Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GAzN8JgljKfA3A30CpTpB9I-ljg.roa
File: GAzN8JgljKfA3A30CpTpB9I-ljg.roa (raw, json)
Hash identifier: rKanLHq74yk8hIMHAP3lf3yTM47zrxq0k/XrA6g5TqI=
Subject key identifier: 18:0C:CD:F0:98:25:8C:A7:C0:DC:0D:F4:0A:94:E9:07:D2:3E:96:38
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 019423D7758F9391769091D40E1D7331D9A5
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GAzN8JgljKfA3A30CpTpB9I-ljg.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200467
IP address blocks: 31.135.177.0/24 maxlen: 24
31.135.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:75:8f:93:91:76:90:91:d4:0e:1d:73:31:d9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=180ccdf098258ca7c0dc0df40a94e907d23e9638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:2c:14:a6:5e:50:88:6e:ac:8a:4f:7e:65:
da:fc:8c:93:9e:b7:95:9a:2e:d1:9c:c5:86:97:2c:
1a:dc:6b:e3:f6:0a:fb:36:96:ac:bc:b7:c7:a9:7d:
30:4e:0b:81:80:3e:f2:1d:c8:97:c1:5e:1f:d9:e5:
e7:d1:f0:1d:9d:97:7b:93:98:f4:38:c9:2d:e4:79:
90:aa:52:38:76:c7:ea:f4:bc:14:f7:46:c9:2b:c8:
37:e1:0b:8b:d9:43:4e:2a:f3:23:6f:9c:54:32:9b:
bb:3d:c3:f7:8d:e4:58:19:36:f8:4c:25:6d:d4:87:
ee:63:e9:78:19:17:56:92:55:14:b3:46:07:9b:a7:
4c:95:26:29:00:c7:a8:56:13:21:38:17:b6:32:36:
d7:80:d6:fd:70:11:4c:1b:d7:79:63:5e:ba:31:07:
3b:99:cc:ef:a8:e7:17:4b:96:ff:2b:43:e5:3d:a4:
99:4c:24:6f:31:51:b7:d1:9e:c4:1d:22:23:4c:69:
25:e9:e3:1f:d8:cc:72:c4:f0:4f:4f:5d:0d:4a:b8:
48:e7:8e:0d:3f:e2:04:53:40:bb:78:88:a9:17:7c:
1a:c4:fc:e4:ab:9a:6f:68:2b:1d:a8:fb:62:d1:55:
7a:c4:68:fd:ee:75:6f:a3:93:12:c6:01:02:d5:07:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:CD:F0:98:25:8C:A7:C0:DC:0D:F4:0A:94:E9:07:D2:3E:96:38
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/GAzN8JgljKfA3A30CpTpB9I-ljg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.177.0/24
31.135.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e9:5c:cc:e1:5d:59:f5:b9:f9:ab:96:0a:a5:8b:95:e5:41:
6b:5f:4e:74:bd:ba:1c:2c:12:5e:ef:8d:14:ea:b6:a3:8e:e8:
90:1f:c2:22:eb:fa:6d:e6:db:fb:60:95:f7:f9:44:ab:68:64:
c2:55:e8:d7:8f:db:40:0d:95:dc:3b:8a:1c:8a:9c:1b:2e:a5:
96:ea:05:e7:54:a7:74:6f:0e:f8:1c:f6:f6:57:82:fe:10:98:
7a:61:ed:f7:2f:ed:3b:78:23:bc:fe:34:d7:c9:4d:d4:68:2a:
fe:dc:68:6b:b0:5f:88:31:f2:42:3c:ce:0a:d0:57:22:f4:d6:
c3:4f:89:2d:5e:6c:57:da:37:48:39:cb:75:84:22:d1:7d:43:
2b:15:e0:cc:7f:85:87:02:3b:e7:43:e6:06:f1:33:a8:4b:e4:
33:62:30:a2:79:bd:c4:ff:2c:05:c9:d9:fd:26:d4:55:02:42:
be:78:30:9c:ec:fe:f9:78:bb:2b:65:16:6d:de:18:15:7d:35:
b9:66:2e:51:9e:47:47:d3:8f:95:5a:5c:11:e5:24:49:32:2b:
f2:b8:75:58:9c:98:d2:f3:30:87:45:12:de:22:84:bf:31:b5:
ee:dc:94:4a:07:a1:e0:ab:a7:aa:01:6f:57:cf:e2:72:45:60:
95:e1:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net