Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/EmZGnE3cUctL2ReH5qcX6e_cHZA.roa
File: EmZGnE3cUctL2ReH5qcX6e_cHZA.roa (raw, json)
Hash identifier: /paSeXdGSN8xOjhTUDVjgnMls/gfanO98AsFxJF7eNA=
Subject key identifier: 12:66:46:9C:4D:DC:51:CB:4B:D9:17:87:E6:A7:17:E9:EF:DC:1D:90
Certificate issuer: /CN=515585aca423697c62236e2b5f91b41e4be7ae58
Certificate serial: 019425FDDAA62F3E28AFB14591A84616315E
Authority key identifier: 51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/EmZGnE3cUctL2ReH5qcX6e_cHZA.roa
Signing time: Thu 02 Jan 2025 07:49:40 +0000
ROA not before: Thu 02 Jan 2025 07:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56546
IP address blocks: 31.41.20.0/22 maxlen: 22
31.41.20.0/24 maxlen: 24
31.41.21.0/24 maxlen: 24
31.41.22.0/24 maxlen: 24
31.41.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:da:a6:2f:3e:28:af:b1:45:91:a8:46:16:31:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515585aca423697c62236e2b5f91b41e4be7ae58
Validity
Not Before: Jan 2 07:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1266469c4ddc51cb4bd91787e6a717e9efdc1d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:fc:c1:96:a2:d2:9f:3f:28:7c:ad:36:44:
5d:38:f8:5a:04:ea:fe:29:d1:c8:e4:be:cd:12:e6:
d0:02:6a:a2:47:16:a8:98:77:8a:78:c5:d7:c7:dd:
9c:35:9c:1e:3d:63:0d:d1:d9:76:bc:4d:de:4c:79:
c4:bc:e3:57:2d:94:59:2e:37:f3:af:f1:24:7c:10:
55:92:e6:e8:74:a3:c4:f5:42:93:4c:af:23:9f:ee:
51:28:8e:9b:47:1b:b6:fb:c3:03:9e:de:ec:36:c1:
82:86:8f:dc:83:3b:58:a1:7f:44:27:43:a7:bb:60:
01:d6:f1:0c:86:15:1e:02:df:16:e7:e8:17:40:d8:
76:ae:57:58:cb:59:c0:7f:24:89:2c:1a:e7:0a:2e:
3f:c7:a1:77:be:26:a8:40:ad:af:da:62:8c:e2:dd:
eb:c0:e7:a1:71:d4:fd:d8:5c:65:3d:4b:f0:e1:26:
b9:13:3a:06:2a:89:b9:b4:90:21:58:8b:b5:51:2b:
8b:b5:3f:4e:e8:22:1d:06:32:9d:5f:24:f6:0e:e7:
f1:d1:ca:81:a8:7f:80:41:57:96:71:fc:fd:49:3e:
66:fd:f3:d1:be:76:6f:8a:1e:e6:a8:12:8b:3d:cd:
f1:a4:68:c1:43:f4:1d:81:e0:6d:05:cd:20:10:fc:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:46:9C:4D:DC:51:CB:4B:D9:17:87:E6:A7:17:E9:EF:DC:1D:90
X509v3 Authority Key Identifier:
keyid:51:55:85:AC:A4:23:69:7C:62:23:6E:2B:5F:91:B4:1E:4B:E7:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVWFrKQjaXxiI24rX5G0Hkvnrlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/EmZGnE3cUctL2ReH5qcX6e_cHZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/9d3f15-47d0-4069-b596-51a0f6bde4f6/1/UVWFrKQjaXxiI24rX5G0Hkvnrlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.20.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:d0:c1:16:ba:04:25:40:ad:ba:5a:5e:82:ad:34:5e:bb:79:
2e:30:63:60:7a:f8:10:cc:49:37:65:13:f0:12:74:ce:d2:80:
9e:8f:12:09:c4:59:2a:db:1a:69:8d:4e:84:f3:09:f8:61:55:
6c:6b:50:5a:d5:03:b8:51:0f:6c:d3:61:6e:bf:89:77:97:c8:
cc:7b:eb:3b:01:f6:38:9d:38:86:00:a0:cf:49:d4:d6:7c:86:
4b:b3:3c:28:18:82:17:9f:ad:c9:7e:2b:31:fc:64:89:62:ad:
fc:c1:1a:1e:b0:e7:a4:49:1e:40:6b:6f:fa:3d:e8:d3:0f:6d:
98:e9:aa:23:4e:40:cc:b9:2a:81:9a:f6:d2:89:44:85:24:d8:
bd:e5:4b:e0:f9:42:72:9c:04:64:9f:ca:34:17:39:52:cb:53:
04:f1:70:a7:42:aa:1f:a6:c3:aa:99:bc:dd:c2:f8:b2:a9:c9:
aa:57:52:67:dd:56:b6:25:37:5b:a2:95:82:7f:0a:5f:e5:09:
51:c2:6b:4f:12:5a:9e:f3:7a:6f:96:8d:80:84:96:fd:b1:4c:
53:87:5b:7f:74:ab:0e:16:5f:51:35:1d:51:71:c8:b0:5d:1e:
94:21:2b:c7:66:dc:da:5a:80:da:41:21:b0:8e:91:28:7e:00:
42:3c:98:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net