Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa
File: GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa (raw, json)
Hash identifier: 0NLct9+IWSmNLab833+pcvKvnzISJQn90Hh82nLgM+o=
Subject key identifier: 19:C4:1B:ED:67:22:FA:95:57:DF:45:AC:34:F3:17:FD:7F:19:25:56
Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Certificate serial: 0194303443A69F252F293C3064B0CDA9673A
Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa
Signing time: Sat 04 Jan 2025 07:25:18 +0000
ROA not before: Sat 04 Jan 2025 07:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41344
IP address blocks: 31.185.8.0/22 maxlen: 22
31.185.8.0/24 maxlen: 24
31.185.9.0/24 maxlen: 24
31.185.10.0/24 maxlen: 24
31.185.11.0/24 maxlen: 24
31.185.12.0/24 maxlen: 24
31.185.13.0/24 maxlen: 24
31.185.14.0/24 maxlen: 24
31.185.15.0/24 maxlen: 24
89.249.224.0/22 maxlen: 22
89.249.226.0/24 maxlen: 24
89.249.228.0/22 maxlen: 22
89.249.231.0/24 maxlen: 24
89.249.232.0/22 maxlen: 22
89.249.232.0/24 maxlen: 24
89.249.233.0/24 maxlen: 24
89.249.235.0/24 maxlen: 24
89.249.236.0/23 maxlen: 23
89.249.236.0/24 maxlen: 24
89.249.237.0/24 maxlen: 24
89.249.238.0/24 maxlen: 24
185.124.176.0/22 maxlen: 22
185.124.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:34:43:a6:9f:25:2f:29:3c:30:64:b0:cd:a9:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d
Validity
Not Before: Jan 4 07:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19c41bed6722fa9557df45ac34f317fd7f192556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:89:1b:61:3b:c1:ae:67:c8:46:8d:96:78:
25:57:dc:4a:ba:e3:d9:71:f1:3b:8f:cc:7b:14:3b:
e5:a9:4b:c5:6b:0a:80:36:48:6f:ee:31:60:0f:8c:
99:42:df:d1:a1:cf:5e:92:c5:19:55:ce:80:17:b6:
25:9c:f3:0b:4d:ff:43:19:8c:99:d2:75:50:d8:d5:
5e:24:f8:87:a1:2b:9e:74:55:77:bc:cc:80:84:0d:
3c:90:f2:0a:77:d2:be:75:bd:a1:78:80:61:ba:dd:
0a:9b:b4:a6:a6:69:91:97:95:a1:44:16:67:c3:72:
dd:20:74:22:73:d6:5f:dd:6a:88:24:aa:15:c5:4c:
d0:7d:1f:e0:dc:fb:39:0c:ee:6a:ac:0f:30:f5:f7:
17:41:ba:ae:4b:30:65:1c:1b:d3:66:ef:fb:bb:69:
97:73:c9:fc:af:9a:76:d1:40:5c:c3:75:4e:d0:06:
c4:eb:a8:15:06:c9:13:b6:f3:41:07:23:a9:0e:e3:
ae:ee:51:d8:86:f6:df:32:82:be:e3:bb:64:6a:42:
44:20:d9:88:0d:1c:ad:fa:47:3e:dd:6a:99:28:5c:
fa:7f:00:89:58:96:5a:bb:65:04:f4:5f:cd:fc:62:
26:b2:7a:b5:f1:35:35:4c:29:46:a6:4a:3d:b9:db:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:1B:ED:67:22:FA:95:57:DF:45:AC:34:F3:17:FD:7F:19:25:56
X509v3 Authority Key Identifier:
keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/GcQb7Wci-pVX30WsNPMX_X8ZJVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.8.0/21
89.249.224.0-89.249.238.255
185.124.176.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2e:fd:d7:bf:6c:da:c9:1e:3c:43:19:15:5f:8f:b5:bc:da:
4d:e6:68:f6:37:fc:71:01:e0:0b:0d:11:b4:1b:c1:e8:34:9c:
83:24:fd:50:3c:6d:ec:e7:e1:d6:8a:1a:92:d2:c9:3f:a2:91:
c4:17:ee:0c:ff:91:d1:75:e3:36:f6:4d:fc:77:5a:5a:46:bc:
f4:4f:2e:b3:21:b9:6a:47:26:04:88:c2:ba:56:75:42:a2:0b:
d8:26:a3:16:34:5f:f1:5d:0f:e1:a9:f6:90:e0:ca:5e:fc:79:
00:c9:0a:de:9d:a4:9f:de:5e:92:5b:b3:fc:bc:e5:76:e5:e2:
d4:3e:b0:66:01:fd:09:5d:03:8f:cf:64:e7:b9:2f:ff:1a:4f:
9c:66:3a:35:c3:96:1c:00:3f:08:a7:6b:90:85:bd:06:70:ac:
07:16:24:a3:08:25:d4:ed:62:61:f0:63:b1:a6:4b:e7:53:c2:
8c:cc:0d:05:87:e2:8f:e6:8a:e5:98:65:65:c6:a4:70:d1:87:
0a:c9:91:c0:67:d3:68:ed:8c:03:c5:af:60:54:56:78:71:50:
78:58:5c:1b:3e:b6:8e:0a:11:b2:24:98:66:4e:3c:61:00:14:
0f:4e:09:d7:2d:3c:8f:25:b5:63:ba:f3:e8:10:e9:1f:36:2e:
8c:83:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net