Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/RNbbftv4b7e3CYKFsr49KlQO4_w.roa
File: RNbbftv4b7e3CYKFsr49KlQO4_w.roa (raw, json)
Hash identifier: /CnpcGzBwR4rZDPeHyl5tzmbTw0XSI8aqC12UW9bNVw=
Subject key identifier: 44:D6:DB:7E:DB:F8:6F:B7:B7:09:82:85:B2:BE:3D:2A:54:0E:E3:FC
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0194266C480CB63C8CE88251115CFCD68DBF
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/RNbbftv4b7e3CYKFsr49KlQO4_w.roa
Signing time: Thu 02 Jan 2025 09:50:17 +0000
ROA not before: Thu 02 Jan 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48595
IP address blocks: 31.131.128.0/21 maxlen: 21
31.131.128.0/24 maxlen: 24
31.131.130.0/24 maxlen: 24
31.131.135.0/24 maxlen: 24
31.131.136.0/22 maxlen: 22
31.131.136.0/24 maxlen: 24
31.131.137.0/24 maxlen: 24
31.131.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:48:0c:b6:3c:8c:e8:82:51:11:5c:fc:d6:8d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Jan 2 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d6db7edbf86fb7b7098285b2be3d2a540ee3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:58:dc:fb:60:21:00:d7:1e:ec:e9:96:c8:
56:56:a6:6c:ec:71:fc:f0:7a:82:e4:f2:ff:10:73:
80:b4:a2:8e:bb:4f:98:c9:cb:f3:fe:b3:f0:d9:4a:
c0:98:0d:de:06:dd:c5:70:f0:8e:e7:21:7f:9c:10:
72:0e:e3:a4:ad:0c:fc:cc:5a:32:99:b9:3b:92:93:
63:0b:79:e8:22:2a:e2:d7:5c:bb:a7:c2:79:7a:d0:
45:5c:68:19:ee:6d:45:04:10:22:c6:6e:57:55:0c:
13:54:77:75:06:8b:a6:94:6c:fc:f7:eb:bf:c8:d5:
4b:58:37:43:47:e8:b9:f8:94:ca:1c:c1:08:f7:d9:
0d:b4:4f:52:ff:20:ec:5e:95:43:01:d2:3d:29:6b:
46:de:78:06:ee:58:ba:98:b5:be:17:77:72:2f:c1:
e9:7a:78:59:7a:98:93:ab:25:c1:0d:19:14:f8:b4:
d5:9f:21:ea:d4:ab:d3:a9:54:64:c7:cd:9f:74:d3:
14:81:63:6a:12:54:c4:76:52:67:81:12:83:f6:d8:
78:90:c4:67:b5:c6:d2:81:9f:17:b9:f1:c3:1f:37:
a4:a2:f1:7a:5c:8e:83:a2:31:0d:91:a1:28:ca:c1:
21:b8:7c:62:e6:e2:ce:96:a4:65:b8:33:b2:34:16:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D6:DB:7E:DB:F8:6F:B7:B7:09:82:85:B2:BE:3D:2A:54:0E:E3:FC
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/RNbbftv4b7e3CYKFsr49KlQO4_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.128.0-31.131.139.255
Signature Algorithm: sha256WithRSAEncryption
99:4c:de:f8:56:8a:95:4f:2a:58:de:4d:4d:70:45:94:97:9f:
67:13:5d:92:4a:64:d3:aa:a7:3e:ce:3a:53:e7:d9:67:a9:7a:
dd:3b:b0:50:39:d6:40:83:f6:60:14:bc:27:42:8d:90:a1:21:
92:8d:42:b4:2a:d6:50:f6:87:b5:a3:ab:d5:93:24:42:7b:e9:
49:4b:d1:eb:6a:6f:85:d0:bc:b5:1c:16:bd:20:bf:ee:59:4d:
c8:a9:37:29:cf:83:73:a8:ee:ac:0d:66:1c:72:7d:cc:38:69:
08:d6:95:4e:0d:9c:c8:e2:ee:38:56:37:47:a5:8c:e1:65:1b:
77:bb:81:2e:c7:45:bd:f3:4d:21:5f:3c:ae:b4:b7:95:c0:5b:
8b:d0:07:dd:2f:c5:48:5a:83:1f:9f:99:c9:1f:c0:80:e6:df:
ca:f0:41:be:fd:65:9c:39:2e:8d:71:1e:c4:48:61:4c:07:0a:
8c:4a:c6:ba:0a:2c:7b:bd:3c:a2:04:62:a7:37:6a:22:bd:82:
ee:3b:03:14:f5:9f:f8:52:bf:03:25:03:d9:7a:9b:4f:71:fc:
78:5b:b8:f1:a5:0f:c4:db:8c:80:dd:ca:9a:93:9a:5b:e4:6d:
ee:82:49:82:19:79:45:5a:1b:89:c2:e2:9f:e0:44:76:69:bf:
c9:5e:61:b9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmbEgMtjyM6IJREVz81o2/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTE3OWYwYTM1Y2YwN2MxNjI5NjcyNjYyODY2Y2EwMDFm
NzViZDMwHhcNMjUwMTAyMDk1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQ2ZGI3ZWRiZjg2ZmI3YjcwOTgyODViMmJlM2QyYTU0MGVlM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR1Y3PtgIQDXHuzplshWVqZs7HH8
8HqC5PL/EHOAtKKOu0+Yycvz/rPw2UrAmA3eBt3FcPCO5yF/nBByDuOkrQz8zFoy
mbk7kpNjC3noIiri11y7p8J5etBFXGgZ7m1FBBAixm5XVQwTVHd1BoumlGz89+u/
yNVLWDdDR+i5+JTKHMEI99kNtE9S/yDsXpVDAdI9KWtG3ngG7li6mLW+F3dyL8Hp
enhZepiTqyXBDRkU+LTVnyHq1KvTqVRkx82fdNMUgWNqElTEdlJngRKD9th4kMRn
tcbSgZ8XufHDHzekovF6XI6DojENkaEoysEhuHxi5uLOlqRluDOyNBasNQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFETW237b+G+3twmChbK+PSpUDuP8MB8GA1UdIwQY
MBaAFI4RefCjXPB8FilnJmKGbKAB91vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAt
NGNiYzY3MjE5YjRhLzEvUk5iYmZ0djRiN2UzQ1lLRnNyNDlLbFFPNF93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lZThmOTAtZWYyYi00M2MwLWIwYzAtNGNiYzY3MjE5YjRh
LzEvamhGNThLTmM4SHdXS1djbVlvWnNvQUgzVzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAcfg4AD
BAIfg4gwDQYJKoZIhvcNAQELBQADggEBAJlM3vhWipVPKljeTU1wRZSXn2cTXZJK
ZNOqpz7OOlPn2Wepet07sFA51kCD9mAUvCdCjZChIZKNQrQq1lD2h7Wjq9WTJEJ7
6UlL0etqb4XQvLUcFr0gv+5ZTcipNynPg3Oo7qwNZhxyfcw4aQjWlU4NnMji7jhW
N0eljOFlG3e7gS7HRb3zTSFfPK60t5XAW4vQB90vxUhagx+fmckfwIDm38rwQb79
ZZw5Lo1xHsRIYUwHCoxKxroKLHu9PKIEYqc3aiK9gu47AxT1n/hSvwMlA9l6m09x
/HhbuPGlD8TbjIDdypqTmlvkbe6CSYIZeUVaG4nC4p/gRHZpv8leYbk=
-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:16 2025 by rpki-client on console.sobornost.net