Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cZbvWWK4el-RX2O8o6f1Zj6qci0.roa
File: cZbvWWK4el-RX2O8o6f1Zj6qci0.roa (raw, json)
Hash identifier: HFaUk4LgHtrkxbZrwzEIzp7H3jT6F53X3FlFELOmwQo=
Subject key identifier: 71:96:EF:59:62:B8:7A:5F:91:5F:63:BC:A3:A7:F5:66:3E:AA:72:2D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01948388C88013457BD447983B8065BB904E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cZbvWWK4el-RX2O8o6f1Zj6qci0.roa
Signing time: Mon 20 Jan 2025 11:46:06 +0000
ROA not before: Mon 20 Jan 2025 11:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 31.57.159.0/24 maxlen: 24
31.57.201.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:88:c8:80:13:45:7b:d4:47:98:3b:80:65:bb:90:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 20 11:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7196ef5962b87a5f915f63bca3a7f5663eaa722d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:0b:fc:04:76:7e:d2:03:39:b0:40:e9:4d:
70:cc:7e:d6:b3:2e:52:24:fb:99:26:7e:c3:0e:42:
5a:94:e9:9d:ef:cd:cc:e4:d0:bf:d9:84:0f:f5:6f:
9c:56:16:81:bc:ce:9f:5d:66:37:1d:10:ce:f8:81:
ac:1d:fc:d9:d3:ed:f2:1b:ec:b2:05:3e:1e:4a:9a:
82:2a:0c:b3:01:cb:3f:58:f4:4f:7f:87:d4:9a:2a:
52:c5:ec:4a:a6:1f:d3:11:0b:18:7f:9f:31:b3:56:
4d:9b:1b:0c:fe:4c:f0:5c:2d:a4:59:6c:19:3e:27:
6e:0e:98:75:26:92:a6:98:10:63:4b:fc:66:cb:fd:
d8:5c:3a:49:56:b5:87:36:92:fb:22:ce:76:9d:b6:
38:27:e0:27:dc:7f:d4:80:4e:af:8d:4c:51:8a:ac:
82:db:16:d6:fd:e1:08:be:54:5b:b9:cb:97:35:a2:
88:6f:ef:8a:bf:a6:f1:3b:e1:0e:95:4a:ed:7e:89:
d1:ce:d8:3a:61:8b:19:89:1a:52:76:5d:c8:18:82:
c7:e8:d8:97:26:13:2b:af:1c:2b:04:88:4c:c4:b9:
1d:3b:34:14:8a:21:28:f5:d7:b2:18:f7:7e:cb:c4:
4b:55:ac:d0:28:11:b1:c8:df:c1:e4:d3:62:4b:a1:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:EF:59:62:B8:7A:5F:91:5F:63:BC:A3:A7:F5:66:3E:AA:72:2D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cZbvWWK4el-RX2O8o6f1Zj6qci0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.159.0/24
31.57.201.0/24
31.57.220.0/24
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8d:b5:da:75:17:e9:aa:c3:7b:4e:53:cf:d6:39:aa:15:fd:
fb:a4:81:82:73:72:1b:11:06:6a:48:c5:e8:da:1f:c4:55:58:
03:47:1c:0c:3d:df:44:74:d9:7f:9d:d2:e2:46:7b:4b:1e:45:
a8:46:e6:d4:46:ec:75:85:7e:e0:2f:6e:a4:1e:33:69:b7:6d:
a6:74:a3:f7:89:4d:46:e3:48:d4:58:bb:d4:5d:df:60:92:24:
62:fe:8b:b3:ec:05:1e:3c:09:06:db:67:b8:c8:1d:5d:8e:89:
15:12:9f:26:b2:35:a4:cc:b9:c1:e0:6d:c8:eb:75:91:27:f8:
64:95:25:d7:cb:da:01:9d:e8:fb:16:e8:a8:6e:02:7b:32:b0:
93:7b:f5:45:fc:f3:96:74:a0:0a:e5:1d:c9:f7:9c:70:70:67:
6f:bf:fc:b9:80:e0:6a:36:82:f2:e1:83:bb:34:f0:c7:a6:a3:
87:16:1f:65:4f:5e:30:2b:24:a0:28:c3:54:cc:45:d4:d3:3f:
0b:19:91:a7:25:d5:d3:02:c0:75:bb:76:ea:2a:96:27:bc:a1:
da:60:89:07:14:2b:d5:d6:23:f6:7f:ab:99:6f:6d:1d:30:e9:
d6:22:75:9d:9f:01:33:c7:99:1b:08:e2:87:06:02:3d:6a:5f:
ba:85:50:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:03:47 2025 by rpki-client on console.sobornost.net