Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZ-El3C-aTfA9DPAKDKbhzV2Ees.roa
File: hZ-El3C-aTfA9DPAKDKbhzV2Ees.roa (raw, json)
Hash identifier: OZM+HRYkxzQPuVB75Lv/8Ufd5zi173iOorqDoeK0D6k=
Subject key identifier: 85:9F:84:97:70:BE:69:37:C0:F4:33:C0:28:32:9B:87:35:76:11:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F4FEBE907FF77EDC67E5BF4B26B907FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZ-El3C-aTfA9DPAKDKbhzV2Ees.roa
Signing time: Wed 02 Apr 2025 05:34:50 +0000
ROA not before: Wed 02 Apr 2025 05:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214083
IP address blocks: 31.56.38.0/24 maxlen: 24
31.57.190.0/24 maxlen: 24
31.58.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f4:fe:be:90:7f:f7:7e:dc:67:e5:bf:4b:26:b9:07:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 05:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=859f849770be6937c0f433c028329b87357611eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:f8:61:b6:b6:75:55:64:69:e4:da:44:36:
90:64:d9:36:1c:d1:c1:6c:26:33:84:aa:aa:c7:da:
fe:6e:6e:36:8e:df:69:a6:10:fe:1f:4d:0d:e2:a9:
e5:7e:b7:9e:eb:6f:12:8b:87:ad:37:32:8f:01:55:
24:7c:fb:4c:0c:45:8b:6b:4e:27:30:80:a7:60:7b:
34:86:15:e8:3c:ff:4e:c0:91:54:6e:62:c0:79:e5:
c7:59:c5:63:e1:59:16:e4:92:59:b5:97:34:f1:44:
34:87:05:1b:54:89:e1:aa:4f:a5:49:d8:3a:ec:02:
98:d5:f7:22:c6:ec:43:21:e4:d8:26:2c:ca:6d:e6:
76:99:36:20:64:78:0b:cb:ea:d2:4e:c9:9a:a3:59:
f8:76:6f:3f:1e:36:7e:a5:54:bf:cb:17:aa:d0:31:
06:76:3e:80:e5:4e:65:ad:43:51:3c:80:dc:8e:85:
e8:d4:6f:6f:89:87:31:52:4a:62:36:2a:b6:6a:de:
12:40:0d:07:63:8c:c6:4e:5e:5b:d1:6c:ff:13:9c:
21:e1:ff:fe:de:99:cd:43:5e:17:3c:e3:5d:dd:da:
7c:a4:35:88:c7:a5:59:0d:57:2b:fc:5d:33:15:56:
20:33:17:93:b1:ab:a9:49:da:09:4c:7d:f6:70:77:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:84:97:70:BE:69:37:C0:F4:33:C0:28:32:9B:87:35:76:11:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZ-El3C-aTfA9DPAKDKbhzV2Ees.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.38.0/24
31.57.190.0/24
31.58.170.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f3:5c:72:f2:39:93:09:d7:1c:ad:6c:9c:ba:94:78:2b:cb:
d9:86:3c:7e:0c:32:27:27:88:26:44:79:f7:1f:88:86:78:74:
cd:c4:26:b5:3f:43:87:d1:91:8c:89:c8:fa:eb:c6:8c:ef:c7:
d2:f6:50:2a:a5:f0:24:c1:db:a3:5b:11:05:b8:66:62:1c:65:
5b:b9:84:9f:d1:f7:98:9f:bc:be:8e:91:da:fe:9e:25:71:6c:
27:cb:55:1f:23:32:d9:ac:5a:b8:f1:e6:ff:08:47:6e:3b:93:
86:0a:3e:57:88:17:e0:aa:35:b8:34:c7:29:3a:49:73:ee:20:
82:72:13:8f:81:94:e9:15:12:e3:1c:52:21:99:c8:f4:be:69:
b3:3b:61:c8:c2:0e:6d:e7:f9:db:d8:41:f6:dc:e8:b9:95:de:
93:25:59:b0:68:04:86:78:01:32:ef:11:7c:c8:05:e6:8b:3b:
93:13:29:dc:8c:b5:a8:3f:dd:6d:90:c1:51:80:02:c8:fa:df:
15:29:0d:a0:06:63:3a:44:12:3b:55:e8:95:ca:a9:41:6e:85:
20:5a:2a:e3:e8:46:93:1d:89:c8:f8:c4:e5:91:9b:d6:5f:2a:
31:9a:51:cd:2f:9b:5d:9b:bd:3e:91:1c:64:a6:fa:ea:ab:8d:
95:40:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net