Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WR7hAXSwInDs2hy0QxTLm_txJfQ.roa
File: WR7hAXSwInDs2hy0QxTLm_txJfQ.roa (raw, json)
Hash identifier: Bc6jhm7VjGl2GqURW1phWRLeHK2AC4P0K6XuEF1FQ7k=
Subject key identifier: 59:1E:E1:01:74:B0:22:70:EC:DA:1C:B4:43:14:CB:9B:FB:71:25:F4
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01946F3B53F8CEA8BDDED9F3142FC0945505
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WR7hAXSwInDs2hy0QxTLm_txJfQ.roa
Signing time: Thu 16 Jan 2025 13:09:06 +0000
ROA not before: Thu 16 Jan 2025 13:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50129
IP address blocks: 31.44.144.0/20 maxlen: 24
31.222.96.0/19 maxlen: 24
185.209.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6f:3b:53:f8:ce:a8:bd:de:d9:f3:14:2f:c0:94:55:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 16 13:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591ee10174b02270ecda1cb44314cb9bfb7125f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:be:e1:9f:fe:cb:f5:a6:36:63:e4:33:ff:
8b:d1:6d:2c:e5:f1:12:a9:c5:78:81:e5:e4:39:d1:
13:3e:ef:89:3b:28:72:b5:a8:e7:15:58:f4:e1:7e:
df:31:e1:10:92:72:f6:3c:34:99:fb:59:73:0d:02:
c9:f2:91:93:c9:ef:a3:05:ca:4d:3a:57:b4:80:df:
55:9b:7e:d5:48:eb:20:b7:d1:77:3d:5e:7b:09:01:
2b:ab:31:3c:d3:3b:e7:4b:93:ec:7a:19:b0:4e:dd:
d5:2d:b9:23:a5:c1:f4:a4:07:c5:d9:c9:56:96:a9:
7c:31:4c:82:00:b8:bd:ea:aa:a5:68:4d:d6:10:88:
3b:cf:fa:2a:c9:e2:98:68:3f:75:dd:82:a1:90:d1:
0c:9a:7c:5f:89:cc:20:b8:bc:bb:57:ef:7c:11:d1:
c5:41:d7:be:23:6b:1e:93:40:f9:09:de:b1:e7:96:
a8:08:a7:90:aa:db:03:0e:3e:68:71:ca:87:76:91:
01:b3:cd:e6:17:28:92:ba:9d:aa:ef:f2:a5:7c:86:
5b:67:d1:7a:1a:9e:6e:27:31:b7:00:d8:8f:75:71:
14:e2:0a:d1:f2:6b:b6:cf:29:ea:a8:f6:a9:fa:ff:
2e:63:21:af:03:01:95:74:89:42:45:18:2b:d4:b8:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:E1:01:74:B0:22:70:EC:DA:1C:B4:43:14:CB:9B:FB:71:25:F4
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/WR7hAXSwInDs2hy0QxTLm_txJfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0/19
185.209.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:7e:5e:00:eb:64:31:46:bc:06:48:df:f0:79:84:22:dc:b5:
3b:81:01:8b:98:83:21:eb:83:c8:94:35:fb:66:c3:d0:bd:bf:
30:f6:65:9c:6f:38:58:dc:b3:65:85:98:4f:ea:39:b5:ab:3a:
48:b1:d0:e7:72:2a:29:a6:42:94:f5:2f:d8:ba:8c:25:c9:d3:
06:a9:1f:3d:ee:c3:e3:a4:fa:f7:9d:7d:0e:26:98:a1:cd:7a:
df:38:73:84:51:24:11:4b:32:3a:37:65:f4:9e:aa:e4:63:38:
09:d0:34:4c:d0:ea:c9:0d:df:86:63:b1:a7:1a:4b:cd:3c:f0:
ee:76:58:3b:28:3d:56:2a:a0:50:33:b5:8a:48:80:5d:c6:2b:
ac:28:49:41:bb:91:b0:83:35:d5:5f:4a:65:d1:7a:83:4e:e8:
74:8f:da:25:03:25:be:2e:40:9b:7f:99:82:ec:7d:3e:0a:c8:
d1:a2:a9:a0:be:6f:90:f0:80:2b:07:4d:8e:fc:1c:02:65:18:
e0:a4:81:89:43:cc:04:b2:f1:88:6c:27:74:bd:8b:5e:eb:0a:
b0:d8:fa:da:5b:ab:45:78:80:fc:8d:6b:cd:04:2a:49:e8:42:
47:60:12:0e:3d:1c:18:6a:bd:bf:ed:d9:24:3a:be:0f:f6:00:
a1:a3:d3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:17:01 2025 by rpki-client on console.sobornost.net