Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tWWoMlJY4aTG4eqWN5qCxye5Dik.roa
File: tWWoMlJY4aTG4eqWN5qCxye5Dik.roa (raw, json)
Hash identifier: WJaNXKuSV894RXUrnf8xoLFTnaWmM3X8rMNcRbzTvK4=
Subject key identifier: B5:65:A8:32:52:58:E1:A4:C6:E1:EA:96:37:9A:82:C7:27:B9:0E:29
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195ECA8200ADCA0655EE20BD02FEF26B18E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tWWoMlJY4aTG4eqWN5qCxye5Dik.roa
Signing time: Mon 31 Mar 2025 14:43:15 +0000
ROA not before: Mon 31 Mar 2025 14:43:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 31.56.69.0/24 maxlen: 24
31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.57.252.0/24 maxlen: 24
31.57.253.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:a8:20:0a:dc:a0:65:5e:e2:0b:d0:2f:ef:26:b1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 31 14:43:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b565a8325258e1a4c6e1ea96379a82c727b90e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:04:9e:ab:f6:e5:5e:8d:d9:fa:51:eb:a1:
8d:49:44:2c:1a:02:93:40:f4:77:48:2a:68:6d:33:
26:b2:99:2d:0e:77:72:77:18:3b:f5:8c:60:26:31:
1c:89:2b:b6:10:10:1f:16:f3:2a:70:74:c5:92:49:
0d:48:35:7f:13:f3:ae:d4:69:e7:fa:00:c8:97:bc:
33:bb:bc:ac:a6:bb:a3:33:3a:5b:4f:e8:ee:8d:2d:
6f:ea:f7:5e:73:50:c9:e6:e9:27:1d:26:29:0e:ff:
1f:2a:66:4d:16:ca:01:d6:95:9d:cb:7b:99:2d:d8:
75:fa:83:f5:de:fc:e1:e6:a3:fa:d5:b8:cf:c6:4f:
18:32:82:0a:08:bb:3b:87:77:eb:49:f9:13:14:84:
68:63:df:b0:a8:fd:25:e6:b4:4a:bb:7b:66:13:f5:
c5:61:f6:73:32:ef:a1:00:86:cc:8f:e5:66:70:d6:
ef:b0:35:dd:61:fc:41:50:a0:69:d1:82:5b:e4:d1:
de:fe:42:e3:a4:58:a5:1c:63:32:d4:70:31:52:01:
3f:02:e2:76:de:f3:30:d6:c4:0c:2c:9c:79:bc:01:
7a:bd:ac:8a:6e:b3:78:65:f9:12:e0:c2:03:a2:36:
90:13:5d:a1:72:d7:4f:32:58:6e:15:02:77:0e:64:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:A8:32:52:58:E1:A4:C6:E1:EA:96:37:9A:82:C7:27:B9:0E:29
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tWWoMlJY4aTG4eqWN5qCxye5Dik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.69.0/24
31.56.72.0/24
31.56.84.0/24
31.56.90.0/23
31.57.252.0/23
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:30:74:34:02:3f:da:a5:1d:cf:56:c8:a4:05:c9:e9:57:8a:
26:bb:d5:b7:5a:06:5c:e4:67:b8:6d:cd:0c:16:ac:61:66:cb:
2a:f0:c0:ab:0c:03:b0:9c:2e:27:e4:53:69:d3:e6:7d:ea:ad:
2d:e3:36:29:a5:2b:15:8a:30:bb:46:fc:b3:95:67:bf:9b:3a:
22:ed:be:8c:0c:f9:e2:a7:92:de:fe:c7:74:a8:c4:4a:55:a2:
53:be:e9:42:3c:1c:93:cb:e1:85:ba:20:c7:53:b3:ed:15:33:
ee:b7:8a:9c:8f:63:74:6b:37:73:dd:e0:89:6e:fd:14:1c:ee:
3f:9f:53:0e:34:89:9d:04:7e:66:67:e1:5f:c4:96:cc:af:48:
05:ac:da:26:bb:d4:6e:88:d3:57:6b:d8:16:2d:58:e9:1d:0d:
0d:a4:bd:43:d9:77:59:11:39:a6:50:dc:f4:3b:fa:1a:c9:97:
7a:73:19:fb:aa:52:9e:ec:b0:9f:6b:74:1d:97:27:1e:80:56:
65:d6:e6:b7:80:ec:5d:2a:52:21:85:aa:4b:33:c1:49:7c:08:
b3:c7:df:13:70:5b:63:c6:82:7c:90:13:42:cd:59:b6:1e:f2:
cf:21:ea:e1:41:88:d9:74:84:90:9e:59:44:80:1f:f5:fd:cd:
75:c9:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:56:17 2025 by rpki-client on console.sobornost.net