Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa
File: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (raw, json)
Hash identifier: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=
Subject key identifier: E2:F7:B5:6D:1E:38:7D:7A:73:0B:83:8B:68:C7:68:5A:04:9F:E1:68
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 019420683CEAE728D13B99E99247ECACF48B
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51469
IP address blocks: 31.171.216.0/23 maxlen: 23
31.171.218.0/23 maxlen: 23
31.171.220.0/23 maxlen: 23
31.171.222.0/23 maxlen: 23
185.16.232.0/23 maxlen: 23
185.16.234.0/23 maxlen: 23
217.170.240.0/23 maxlen: 23
217.170.242.0/23 maxlen: 23
217.170.244.0/23 maxlen: 23
217.170.244.0/24 maxlen: 24
217.170.245.0/24 maxlen: 24
217.170.246.0/23 maxlen: 23
217.170.248.0/23 maxlen: 23
217.170.250.0/23 maxlen: 23
217.170.252.0/23 maxlen: 23
217.170.254.0/23 maxlen: 23
2a00:6380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:ea:e7:28:d1:3b:99:e9:92:47:ec:ac:f4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2f7b56d1e387d7a730b838b68c7685a049fe168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:96:1a:18:de:c0:36:ce:8d:51:1f:80:35:
65:ab:a5:9f:fc:05:bb:3a:11:96:9f:3c:a0:eb:ab:
b2:cd:dc:be:99:bf:c9:c5:03:a9:fe:4d:c9:04:7b:
2e:e0:84:d5:8b:93:9d:2d:54:63:da:c7:14:fb:ab:
a7:5b:dc:54:2a:35:3b:25:14:8c:89:14:2e:8f:ac:
62:0d:94:2c:8a:7e:35:ff:02:f9:ae:ec:63:e5:22:
a7:b9:a9:80:2b:06:b3:28:39:c6:d5:6e:c9:f1:31:
66:ca:df:3f:f1:c7:98:5c:40:67:ce:dc:33:67:b2:
83:18:ae:74:df:22:da:0e:70:f9:3b:6b:b6:94:f6:
79:32:87:16:63:49:86:f5:a1:4f:a4:ab:44:ae:75:
41:fa:98:57:69:13:69:fc:be:7d:a4:40:3c:6b:a6:
bf:58:81:13:20:d8:be:af:05:b5:d6:2a:7c:03:85:
e8:cf:f2:97:ff:72:25:11:b0:fb:cb:49:64:6a:6a:
17:10:8a:86:9b:02:b6:76:e0:bd:b4:8f:fc:6c:ee:
fd:cb:99:2e:bf:97:40:9d:5a:a7:d1:b8:50:71:f4:
34:fb:5e:68:cc:09:b8:23:ac:44:41:7f:f0:45:a5:
dc:a0:41:93:74:4d:2d:9e:5a:8d:68:05:df:33:b3:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F7:B5:6D:1E:38:7D:7A:73:0B:83:8B:68:C7:68:5A:04:9F:E1:68
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.216.0/21
185.16.232.0/22
217.170.240.0/20
IPv6:
2a00:6380::/32
Signature Algorithm: sha256WithRSAEncryption
65:0e:78:51:01:f5:e3:f0:4d:01:f2:d8:6f:62:32:84:39:30:
32:80:95:d3:e8:f5:2e:c2:75:7a:6a:35:38:dc:0f:3b:94:fb:
37:44:1c:3d:2c:1c:5d:48:f9:3a:f3:97:41:e4:c6:db:ce:0e:
df:4d:34:5c:63:1c:36:c1:e9:c9:42:10:95:7a:ba:fc:0f:99:
a1:ff:12:e9:a5:2a:b9:e0:0e:c7:b2:1a:97:45:46:1a:2d:c8:
da:37:61:99:8d:30:8f:74:0f:08:ab:dd:83:61:2e:9f:a8:c5:
3a:be:17:0f:cd:dd:8e:b2:4e:54:93:ae:34:09:27:93:26:57:
c9:f2:79:51:58:9e:15:a6:28:7f:5e:8b:64:ba:2b:53:72:34:
63:05:95:0b:8f:77:bc:6a:e9:a0:1f:62:7f:5a:e0:95:c2:c9:
9f:37:67:dd:73:ff:d4:a0:18:29:d9:18:aa:1b:24:40:a4:33:
bc:cb:3c:7d:30:4f:7a:46:e4:c6:de:dc:95:1b:73:94:bf:78:
aa:e7:c7:31:a6:17:9a:e6:4b:52:69:c8:d4:e7:32:c6:e7:f5:
ce:cd:e3:e2:d6:c2:93:1f:9e:93:2e:9a:89:af:09:fd:3c:45:
bc:95:24:b6:82:23:f1:d2:c1:0e:74:65:ae:86:d6:f6:ce:71:
13:78:eb:d4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQgaDzq5yjRO5npkkfsrPSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWUxYTY3NzI1ZWI0YTc2NGE1ODdiYzM3MDc5ZGViYmU4
MWZiNjQwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmY3YjU2ZDFlMzg3ZDdhNzMwYjgzOGI2OGM3Njg1YTA0OWZlMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xiWGhjewDbOjVEfgDVlq6Wf/AW7
OhGWnzyg66uyzdy+mb/JxQOp/k3JBHsu4ITVi5OdLVRj2scU+6unW9xUKjU7JRSM
iRQuj6xiDZQsin41/wL5ruxj5SKnuamAKwazKDnG1W7J8TFmyt8/8ceYXEBnztwz
Z7KDGK503yLaDnD5O2u2lPZ5MocWY0mG9aFPpKtErnVB+phXaRNp/L59pEA8a6a/
WIETINi+rwW11ip8A4Xoz/KX/3IlEbD7y0lkamoXEIqGmwK2duC9tI/8bO79y5ku
v5dAnVqn0bhQcfQ0+15ozAm4I6xEQX/wRaXcoEGTdE0tnlqNaAXfM7NtJwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFOL3tW0eOH16cwuDi2jHaFoEn+FoMB8GA1UdIwQY
MBaAFFHuGmdyXrSnZKWHvDcHneu+gftkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5Mjkt
M2Q3ZjkyYzIzYThiLzEvNHZlMWJSNDRmWHB6QzRPTGFNZG9XZ1NmNFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lMGYzYmItYTA5OS00Nzg1LTg5MjktM2Q3ZjkyYzIzYThi
LzEvVWU0YVozSmV0S2RrcFllOE53ZWQ2NzZCLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH6vYAwQC
uRDoAwQE2arwMA0EAgACMAcDBQAqAGOAMA0GCSqGSIb3DQEBCwUAA4IBAQBlDnhR
AfXj8E0B8thvYjKEOTAygJXT6PUuwnV6ajU43A87lPs3RBw9LBxdSPk685dB5Mbb
zg7fTTRcYxw2wenJQhCVerr8D5mh/xLppSq54A7HshqXRUYaLcjaN2GZjTCPdA8I
q92DYS6fqMU6vhcPzd2Osk5Uk640CSeTJlfJ8nlRWJ4Vpih/XotkuitTcjRjBZUL
j3e8aumgH2J/WuCVwsmfN2fdc//UoBgp2RiqGyRApDO8yzx9ME96RuTG3tyVG3OU
v3iq58cxphea5ktSacjU5zLG5/XOzePi1sKTH56TLpqJrwn9PEW8lSS2giPx0sEO
dGWuhtb2znETeOvU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net