Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/9-PXmxWchg8g5OgsfYgYmWKFumw.roa
File: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (raw, json)
Hash identifier: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=
Subject key identifier: F7:E3:D7:9B:15:9C:86:0F:20:E4:E8:2C:7D:88:18:99:62:85:BA:6C
Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Certificate serial: 0194228DD439B81484BC9A676A60F86366DA
Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/9-PXmxWchg8g5OgsfYgYmWKFumw.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61307
IP address blocks: 31.24.56.0/21 maxlen: 21
31.24.56.0/22 maxlen: 22
31.24.60.0/22 maxlen: 22
85.196.192.0/18 maxlen: 18
85.196.192.0/19 maxlen: 19
85.196.224.0/19 maxlen: 19
93.185.240.0/20 maxlen: 20
93.185.240.0/21 maxlen: 21
93.185.248.0/21 maxlen: 21
185.97.248.0/22 maxlen: 22
185.97.248.0/23 maxlen: 23
185.97.250.0/23 maxlen: 23
2a03:4360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d4:39:b8:14:84:bc:9a:67:6a:60:f8:63:66:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e3d79b159c860f20e4e82c7d8818996285ba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:68:fc:2e:09:c8:fb:31:95:85:13:9e:60:a3:
62:84:d5:2b:4a:3d:8a:19:6d:9a:27:2e:b4:40:5e:
5c:f1:25:88:37:d5:e3:be:f8:07:90:e4:29:3c:71:
c9:c9:61:8a:89:ce:8d:a6:3b:fb:85:47:68:c4:7a:
4e:2d:95:d4:82:03:f2:df:02:83:00:61:00:2d:d2:
b8:3a:69:69:7c:2b:73:83:6b:17:d2:ff:a8:4d:22:
2c:c5:37:81:35:2c:54:11:bd:c9:b6:78:cd:6a:be:
e7:cf:76:73:5f:88:0e:21:bd:84:f9:20:2d:09:01:
74:af:81:6f:6b:c8:19:ae:81:c2:09:cf:7f:e4:68:
19:d9:20:89:0b:05:55:ed:b6:a9:55:5a:df:c2:c2:
76:c3:72:9a:4e:10:12:e4:a5:00:39:cb:89:da:4f:
b4:62:c5:7d:1a:79:d6:14:eb:88:6e:1f:aa:7a:b5:
c8:1b:33:c2:9f:e7:7c:55:0b:37:de:c9:bb:aa:56:
2f:42:6f:79:fb:4c:b2:a4:96:44:41:bf:15:20:fe:
6c:89:6d:c8:b8:bd:73:3b:14:9e:6d:17:11:d2:8b:
52:07:49:e5:25:23:41:9b:e8:bb:9c:39:ed:81:33:
ae:b8:20:6f:62:81:b7:b1:08:8d:4e:b1:41:9c:76:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:D7:9B:15:9C:86:0F:20:E4:E8:2C:7D:88:18:99:62:85:BA:6C
X509v3 Authority Key Identifier:
keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/9-PXmxWchg8g5OgsfYgYmWKFumw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.56.0/21
85.196.192.0/18
93.185.240.0/20
185.97.248.0/22
IPv6:
2a03:4360::/32
Signature Algorithm: sha256WithRSAEncryption
63:e4:23:59:cc:bd:a4:8c:74:3f:cf:86:a2:9e:a2:4a:38:e7:
43:0f:3f:96:5d:9e:18:37:fb:e6:63:a2:c4:a1:23:ba:23:6c:
68:6b:1f:97:c5:56:8c:2c:be:35:e9:87:11:1a:fe:e5:27:79:
c6:7c:dc:8f:e4:ef:72:8d:83:76:81:ed:78:ed:03:f2:18:8a:
7c:a1:df:ac:b2:16:52:57:af:e8:48:b9:78:36:3b:34:a5:e5:
bd:a4:a6:5e:53:81:19:77:2f:fa:91:27:e9:9a:98:c3:65:a6:
19:48:7c:06:fe:b8:d6:56:29:78:63:32:b0:ba:99:dd:e0:10:
1c:b6:a8:bf:83:07:03:bb:e1:df:c7:54:8a:03:72:79:61:e1:
d4:23:28:37:8c:52:a3:fa:29:37:c1:e1:5c:e1:9a:39:d9:db:
96:99:12:7e:1a:16:7c:98:22:d9:cb:d0:84:5c:bd:55:50:19:
66:cc:3c:dd:83:eb:f5:64:cb:7d:d2:78:aa:35:27:ef:5b:c7:
0c:40:62:69:75:dc:07:07:cd:2a:08:f5:21:a5:fc:d4:da:af:
40:fa:07:67:10:9f:45:02:76:7f:09:9e:8a:1e:cf:51:90:e1:
15:99:d1:6f:44:23:82:36:32:a8:8a:ae:44:9d:22:f5:39:a1:
dc:24:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net