Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ClF9H1xTT5z29Z2kRLaX6FyAvVU.roa
File: ClF9H1xTT5z29Z2kRLaX6FyAvVU.roa (raw, json)
Hash identifier: YGlrjlGZFtKh/oSJDJiO9hKrM0AmzrwFa7F/KAdlPfk=
Subject key identifier: 0A:51:7D:1F:5C:53:4F:9C:F6:F5:9D:A4:44:B6:97:E8:5C:80:BD:55
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428236370393678AF53013823C5E3BBBC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ClF9H1xTT5z29Z2kRLaX6FyAvVU.roa
Signing time: Thu 02 Jan 2025 17:49:55 +0000
ROA not before: Thu 02 Jan 2025 17:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 31.56.35.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.205.0/24 maxlen: 24
31.57.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:63:70:39:36:78:af:53:01:38:23:c5:e3:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a517d1f5c534f9cf6f59da444b697e85c80bd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:b2:88:8a:12:ea:2d:a0:da:62:bd:c1:e4:
bf:71:0e:8b:46:b3:f4:9a:fe:a2:e9:8d:0b:cf:73:
17:14:f9:e9:0f:87:65:b1:67:13:68:39:33:89:c1:
42:5c:19:3d:18:19:99:a2:75:be:cf:ae:3d:d8:19:
8f:93:83:ad:4f:69:e1:e1:0c:b3:e3:33:67:03:9d:
9f:67:7c:42:eb:9b:1c:dd:64:77:78:92:7d:75:6b:
8b:fb:4b:0a:5f:17:7c:9e:6d:77:34:3e:e0:13:e4:
fa:bf:fe:02:68:bd:20:72:d2:64:c0:5b:3f:50:6f:
cb:32:c4:59:d7:8e:d6:86:cd:27:0e:eb:32:38:98:
25:d3:a5:9c:e1:3a:63:25:73:d8:fb:f3:24:0d:03:
2f:70:10:87:00:32:f5:96:be:df:27:fc:27:de:58:
ce:23:e9:14:3d:84:c9:dc:bf:83:26:26:b5:62:ac:
fe:d2:5b:26:46:d1:49:32:ce:53:1d:5b:c5:4a:a3:
81:66:85:96:17:dd:90:a3:58:91:90:2a:02:74:00:
cc:5f:52:d0:0b:18:79:26:0b:6a:5d:b9:f9:8c:70:
c7:24:62:6f:5b:a1:03:7c:22:05:99:aa:37:00:53:
44:f0:18:39:53:18:f6:e0:d7:a7:1a:9d:6d:8d:6a:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:7D:1F:5C:53:4F:9C:F6:F5:9D:A4:44:B6:97:E8:5C:80:BD:55
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ClF9H1xTT5z29Z2kRLaX6FyAvVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.57.146.0/24
31.57.205.0/24
31.57.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6b:a0:b3:90:e4:08:5d:93:eb:11:bc:7d:67:90:f6:ae:f3:
aa:8e:3f:da:92:ad:5f:53:65:4a:4d:23:bd:7a:00:04:4b:11:
db:a2:c1:b9:32:81:92:a6:bc:8a:70:d7:99:05:b5:b3:83:2f:
7d:b0:4e:17:fc:02:2e:fd:84:ac:da:b1:f8:77:7a:d4:d6:0c:
18:75:d4:19:31:95:fa:16:f4:28:29:79:b3:0f:53:ed:c5:2e:
dc:84:dc:a3:ff:a9:51:e3:be:84:ab:84:28:0f:c1:7c:32:d4:
67:4f:10:ba:a5:99:00:49:34:a3:b6:ac:8c:5c:d2:61:0e:da:
a9:6b:a1:41:47:65:4a:d9:55:fd:33:27:3d:ca:2a:70:57:82:
e2:c8:25:8d:d3:c7:2c:e5:34:6f:67:b8:ac:7f:18:eb:11:2f:
7c:64:e0:e6:ae:0f:07:d6:c6:77:b4:3d:37:45:cc:7f:18:a9:
13:c8:b9:0a:a5:c0:80:37:ba:f3:bc:42:0f:d4:3b:76:0a:a1:
42:91:77:59:13:f0:57:ad:ef:2f:b9:0b:bd:8c:bd:5f:52:14:
a1:63:fe:65:87:ee:2a:9f:c0:24:1d:99:1b:14:99:97:74:5b:
d0:cc:06:d8:a9:db:24:d4:3a:59:69:eb:69:c5:ba:fb:4c:eb:
bd:dc:8b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net