66:
9d:08:10:90:5d:bf:de:e4:46:63:17:8d:c8:ae:f4:
e0:34:eb:f6:13:ce:28:eb:c1:7a:10:78:2b:59:f5:
bc:5a:99:db:a8:45:88:9b:97:ee:26:bb:c9:b6:cd:
9f:e3:98:3e:b6:c5:f1:58:ee:6b:7b:bd:d1:21:a1:
31:1b:c1:64:5d:b7:6a:7a:93:03:55:86:0a:7b:9b:
d8:12:08:4f:d9:5c:1d:b3:94:dc:51:7b:86:34:b8:
8b:08:8c:ec:33:18:28:1d:48:dd:f6:64:49:5b:b4:
23:dc:0a:8d:88:63:cb:20:4d:ff:81:e1:a2:bb:be:
20:98:9d:31:fb:dd:1c:34:80:8e:7f:47:d1:db:0e:
7a:35:9b:2f:40:ed:6c:07:00:b4:3a:56:fc:95:70:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:10:6A:1A:73:1D:68:79:EA:DC:E0:77:D7:7D:F2:7F:1D:FA:E3
X509v3 Authority Key Identifier:
keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/pkgQahpzHWh56tzgd9d98n8d-uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.16.0/20
193.111.60.0/22
IPv6:
2001:67c:15e4::/48
2001:67c:15f0::/48
Signature Algorithm: sha256WithRSAEncryption
7b:f2:35:cb:83:b3:40:ca:14:93:fd:66:bd:16:8f:aa:0e:96:
cf:45:72:c6:21:37:d9:35:6b:a0:fa:36:10:47:f4:f9:bc:c4:
a9:21:28:48:a6:6b:3f:db:36:53:7b:88:6f:29:a7:e4:54:5e:
5e:00:d2:e8:61:f7:fb:0f:82:6f:0d:d6:f1:51:8f:15:b3:fb:
be:22:ad:37:60:c0:d3:3f:84:95:51:4f:66:4a:56:7f:18:f0:
f8:c7:28:61:73:b6:13:a9:2a:d4:2b:c7:44:81:78:cc:12:bc:
aa:5a:dc:8e:95:9e:d5:96:cf:eb:42:c7:80:dc:9a:aa:08:dc:
0f:92:69:49:f9:21:8d:c8:62:2f:24:27:56:eb:76:bd:9b:fb:
cc:8c:e3:5b:4d:a8:27:db:2e:74:8c:68:1b:a5:15:34:d3:1f:
dd:76:a6:04:f9:ab:d7:c6:60:38:cd:ce:9c:95:2c:ee:70:d4:
91:7c:87:0e:fb:ec:3b:9c:17:88:4d:f1:87:58:79:16:7c:be:
e0:4c:e0:89:e6:43:3a:79:30:6c:dc:3b:a2:b1:5e:18:30:2a:
4f:cf:fd:96:70:f1:7c:af:7b:c4:31:0e:a1:d8:ed:a8:4b:59:
41:a2:1b:3d:c1:9f:05:34:a4:73:29:7e:44:5c:54:0d:c2:67:
fd:c9:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net