Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ABLJox_gdkyU9lQq1zpE0p0WR2c.roa
File: ABLJox_gdkyU9lQq1zpE0p0WR2c.roa (raw, json)
Hash identifier: 60gYKfW1FZ59O8mTCX68zCr+x6C0q+CX6J7/1AvC2HY=
Subject key identifier: 00:12:C9:A3:1F:E0:76:4C:94:F6:54:2A:D7:3A:44:D2:9D:16:47:67
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0193FA25276D7565CB44DFA2A85A2AC75016
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ABLJox_gdkyU9lQq1zpE0p0WR2c.roa
Signing time: Tue 24 Dec 2024 19:29:19 +0000
ROA not before: Tue 24 Dec 2024 19:29:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 31.56.4.0/23 maxlen: 23
31.56.24.0/24 maxlen: 24
31.56.42.0/23 maxlen: 24
31.56.57.0/24 maxlen: 24
31.56.71.0/24 maxlen: 24
31.56.74.0/24 maxlen: 24
31.56.75.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.56.104.0/22 maxlen: 22
31.56.108.0/22 maxlen: 22
31.56.114.0/23 maxlen: 24
31.56.118.0/23 maxlen: 24
31.56.120.0/22 maxlen: 24
31.57.132.0/23 maxlen: 23
31.57.146.0/23 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
31.57.176.0/21 maxlen: 24
31.57.178.0/24 maxlen: 24
31.57.179.0/24 maxlen: 24
31.57.181.0/24 maxlen: 24
31.57.182.0/24 maxlen: 24
31.57.192.0/22 maxlen: 24
31.57.200.0/23 maxlen: 24
31.57.208.0/20 maxlen: 24
31.57.232.0/22 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.131.0/24 maxlen: 24
31.58.152.0/22 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.42.0/24 maxlen: 24
31.59.43.0/24 maxlen: 24
31.59.56.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.58.0/24 maxlen: 24
31.59.96.0/22 maxlen: 22
31.59.112.0/22 maxlen: 22
31.59.130.0/24 maxlen: 24
31.59.184.0/22 maxlen: 24
31.59.192.0/22 maxlen: 22
31.59.216.0/22 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.229.0/24 maxlen: 24
31.59.231.0/24 maxlen: 24
31.59.244.0/24 maxlen: 24
31.59.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fa:25:27:6d:75:65:cb:44:df:a2:a8:5a:2a:c7:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Dec 24 19:29:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0012c9a31fe0764c94f6542ad73a44d29d164767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:27:a6:a8:02:14:a1:9d:fb:f8:1e:56:a3:
43:19:fe:16:fe:7c:1c:a2:02:cb:5f:ed:c4:bf:3c:
e8:ac:bd:bf:40:f6:e3:6c:52:d8:49:89:55:ff:da:
a1:c2:81:76:ba:35:4d:91:2b:f1:64:c8:43:2d:90:
a4:cc:e2:68:ab:85:69:34:e1:fb:18:e6:8b:09:c7:
70:7d:94:8e:a4:88:e0:4c:e9:6f:e6:ca:50:d3:ae:
95:49:70:de:9a:7d:42:94:c3:fd:7d:cd:82:ff:bc:
0a:4a:d2:ed:02:2f:f8:d3:06:5d:9a:71:fa:3f:6a:
89:7c:86:49:33:e2:52:60:e9:2e:b0:c7:a3:7b:3a:
3b:84:d9:e5:7e:f3:ce:44:bf:73:e6:71:3d:d8:8c:
d9:bf:b3:9b:95:e8:67:21:52:92:19:66:ec:9d:54:
46:cf:f9:e7:02:a3:14:ff:3c:65:99:c2:d5:6d:fe:
2a:57:18:49:d7:bf:f2:02:0c:be:21:93:f6:2a:38:
ab:29:19:3e:10:14:7e:4e:73:ac:17:1f:bc:89:3c:
fe:3b:d0:36:11:58:6a:dd:e3:a6:de:c1:d0:1a:06:
e1:ba:d0:c9:47:0e:2a:c1:42:d6:77:be:1f:92:fe:
0a:7b:2f:57:53:a6:b2:00:69:3a:b4:5c:83:d1:d3:
10:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:C9:A3:1F:E0:76:4C:94:F6:54:2A:D7:3A:44:D2:9D:16:47:67
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ABLJox_gdkyU9lQq1zpE0p0WR2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/23
31.56.24.0/24
31.56.42.0/23
31.56.57.0/24
31.56.71.0/24
31.56.74.0/23
31.56.89.0/24
31.56.104.0/21
31.56.114.0/23
31.56.118.0-31.56.123.255
31.57.132.0/23
31.57.146.0/23
31.57.151.0-31.57.152.255
31.57.176.0/21
31.57.192.0/22
31.57.200.0/23
31.57.208.0/20
31.57.232.0/22
31.58.34.0/23
31.58.131.0/24
31.58.152.0/22
31.59.41.0-31.59.43.255
31.59.56.0-31.59.58.255
31.59.96.0/22
31.59.112.0/22
31.59.130.0/24
31.59.184.0/22
31.59.192.0/22
31.59.216.0/22
31.59.228.0/23
31.59.231.0/24
31.59.244.0/23
Signature Algorithm: sha256WithRSAEncryption
be:75:89:bd:52:c8:c9:a1:1c:42:ca:c3:bc:48:04:c0:ab:1d:
cb:36:34:27:93:37:c3:4e:28:fb:b9:21:eb:49:f2:63:4e:52:
50:9f:d6:17:a2:f3:8f:5e:ec:2b:ab:5f:5d:dc:ea:1a:b9:06:
e5:40:fe:c3:b8:e4:21:da:de:54:93:ca:23:47:6f:2b:bc:0f:
44:88:e6:53:95:05:99:7f:be:59:61:b4:55:7f:29:e2:5e:61:
08:9b:fb:43:a3:69:77:ae:e4:56:44:66:68:78:1b:0b:5e:5e:
00:58:0a:a4:5f:8e:16:3c:7f:5d:24:cf:8d:4b:33:3b:8c:73:
20:2f:9a:26:21:18:37:aa:7b:8c:31:06:23:6b:b1:95:38:b2:
d8:22:a6:04:41:60:fd:c5:89:a3:9b:0b:11:21:ea:86:b9:6b:
72:e6:31:e2:d2:cb:4d:74:32:5a:78:ee:3a:82:ce:81:d9:a5:
31:f6:dc:d8:97:83:81:92:f0:2a:50:3b:0e:05:fd:ca:cc:e1:
a1:d0:d8:df:78:d8:20:7a:67:d5:71:c7:ad:36:c0:d8:84:96:
cc:99:fa:e0:66:b8:83:ad:8f:a5:b2:4b:68:07:6f:13:a6:ba:
b4:98:79:ba:ea:15:8c:97:6a:e5:b1:1c:da:77:f9:76:f7:0e:
11:f7:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net