Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmuuZM3OwbgWksXY9DRsIqBDQWM.roa
File: xmuuZM3OwbgWksXY9DRsIqBDQWM.roa (raw, json)
Hash identifier: DGH0DFCoIAapAc21eg10YGwErD6XQ4XES8CM4rl/D3A=
Subject key identifier: C6:6B:AE:64:CD:CE:C1:B8:16:92:C5:D8:F4:34:6C:22:A0:43:41:63
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195F61C62F4487F8DB36B7685BC80D3C6D7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmuuZM3OwbgWksXY9DRsIqBDQWM.roa
Signing time: Wed 02 Apr 2025 10:46:50 +0000
ROA not before: Wed 02 Apr 2025 10:46:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
31.59.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:1c:62:f4:48:7f:8d:b3:6b:76:85:bc:80:d3:c6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 2 10:46:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c66bae64cdcec1b81692c5d8f4346c22a0434163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:79:8e:e7:3d:a7:89:16:aa:8e:72:2a:d5:
a1:24:f1:53:42:86:56:7c:eb:81:d3:53:85:f9:85:
cb:c6:9d:bb:8f:13:8a:33:d9:fa:8d:8c:81:0a:02:
09:66:58:52:97:fb:0b:77:85:88:e7:79:fe:b0:d0:
b5:ae:28:f2:2a:37:90:6d:fe:f8:75:a7:33:63:e5:
01:0f:3d:3e:c0:df:7b:2b:7a:ba:fc:62:e2:7f:3d:
94:6d:60:e5:aa:95:1e:aa:50:f1:17:f8:63:94:62:
db:0b:cc:bc:1a:cf:71:e2:9a:78:89:1c:cf:05:93:
40:fd:94:4b:fd:7e:f8:fb:7b:ef:7d:38:3b:22:4a:
2f:91:70:68:05:6d:66:9e:26:b4:91:1e:04:46:10:
a2:74:61:c5:c4:48:58:ea:e7:1c:57:a8:fb:a1:13:
d4:16:6e:76:29:17:ba:76:d0:90:a0:bc:8c:87:4d:
2b:f3:aa:06:9a:75:35:2a:96:50:e5:14:59:35:be:
8e:f9:03:09:54:43:29:8a:c1:c3:ad:b4:04:03:1a:
d6:28:a9:bd:0d:3c:93:e9:a5:04:d2:a4:81:8a:8b:
b7:09:9c:1f:e9:24:bc:5e:bb:aa:23:07:9b:19:40:
ef:4a:b8:ac:01:65:00:28:a5:be:51:c1:ad:ad:ae:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:AE:64:CD:CE:C1:B8:16:92:C5:D8:F4:34:6C:22:A0:43:41:63
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xmuuZM3OwbgWksXY9DRsIqBDQWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
31.59.230.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:b7:63:71:da:9f:17:61:0b:ed:32:a2:1a:82:d5:1a:4f:c6:
e2:38:2a:70:2d:9f:cd:57:a3:43:79:40:67:d4:70:01:76:c6:
ef:8f:27:41:6f:b9:d9:c4:7d:43:a5:4a:96:6a:0b:35:87:28:
a0:ad:ea:af:5f:a4:b9:94:0f:71:22:42:04:24:c9:0f:ff:02:
40:f7:a5:85:42:b0:2c:7c:5b:bb:43:6e:5c:89:12:34:cb:38:
9f:4b:04:32:09:ad:ff:14:34:03:c3:de:53:fc:49:1d:dc:8a:
69:4b:1a:c3:bc:1c:c4:7f:f3:df:d7:c3:b8:b6:9a:56:5c:b8:
75:6a:af:6b:d8:23:56:28:cd:4f:de:43:12:93:94:d1:a6:2a:
06:3a:66:a6:ff:13:72:d2:29:e6:35:29:6e:94:e2:72:cf:80:
82:24:58:98:79:80:30:9d:7e:69:9b:97:c7:f3:53:31:4f:56:
96:e5:fc:70:4a:af:80:96:89:72:30:33:fb:38:61:3a:dd:c8:
7c:6f:4b:f4:3d:05:bf:10:ea:3c:e4:cc:4e:81:b8:e1:39:b9:
19:0a:dd:68:c3:61:39:14:cf:62:00:50:55:ef:9b:4e:d4:4e:
e6:6d:4f:9e:a4:94:d2:e5:b9:06:b1:a0:81:02:d3:13:b2:c5:
5f:cb:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net