Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lubWdcwZnjAr8V1ZawTANxEVaI.roa
File: _lubWdcwZnjAr8V1ZawTANxEVaI.roa (raw, json)
Hash identifier: yIDMH5zx1PJoCpo9cr1ajme5p21+u/F3G7Bf7loZ6js=
Subject key identifier: FE:5B:9B:59:D7:30:66:78:C0:AF:C5:75:65:AC:13:00:DC:44:55:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194D724E51B25B291EED5C047456C2DE6C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lubWdcwZnjAr8V1ZawTANxEVaI.roa
Signing time: Wed 05 Feb 2025 17:25:06 +0000
ROA not before: Wed 05 Feb 2025 17:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 31.56.74.0/24 maxlen: 24
31.57.101.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.57.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:24:e5:1b:25:b2:91:ee:d5:c0:47:45:6c:2d:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 5 17:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe5b9b59d7306678c0afc57565ac1300dc4455a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:98:40:4a:f7:1d:59:51:ee:30:32:ba:37:
6a:d0:c2:fe:9e:97:89:50:c7:74:02:c8:af:8b:2e:
23:77:9d:3b:98:10:ef:c9:c2:81:42:b4:d5:f8:ad:
6a:e3:7f:ec:1d:15:22:0f:51:b3:87:29:3d:40:6a:
48:bc:d6:5e:a0:be:3e:e2:2c:00:7c:f4:b9:a1:ba:
fd:2a:e7:d1:a5:fe:a8:f5:f8:9b:b0:73:f5:16:09:
da:f0:64:04:28:7a:c0:e9:da:50:43:db:ec:ad:ae:
7e:1d:ba:19:1d:94:4d:05:54:ad:e6:06:b2:05:f6:
67:1f:23:c1:fc:0b:43:2b:34:31:7f:0e:e3:70:39:
07:20:ed:f8:51:3a:90:e2:bf:24:e7:34:df:63:26:
56:7a:d6:e3:13:bd:cb:e0:d7:93:90:a9:e8:50:99:
0a:96:a8:c3:42:e8:74:61:9b:f7:92:c5:b3:f9:57:
e1:90:b0:83:1e:20:7f:b4:54:47:f6:0c:be:76:9a:
d0:8b:9a:c4:d4:99:77:b6:38:aa:6e:1c:3b:99:e3:
ee:e1:6b:40:c6:ec:74:bd:7b:4b:ae:d0:cd:23:bb:
b4:3d:be:d8:51:c2:47:d8:fa:a3:82:46:9b:73:36:
01:50:50:d0:05:d2:b5:f1:68:52:b7:d1:4b:af:29:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5B:9B:59:D7:30:66:78:C0:AF:C5:75:65:AC:13:00:DC:44:55:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_lubWdcwZnjAr8V1ZawTANxEVaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.74.0/24
31.57.101.0/24
31.57.238.0/24
31.57.245.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e4:58:22:76:1c:94:33:94:dc:a7:34:40:82:5c:cb:de:70:
49:e6:ea:35:b4:84:d0:8f:f4:3b:c8:12:bd:76:eb:93:56:f9:
d8:08:be:78:67:d7:82:5f:f1:af:60:34:08:65:ad:ea:0c:30:
56:ce:b8:9d:0e:4c:c8:33:c3:51:0d:b8:c4:5b:49:b4:fc:4c:
2b:f0:34:af:1d:23:32:b9:64:20:d2:8a:fa:73:07:c3:f9:65:
55:ba:28:42:c4:c4:46:47:ff:91:29:23:db:6f:c0:8d:dc:dd:
8b:97:57:0f:e1:3b:17:78:ca:56:a5:bd:89:cd:d6:4a:c5:cf:
b4:27:10:c9:a8:cf:98:50:64:53:c1:18:e0:2f:55:94:85:d7:
46:77:6c:f6:59:3a:39:56:5e:fb:e6:96:f0:04:b2:1a:23:7b:
16:d4:59:d9:9b:6f:4c:6b:fa:05:95:a9:68:eb:89:96:dc:32:
97:59:50:21:09:ea:a2:f8:a4:5d:b3:43:30:61:ce:ee:92:98:
b6:64:f4:64:ef:68:a1:7f:ec:1d:0d:5d:9e:a2:a9:8c:51:01:
22:0d:71:44:5f:ba:46:13:b9:14:d9:ad:45:b6:1d:51:32:b6:
cc:1e:8c:cf:59:54:8f:57:d2:39:16:69:63:2a:a6:38:6a:85:
7e:9b:7b:87
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZTXJOUbJbKR7tXAR0VsLebIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMjA1MTcyNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTViOWI1OWQ3MzA2Njc4YzBhZmM1NzU2NWFjMTMwMGRjNDQ1NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgCYQEr3HVlR7jAyujdq0ML+npeJ
UMd0Asiviy4jd507mBDvycKBQrTV+K1q43/sHRUiD1Gzhyk9QGpIvNZeoL4+4iwA
fPS5obr9KufRpf6o9fibsHP1Fgna8GQEKHrA6dpQQ9vsra5+HboZHZRNBVSt5gay
BfZnHyPB/AtDKzQxfw7jcDkHIO34UTqQ4r8k5zTfYyZWetbjE73L4NeTkKnoUJkK
lqjDQuh0YZv3ksWz+VfhkLCDHiB/tFRH9gy+dprQi5rE1Jl3tjiqbhw7mePu4WtA
xux0vXtLrtDNI7u0Pb7YUcJH2PqjgkabczYBUFDQBdK18WhSt9FLrymzcQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFP5bm1nXMGZ4wK/FdWWsEwDcRFWiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvX2x1YldkY3dabmpBcjhWMVphd1RBTnhFVmFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhKAwQA
HzllAwQAHznuAwQAHzn1MA0GCSqGSIb3DQEBCwUAA4IBAQCZ5FgidhyUM5TcpzRA
glzL3nBJ5uo1tITQj/Q7yBK9duuTVvnYCL54Z9eCX/GvYDQIZa3qDDBWzridDkzI
M8NRDbjEW0m0/Ewr8DSvHSMyuWQg0or6cwfD+WVVuihCxMRGR/+RKSPbb8CN3N2L
l1cP4TsXeMpWpb2JzdZKxc+0JxDJqM+YUGRTwRjgL1WUhddGd2z2WTo5Vl775pbw
BLIaI3sW1FnZm29Ma/oFlalo64mW3DKXWVAhCeqi+KRds0MwYc7ukpi2ZPRk72ih
f+wdDV2eoqmMUQEiDXFEX7pGE7kU2a1Fth1RMrbMHozPWVSPV9I5FmljKqY4aoV+
m3uH
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:56:17 2025 by rpki-client on console.sobornost.net