Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-_XAcNwnQcns4hnNiMjNEYIGHo.roa
File: o-_XAcNwnQcns4hnNiMjNEYIGHo.roa (raw, json)
Hash identifier: kSYpFCVkxJs8nkzn3U3ysV90ezu5Rxm9QgiQSndqcc0=
Subject key identifier: A3:EF:D7:01:C3:70:9D:07:27:B3:88:67:36:23:23:34:46:08:18:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01960FE76673B3790C267B060905010F8C47
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-_XAcNwnQcns4hnNiMjNEYIGHo.roa
Signing time: Mon 07 Apr 2025 10:59:05 +0000
ROA not before: Mon 07 Apr 2025 10:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e7:66:73:b3:79:0c:26:7b:06:09:05:01:0f:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 7 10:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3efd701c3709d0727b38867362323344608187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:3c:00:83:07:7a:70:d7:1f:10:fc:24:8b:
d2:e5:c7:c4:c7:2a:30:d6:9b:cc:a2:ed:2e:01:fc:
61:e3:e0:3a:67:ab:65:ad:e0:4c:ec:49:89:7c:89:
1e:0d:e9:91:56:b0:71:42:2b:9e:8c:5f:25:8b:47:
ba:da:8c:25:b3:f2:1c:03:c3:1a:26:27:59:8c:22:
da:de:d2:7a:c6:b9:89:76:b5:8e:ff:33:ac:4c:e9:
8b:21:e5:dc:df:45:7f:ef:9b:c3:0e:77:39:bf:95:
12:e5:80:d4:87:de:b2:7d:8d:4a:9a:5d:98:30:b2:
33:ed:14:03:0f:a8:12:3f:2e:6b:d1:11:40:c5:3b:
aa:58:85:09:f4:1b:fc:7e:1f:74:5a:69:bf:71:05:
7f:23:d7:4f:d1:18:40:43:be:4f:a9:80:1e:9d:5c:
7d:01:f7:a9:e1:47:80:46:ff:29:5a:e1:cd:58:0b:
ae:8d:6a:28:d2:1d:77:9a:16:23:cd:b8:9c:f8:66:
56:f6:41:b5:b2:4d:2a:11:51:a3:53:95:68:df:6b:
d0:b3:7c:95:ea:c0:ff:84:28:4e:50:61:ed:02:3b:
9f:f1:bc:f3:b4:85:7d:6b:7b:43:73:c8:93:71:df:
4b:c7:38:e4:24:a3:5b:d1:cc:79:fc:b0:ac:0c:49:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:D7:01:C3:70:9D:07:27:B3:88:67:36:23:23:34:46:08:18:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-_XAcNwnQcns4hnNiMjNEYIGHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.84.0/24
31.57.104.0/24
31.57.188.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
90:b9:df:9d:b3:1b:02:15:09:54:eb:a2:db:02:42:d7:8a:f5:
9e:ee:91:5f:d8:f7:51:15:c0:42:a8:bf:de:f4:36:b0:23:d8:
25:1b:a3:ac:f2:22:91:ad:84:2e:61:38:0d:63:4a:c7:e8:6d:
ae:13:fb:6e:f3:f5:c2:36:30:3c:0b:e6:60:ab:d1:df:b6:6d:
80:8f:02:27:41:70:66:71:a8:29:13:45:20:f7:12:6c:c1:fd:
e3:c5:8d:3d:d9:f6:d9:00:1b:77:95:14:39:a9:dc:6b:d1:98:
98:6e:db:07:c3:a3:a7:cd:2d:8d:8c:25:1f:ce:9c:17:6a:d6:
2f:c4:72:3f:66:04:86:d0:83:ca:f7:95:c9:40:00:d8:a8:dd:
56:3b:90:d9:cb:89:22:a2:ad:b0:53:3e:97:62:6e:37:15:9a:
67:1f:91:03:04:bc:3a:b9:9b:b6:ab:54:d4:44:2e:39:e0:96:
df:23:54:35:33:31:9e:6e:de:d5:9e:ca:71:3d:ce:40:ac:81:
31:6b:c0:5d:7e:d9:a0:d7:f9:77:a6:56:1b:5b:33:07:ac:78:
a5:e3:69:83:ea:9f:08:f8:3d:d6:bd:3d:3a:66:ed:dc:0e:31:
8c:a9:b0:fb:d7:45:f4:99:8a:d8:e8:00:e3:24:8b:30:5a:df:
29:d4:e5:a6
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZYP52Zzs3kMJnsGCQUBD4xHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDA3MTA1OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2VmZDcwMWMzNzA5ZDA3MjdiMzg4NjczNjIzMjMzNDQ2MDgxODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz08AIMHenDXHxD8JIvS5cfExyow
1pvMou0uAfxh4+A6Z6tlreBM7EmJfIkeDemRVrBxQiuejF8li0e62owls/IcA8Ma
JidZjCLa3tJ6xrmJdrWO/zOsTOmLIeXc30V/75vDDnc5v5US5YDUh96yfY1Kml2Y
MLIz7RQDD6gSPy5r0RFAxTuqWIUJ9Bv8fh90Wmm/cQV/I9dP0RhAQ75PqYAenVx9
Afep4UeARv8pWuHNWAuujWoo0h13mhYjzbic+GZW9kG1sk0qEVGjU5Vo32vQs3yV
6sD/hChOUGHtAjuf8bzztIV9a3tDc8iTcd9LxzjkJKNb0cx5/LCsDEmfmQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKPv1wHDcJ0HJ7OIZzYjIzRGCBh6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvby1fWEFjTnduUWNuczRobk5pTWpORVlJR0hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzhIAwQA
HzhUAwQAHzloAwQAHzm8AwQBHzpYMA0GCSqGSIb3DQEBCwUAA4IBAQCQud+dsxsC
FQlU66LbAkLXivWe7pFf2PdRFcBCqL/e9DawI9glG6Os8iKRrYQuYTgNY0rH6G2u
E/tu8/XCNjA8C+Zgq9Hftm2AjwInQXBmcagpE0Ug9xJswf3jxY092fbZABt3lRQ5
qdxr0ZiYbtsHw6OnzS2NjCUfzpwXatYvxHI/ZgSG0IPK95XJQADYqN1WO5DZy4ki
oq2wUz6XYm43FZpnH5EDBLw6uZu2q1TURC454JbfI1Q1MzGebt7VnspxPc5ArIEx
a8Bdftmg1/l3plYbWzMHrHil42mD6p8I+D3WvT06Zu3cDjGMqbD710X0mYrY6ADj
JIswWt8p1OWm
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net