Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/azMfriENBDiIJYosRP-8DXKTAfY.roa
File: azMfriENBDiIJYosRP-8DXKTAfY.roa (raw, json)
Hash identifier: SyiAg9Yx6L4V6Q7e4+QQHSJOd2fmFI1gwl+oA6hcHVg=
Subject key identifier: 6B:33:1F:AE:21:0D:04:38:88:25:8A:2C:44:FF:BC:0D:72:93:01:F6
Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Certificate serial: 0194236945B322D4B27CEBA629251F3E4E22
Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/azMfriENBDiIJYosRP-8DXKTAfY.roa
Signing time: Wed 01 Jan 2025 19:48:09 +0000
ROA not before: Wed 01 Jan 2025 19:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41628
IP address blocks: 31.15.24.0/21 maxlen: 24
89.31.144.0/21 maxlen: 24
193.38.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:45:b3:22:d4:b2:7c:eb:a6:29:25:1f:3e:4e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621
Validity
Not Before: Jan 1 19:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b331fae210d043888258a2c44ffbc0d729301f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:fe:79:26:31:6e:fd:0c:78:d1:41:3f:79:
52:80:3d:e7:db:68:24:2a:c7:16:82:11:eb:e0:e0:
b9:6d:91:ef:c7:cd:52:9d:12:6c:f9:41:ae:d9:52:
62:39:e0:a1:0b:33:0c:7f:d0:ef:9f:c5:e5:83:bb:
43:06:5d:ad:f5:95:79:2f:75:bb:a5:b0:1b:43:26:
e0:61:95:eb:6e:4d:33:fa:1f:2a:9d:9a:9f:cb:35:
c8:76:a2:ff:20:ec:cd:4d:0b:a4:56:49:61:44:3d:
b2:76:95:dc:16:47:d4:d1:0e:da:70:f4:e8:99:52:
84:c3:1e:7c:ef:d6:bc:52:8d:e4:15:5c:61:12:24:
9d:f2:c9:02:e6:44:e3:a7:bb:e9:4d:58:36:cb:76:
b2:68:e5:48:01:ff:31:6e:1a:ef:1b:e6:43:b3:42:
c7:65:79:3a:81:cb:37:aa:c8:0e:69:85:11:a2:e3:
de:27:e3:64:1a:bb:7b:8d:87:f6:b0:54:87:02:37:
b9:4f:f9:7d:6c:26:f5:49:42:93:90:4b:a6:3e:98:
8b:ad:eb:7f:6e:0f:8e:ca:53:90:f6:17:b0:32:50:
37:64:dc:d8:65:d4:2d:d9:5e:38:30:12:50:9e:72:
07:5a:fb:b2:2a:65:0a:74:b6:8d:ca:d4:49:ca:50:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:1F:AE:21:0D:04:38:88:25:8A:2C:44:FF:BC:0D:72:93:01:F6
X509v3 Authority Key Identifier:
keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/azMfriENBDiIJYosRP-8DXKTAfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.24.0/21
89.31.144.0/21
193.38.128.0/22
Signature Algorithm: sha256WithRSAEncryption
14:c5:71:b4:8f:c2:9b:6b:f0:f6:bb:13:f7:ab:8f:e9:86:d2:
6e:0a:64:2b:ad:1b:0e:c4:95:8a:83:d1:55:ca:38:5f:2e:6a:
07:29:01:fb:ac:5a:78:9e:0b:31:41:ab:5b:6a:0f:7a:20:64:
c2:60:d0:05:28:15:7e:ed:41:20:2f:02:34:69:92:a6:44:31:
7a:86:b3:dc:9b:4d:3c:e6:d7:69:96:1a:24:d1:82:aa:9c:2f:
17:e7:21:78:18:02:d5:70:ef:25:ce:cf:b9:5b:4b:3e:9c:8c:
76:d1:e0:94:de:0c:e5:c2:29:ca:94:85:66:ff:cd:35:6c:f6:
26:dd:fb:fb:25:3c:0b:5f:f5:42:82:83:69:18:dd:be:1c:ac:
b1:7b:1b:37:fa:c2:f8:18:3b:06:58:de:98:86:b0:bd:61:a9:
4a:f8:6a:d6:26:2b:c2:38:45:0f:c5:8f:fd:ac:f5:9a:88:ad:
88:b1:1e:e7:4e:19:7a:1f:e3:36:b7:49:f8:3a:21:77:6d:28:
b1:46:46:50:34:67:a2:f3:6b:f0:43:82:b0:b5:5a:ef:57:0a:
b9:52:42:02:92:04:0c:83:41:45:b8:d6:b4:01:1b:0a:7a:70:
fa:e2:b7:c0:16:2c:0f:ae:aa:de:00:9a:95:83:30:35:66:e9:
1f:c5:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net