Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3EMMS3NBCNAhyX0DH9LUSjH3u5Y.roa
File: 3EMMS3NBCNAhyX0DH9LUSjH3u5Y.roa (raw, json)
Hash identifier: rrGs7Mf63a4l7Ivk8Vreo5f2SUZXKChH8KSkyWXwz/A=
Subject key identifier: DC:43:0C:4B:73:41:08:D0:21:C9:7D:03:1F:D2:D4:4A:31:F7:BB:96
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F07E16F1B73FE1B7DBF164F631600C2C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3EMMS3NBCNAhyX0DH9LUSjH3u5Y.roa
Signing time: Tue 01 Apr 2025 08:35:49 +0000
ROA not before: Tue 01 Apr 2025 08:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.28.0/22 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.49.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.68.0/24 maxlen: 24
31.56.70.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.56.112.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.110.0/24 maxlen: 24
31.57.111.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:7e:16:f1:b7:3f:e1:b7:db:f1:64:f6:31:60:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 1 08:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc430c4b734108d021c97d031fd2d44a31f7bb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:03:ac:97:36:a9:54:a1:2f:69:0d:71:ea:aa:
82:bb:eb:e8:97:46:49:03:53:34:99:1f:7f:b2:4b:
5e:a3:fc:1c:e3:b1:4e:9d:1b:a2:78:8d:e8:97:78:
0d:f5:8d:40:a0:d5:16:13:c0:07:d7:41:0f:9f:60:
3e:b4:ca:66:b5:6d:a7:d3:40:0c:42:f3:30:89:07:
99:a0:c6:8e:b1:4a:4b:f0:79:4b:31:cb:98:4a:02:
32:00:e1:43:76:24:49:99:31:c1:8d:7e:7d:da:a1:
0b:53:e2:c2:11:77:32:2e:22:95:81:80:e2:fe:45:
89:db:55:9a:59:9e:8f:fc:79:a7:36:2c:c4:1a:96:
7c:f5:7d:c4:eb:26:e2:0f:72:9f:7b:93:46:db:d0:
7b:da:f2:aa:bc:9f:60:4c:a7:a2:87:7c:0d:30:8e:
af:0d:40:bd:f3:fa:4d:41:15:41:9f:87:ed:b6:61:
87:7a:a0:96:32:00:1a:ed:0f:0f:bc:dd:69:65:94:
2d:bd:3c:d3:03:22:24:4e:1b:c3:73:68:c6:27:1a:
85:89:00:b9:2d:96:d3:48:c4:0a:a2:2d:b1:49:42:
5b:11:6a:43:f5:a4:49:7a:3d:69:ba:ed:6e:28:88:
df:f7:fe:10:f9:64:de:0d:b6:ce:9d:5f:14:70:03:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:43:0C:4B:73:41:08:D0:21:C9:7D:03:1F:D2:D4:4A:31:F7:BB:96
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3EMMS3NBCNAhyX0DH9LUSjH3u5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.25.0/24
31.56.27.0-31.56.31.255
31.56.44.0/24
31.56.48.0/23
31.56.61.0/24
31.56.68.0/24
31.56.70.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.56.112.0/23
31.57.105.0-31.57.111.255
31.57.119.0/24
31.57.226.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:98:70:d8:cc:38:45:81:3e:e6:38:ee:4e:fe:ff:54:c9:ac:
20:1b:87:a8:dc:ac:0f:a6:fd:31:5e:8c:6d:bc:e9:10:68:cd:
36:91:58:dd:99:6f:a5:c6:6d:31:da:df:cb:14:1e:19:36:c4:
28:07:48:d5:2f:3d:14:54:22:70:fe:d1:8f:3b:98:b2:a1:4b:
1b:4a:f1:71:b7:e5:dd:58:ed:6b:b2:06:10:66:d2:da:28:f6:
41:68:68:96:cc:29:08:30:01:23:b6:ed:fc:b5:30:d3:71:6a:
3e:c9:17:5f:54:57:df:65:e5:5f:bf:22:35:e6:8f:1a:c6:14:
df:83:43:e0:03:5a:93:65:08:e9:6d:ed:cf:9d:d8:1d:c1:ad:
a8:2c:fd:a5:38:61:14:58:10:fa:67:ae:9e:cc:3e:16:90:b7:
b6:0f:36:e5:05:bb:9a:5d:48:89:bb:83:df:1c:41:ff:e1:c5:
ec:46:2b:ac:cd:f8:1b:4c:76:d5:3a:91:82:39:4e:0c:05:51:
ac:15:b3:a1:3d:75:e2:5c:43:12:6c:0f:3e:33:80:2a:c1:09:
4f:43:45:4a:58:ef:35:66:f1:7a:47:2d:e4:9d:f7:2b:a2:9d:
00:d8:8c:04:7d:c6:a7:c5:21:72:89:e3:77:e6:09:30:d5:a2:
08:fe:62:ed
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAZXwfhbxtz/ht9vxZPYxYAwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDAxMDgzNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzQzMGM0YjczNDEwOGQwMjFjOTdkMDMxZmQyZDQ0YTMxZjdiYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gOslzapVKEvaQ1x6qqCu+vol0ZJ
A1M0mR9/skteo/wc47FOnRuieI3ol3gN9Y1AoNUWE8AH10EPn2A+tMpmtW2n00AM
QvMwiQeZoMaOsUpL8HlLMcuYSgIyAOFDdiRJmTHBjX592qELU+LCEXcyLiKVgYDi
/kWJ21WaWZ6P/HmnNizEGpZ89X3E6ybiD3Kfe5NG29B72vKqvJ9gTKeih3wNMI6v
DUC98/pNQRVBn4fttmGHeqCWMgAa7Q8PvN1pZZQtvTzTAyIkThvDc2jGJxqFiQC5
LZbTSMQKoi2xSUJbEWpD9aRJej1puu1uKIjf9/4Q+WTeDbbOnV8UcANTTQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFNxDDEtzQQjQIcl9Ax/S1Eox97uWMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvM0VNTVMzTkJDTkFoeVgwREg5TFVTakgzdTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAB84GTAM
AwQAHzgbAwQFHzgAAwQAHzgsAwQBHzgwAwQAHzg9AwQAHzhEAwQAHzhGAwQCHzhQ
MAwDBAIfOFwDBAMfOGADBAEfOHAwDAMEAB85aQMEBB85YAMEAB85dwMEAB854gME
AB86gjANBgkqhkiG9w0BAQsFAAOCAQEAL5hw2Mw4RYE+5jjuTv7/VMmsIBuHqNys
D6b9MV6MbbzpEGjNNpFY3ZlvpcZtMdrfyxQeGTbEKAdI1S89FFQicP7RjzuYsqFL
G0rxcbfl3Vjta7IGEGbS2ij2QWholswpCDABI7bt/LUw03FqPskXX1RX32XlX78i
NeaPGsYU34ND4ANak2UI6W3tz53YHcGtqCz9pThhFFgQ+meunsw+FpC3tg825QW7
ml1IibuD3xxB/+HF7EYrrM34G0x21TqRgjlODAVRrBWzoT114lxDEmwPPjOAKsEJ
T0NFSljvNWbxekct5J33K6KdANiMBH3Gp8Uhconjd+YJMNWiCP5i7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net