Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cv3rViSJaq9Z-O07pV09c0ThIxU.roa
File: Cv3rViSJaq9Z-O07pV09c0ThIxU.roa (raw, json)
Hash identifier: K6U2n+OD346wz5KqlNE2fp0TL2zpy0iiUt1+6JcUXrI=
Subject key identifier: 0A:FD:EB:56:24:89:6A:AF:59:F8:ED:3B:A5:5D:3D:73:44:E1:23:15
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01960FE9E984B9C72D157EEDF2432C97FD8B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cv3rViSJaq9Z-O07pV09c0ThIxU.roa
Signing time: Mon 07 Apr 2025 11:01:50 +0000
ROA not before: Mon 07 Apr 2025 11:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.57.120.0/23 maxlen: 23
31.57.126.0/23 maxlen: 23
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:e9:84:b9:c7:2d:15:7e:ed:f2:43:2c:97:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 7 11:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0afdeb5624896aaf59f8ed3ba55d3d7344e12315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:74:2d:c9:d5:a5:30:8c:15:32:8f:b4:17:
46:a0:4d:6b:85:54:88:af:3b:09:aa:fb:fb:0b:af:
e5:84:c6:2b:f1:7c:ee:3d:cb:6a:5c:10:11:35:4b:
2b:ce:81:a6:22:5d:96:43:d5:9f:72:48:b2:90:fe:
29:04:9f:68:87:fd:24:4f:68:c6:28:52:dd:2e:78:
cb:bb:f5:82:df:c3:8a:8f:29:a7:49:2a:5e:25:f7:
5b:e6:17:1a:90:9d:9c:61:70:69:e3:51:6f:c9:84:
db:59:7c:5f:9b:cd:23:b6:8d:49:60:53:fa:f7:ff:
d1:2b:c3:0f:fb:4b:53:e3:b8:5c:7b:9f:b5:3c:9a:
6b:07:08:55:d0:74:c5:6d:17:47:76:ce:22:8f:47:
d4:c6:a5:fa:4b:82:ec:8c:7b:03:b6:a2:ef:c8:bf:
59:52:cb:64:cf:36:bf:b8:19:c1:8a:50:7f:ac:3e:
c0:21:54:9b:e0:5b:58:63:0c:4b:b0:8d:6a:d6:f2:
40:03:bb:67:b1:b8:6e:60:8c:09:4a:b4:ed:49:34:
0d:4b:e1:e7:15:9e:a5:eb:96:8c:2b:61:a6:aa:24:
fc:aa:1b:43:ba:c0:a8:47:bc:9b:bf:23:33:55:6f:
20:83:0e:63:20:55:ce:71:4b:4a:f0:97:3e:1c:26:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:EB:56:24:89:6A:AF:59:F8:ED:3B:A5:5D:3D:73:44:E1:23:15
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cv3rViSJaq9Z-O07pV09c0ThIxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.57.120.0/23
31.57.126.0/23
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.173.0-31.59.175.255
Signature Algorithm: sha256WithRSAEncryption
08:ec:f0:b9:f6:12:8f:84:16:f3:69:65:ff:f5:3c:c2:7d:7f:
5b:f0:69:0d:ab:a8:24:8c:e4:c2:71:f7:f0:b4:09:8c:60:32:
62:d1:cd:19:10:a2:b3:ec:92:55:1b:3e:70:c3:5a:1c:6a:f7:
b5:86:64:cf:e2:4a:94:5b:f5:4f:0d:73:ce:e0:65:86:76:1a:
b8:a7:f2:58:21:bf:3c:82:bf:e2:8b:ca:ba:e5:69:55:4a:43:
aa:de:d2:b0:7c:f3:c5:1d:69:54:97:0b:4b:0e:ce:91:13:cb:
25:7f:24:e8:b3:0b:9a:fb:59:d2:b4:63:63:cd:71:8d:1a:f3:
7e:ca:bf:18:f7:34:14:5f:88:85:5d:e9:f9:11:7d:58:95:3e:
40:65:e6:80:bc:d5:a5:e9:0b:e2:9d:7b:85:b7:5c:3e:92:c1:
62:52:d4:99:4b:d4:2a:e0:5b:4d:78:cb:ea:ee:b3:51:71:37:
ed:8c:2a:2d:0d:d8:75:e0:4e:64:66:e7:b3:c5:62:68:f8:51:
76:d3:c5:ac:4e:93:03:c9:7e:88:fb:e9:8a:54:84:8d:97:22:
bb:91:33:bc:77:95:ef:47:be:08:6a:8d:76:f3:de:e2:ad:c5:
47:f2:f0:4d:e4:0a:6d:cf:f5:5f:c3:8f:6b:33:2a:6a:21:34:
aa:fc:3e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net