Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lX-2qjQQ7ZbjFdyH-Y-XmVnm4mU.roa
File: lX-2qjQQ7ZbjFdyH-Y-XmVnm4mU.roa (raw, json)
Hash identifier: KBqiTg2kmX0J7b/ktTGbJXqpychdbyrPz+xl1PdsWvg=
Subject key identifier: 95:7F:B6:AA:34:10:ED:96:E3:15:DC:87:F9:8F:97:99:59:E6:E2:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019613E6BA9A64653960EE93C1953E624B19
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lX-2qjQQ7ZbjFdyH-Y-XmVnm4mU.roa
Signing time: Tue 08 Apr 2025 05:36:50 +0000
ROA not before: Tue 08 Apr 2025 05:36:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 23
31.57.164.0/23 maxlen: 23
31.57.180.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:e6:ba:9a:64:65:39:60:ee:93:c1:95:3e:62:4b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 8 05:36:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=957fb6aa3410ed96e315dc87f98f979959e6e265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:51:78:5b:61:2b:0c:e8:2f:c0:49:b8:75:
6d:e4:44:e2:b5:a8:98:83:14:b2:ca:33:57:50:a9:
f1:1a:8e:7e:f3:77:bb:82:ab:0f:9c:46:76:b9:78:
5e:6f:ca:aa:d8:48:92:29:63:d8:ca:7b:54:70:8f:
f5:96:22:c7:9d:3a:78:06:98:f0:61:c2:ee:16:42:
f3:90:3e:69:00:19:9e:53:77:14:14:48:16:cd:cf:
70:a2:8f:0a:44:28:8d:6d:73:c6:18:a7:37:c3:8c:
b6:73:14:e1:3f:e4:3c:cd:34:45:ac:25:2d:57:a2:
c3:ed:50:89:66:3b:14:42:04:f4:a5:8a:a7:1d:63:
bb:47:b5:99:c6:e1:e8:e9:67:79:b5:f4:ef:3a:a1:
be:5a:43:b5:b5:65:28:16:93:e3:66:27:35:57:56:
9f:8d:3f:36:fc:be:88:95:d4:b0:12:8c:8e:46:94:
98:40:47:31:b9:b6:cc:db:68:5b:2c:89:e1:e7:0d:
c9:45:7b:c5:da:9e:b5:39:92:12:05:95:99:81:ba:
0a:0d:69:b2:54:a4:0c:cd:3d:71:90:35:9f:8b:6b:
5b:66:73:65:0e:db:b3:92:90:7c:2d:76:e3:36:98:
dd:68:aa:27:47:4f:d7:74:ee:2b:40:b8:cc:63:98:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:B6:AA:34:10:ED:96:E3:15:DC:87:F9:8F:97:99:59:E6:E2:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lX-2qjQQ7ZbjFdyH-Y-XmVnm4mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
31.58.50.0/24
Signature Algorithm: sha256WithRSAEncryption
66:01:5e:bb:32:d7:1f:7c:65:40:67:34:da:7f:08:cb:e2:82:
87:ca:2c:52:a5:59:bc:e4:2a:49:26:24:ec:c2:62:78:76:df:
de:48:10:5d:3d:a6:e8:ed:57:f4:ea:f3:d5:14:f9:d3:0c:a3:
19:6b:38:1a:d0:28:12:30:57:a4:e7:4a:75:89:4f:e4:7e:9c:
0f:c2:04:31:61:7f:2b:b3:b2:03:c3:33:56:c4:35:be:a2:4a:
eb:74:81:c9:49:98:37:5c:83:ec:ef:c9:32:88:92:3e:59:8e:
5b:5c:b4:f9:46:cc:8d:96:aa:aa:16:d1:62:9f:e7:20:b3:c5:
29:05:7e:0a:8b:c8:03:d0:64:a6:98:d5:83:9f:22:c7:af:0b:
f2:c6:39:aa:d4:50:3c:79:71:d5:70:aa:13:b6:b4:45:61:1d:
4d:06:3b:02:23:48:c6:d5:8c:7f:44:5a:ea:c9:2d:3f:fb:aa:
8a:c5:c9:15:fd:47:93:bd:0e:9b:a6:15:88:19:a0:b8:70:85:
b2:4c:9e:ea:d3:26:45:19:1c:16:5f:12:99:f0:3e:cb:49:08:
31:f3:74:ee:3e:6c:19:16:7c:9f:78:07:ab:d3:3a:8e:5d:3e:
51:68:21:a6:d6:13:4f:b2:53:68:0d:5b:5f:15:35:f7:76:23:
d7:7c:c5:cf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZYT5rqaZGU5YO6TwZU+YksZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDA4MDUzNjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTdmYjZhYTM0MTBlZDk2ZTMxNWRjODdmOThmOTc5OTU5ZTZlMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12FReFthKwzoL8BJuHVt5ETitaiY
gxSyyjNXUKnxGo5+83e7gqsPnEZ2uXheb8qq2EiSKWPYyntUcI/1liLHnTp4Bpjw
YcLuFkLzkD5pABmeU3cUFEgWzc9woo8KRCiNbXPGGKc3w4y2cxThP+Q8zTRFrCUt
V6LD7VCJZjsUQgT0pYqnHWO7R7WZxuHo6Wd5tfTvOqG+WkO1tWUoFpPjZic1V1af
jT82/L6IldSwEoyORpSYQEcxubbM22hbLInh5w3JRXvF2p61OZISBZWZgboKDWmy
VKQMzT1xkDWfi2tbZnNlDtuzkpB8LXbjNpjdaKonR0/XdO4rQLjMY5hNFQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFJV/tqo0EO2W4xXch/mPl5lZ5uJlMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbFgtMnFqUVE3WmJqRmR5SC1ZLVhtVm5tNG1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAHzhWAwQA
HzhrAwQAHzl6AwQBHzl8AwQAHzmMMAwDBAEfOaIDBAEfOaQDBAAfObQwDAMEAB86
KQMEAB86KgMEAB86MAMEAB86MjANBgkqhkiG9w0BAQsFAAOCAQEAZgFeuzLXH3xl
QGc02n8Iy+KCh8osUqVZvOQqSSYk7MJieHbf3kgQXT2m6O1X9Orz1RT50wyjGWs4
GtAoEjBXpOdKdYlP5H6cD8IEMWF/K7OyA8MzVsQ1vqJK63SByUmYN1yD7O/JMoiS
PlmOW1y0+UbMjZaqqhbRYp/nILPFKQV+CovIA9BkppjVg58ix68L8sY5qtRQPHlx
1XCqE7a0RWEdTQY7AiNIxtWMf0Ra6sktP/uqisXJFf1Hk70Om6YViBmguHCFskye
6tMmRRkcFl8SmfA+y0kIMfN07j5sGRZ8n3gHq9M6jl0+UWghptYTT7JTaA1bXxU1
93Yj13zFzw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net