Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa
File: GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa (raw, json)
Hash identifier: wx2kzfl5/eKVV8cW/FCB0zPSR7qqCq5F0M1Y8hdHGxQ=
Subject key identifier: 18:8D:89:A9:8A:F0:7C:E0:78:1F:8F:96:15:F2:39:02:F9:40:81:7C
Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86
Certificate serial: 019424B36F3EED867A519F27E28FBECF50DC
Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47286
IP address blocks: 31.129.192.0/19 maxlen: 24
31.129.192.0/23 maxlen: 23
31.129.196.0/22 maxlen: 22
31.129.200.0/21 maxlen: 21
31.129.208.0/22 maxlen: 22
31.129.212.0/22 maxlen: 22
31.129.216.0/22 maxlen: 22
31.129.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6f:3e:ed:86:7a:51:9f:27:e2:8f:be:cf:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0632542221caef6448cc545214e000071bd56b86
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=188d89a98af07ce0781f8f9615f23902f940817c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8b:be:4e:14:69:af:62:9c:cf:fa:af:88:c6:
37:e6:9f:07:2d:77:ed:b1:8d:4b:11:e5:8c:60:46:
fa:3b:6d:c2:3b:18:dc:25:46:c3:98:36:0e:bf:1c:
2c:d6:fc:ee:fe:f0:b0:b3:ac:a2:e8:2e:88:53:4e:
c8:76:da:07:35:a2:d0:0c:da:dd:40:5a:e3:0e:a3:
f9:76:07:c1:31:cf:9b:d0:4e:c2:5a:e7:37:29:38:
0d:e8:42:ab:e8:f7:69:7f:35:ab:4d:7d:32:b8:13:
9e:d7:5a:0e:37:fe:46:08:31:e5:92:07:37:1f:45:
99:cf:56:ed:42:2f:36:a4:e7:34:8c:cc:07:33:1a:
c6:9c:1a:b6:e3:96:7c:c7:84:16:67:91:c2:e5:39:
f3:e5:58:16:5c:c7:d1:b8:6b:e3:27:49:53:9e:3d:
f3:d0:02:55:8a:da:73:5c:50:0f:e4:de:96:e7:bf:
a7:93:76:8b:12:8d:60:61:b8:68:a7:7d:34:d3:7e:
2b:6d:da:47:41:fb:a2:df:21:89:54:da:cc:f4:23:
02:8a:0b:4a:bf:a2:84:6f:67:b5:36:6a:ae:c8:34:
c5:85:27:83:2f:67:65:8c:9d:7d:40:6e:ec:f1:0f:
d8:ef:a8:49:64:3a:15:48:41:67:3d:0b:4b:7f:88:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:89:A9:8A:F0:7C:E0:78:1F:8F:96:15:F2:39:02:F9:40:81:7C
X509v3 Authority Key Identifier:
keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/GI2JqYrwfOB4H4-WFfI5AvlAgXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b3:47:53:81:f6:f5:cf:c5:f6:c2:6f:22:c2:1a:93:77:67:db:
ec:40:e2:08:1a:30:29:85:5c:ef:74:40:a2:76:c8:e1:1f:c9:
0f:e9:33:a2:2f:dd:8e:cf:40:71:db:76:fa:6c:67:be:cb:de:
08:ce:55:52:ce:ed:3e:f7:d2:98:0e:4e:4c:ae:f6:2b:55:9d:
f4:57:c1:5e:04:39:13:06:77:58:f1:54:1b:7c:a7:f6:42:4b:
bf:17:7a:31:68:09:48:50:c5:1a:4b:e6:c1:66:5a:a2:96:f8:
ae:cc:df:90:8d:14:a3:bf:ad:9d:2f:c7:f0:82:50:b8:b2:09:
c3:ae:dd:fe:06:b9:f0:37:d6:b4:fd:52:15:7b:7d:ad:b0:9f:
fa:17:a3:e2:c6:a7:93:bc:c5:ec:ab:77:f7:be:7b:70:6f:a5:
18:96:ca:d5:90:46:65:f3:e7:59:c8:f5:ca:c7:5c:b1:23:93:
ae:78:ee:b4:a7:8b:e8:26:cf:e7:8c:b6:11:b1:83:da:e8:06:
09:ad:83:9c:fc:fd:57:84:ac:6a:4f:c1:50:64:8a:f5:d2:e9:
2c:02:5f:78:5f:0b:c8:01:2a:2d:9d:e3:01:a3:5d:31:fe:d8:
fb:0b:ee:4c:8f:ab:62:43:ec:92:0b:ea:fe:20:55:96:05:10:
75:01:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:43 2025 by rpki-client on console.sobornost.net