Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DGwsJ-faqeYDibT_3N1guJ6NeKg.roa
File: DGwsJ-faqeYDibT_3N1guJ6NeKg.roa (raw, json)
Hash identifier: 6gf++zjHkWgfPH/oG5cQsrHS0XMwFfQA98U0iEH7feQ=
Subject key identifier: 0C:6C:2C:27:E7:DA:A9:E6:03:89:B4:FF:DC:DD:60:B8:9E:8D:78:A8
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 0194DAC7109393C15BFB8CE2B81BC88E8E09
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DGwsJ-faqeYDibT_3N1guJ6NeKg.roa
Signing time: Thu 06 Feb 2025 10:21:06 +0000
ROA not before: Thu 06 Feb 2025 10:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 31.104.0.0/16 maxlen: 16
31.120.0.0/16 maxlen: 16
31.126.0.0/15 maxlen: 15
46.68.66.0/24 maxlen: 24
109.180.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:c7:10:93:93:c1:5b:fb:8c:e2:b8:1b:c8:8e:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Feb 6 10:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c6c2c27e7daa9e60389b4ffdcdd60b89e8d78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:c2:ad:8f:9b:47:49:f4:f5:af:3b:d4:2c:
c0:08:cb:5c:e3:2c:bc:9b:f3:1d:57:48:12:b4:23:
54:7e:69:63:cd:8d:bb:5f:49:e9:3e:a8:2d:0a:ea:
44:46:2d:27:df:8c:45:c2:10:5c:ce:64:83:51:f3:
36:1e:ab:c5:0f:10:21:ee:9f:b8:2f:cb:fc:d0:a6:
3b:17:3b:16:c4:50:86:c2:74:2e:5a:a7:d6:88:58:
1a:b9:9b:a3:54:91:d3:7b:29:6e:ee:96:31:e4:07:
07:b6:8b:81:0e:04:4f:44:8a:83:b7:da:17:d6:59:
6a:58:56:3e:f2:b9:45:c5:cf:20:58:fe:2b:ea:26:
86:4a:f8:67:d0:9c:71:d5:b1:51:12:40:5a:5a:c6:
df:59:f0:11:d3:d0:7f:f4:e1:f5:6a:75:59:49:58:
ec:f1:33:5c:cd:dd:f4:b3:81:4d:aa:f5:6a:fc:b4:
a3:69:7a:78:cf:28:54:97:11:59:2d:55:3c:4e:67:
6f:18:2c:0f:3b:90:99:fb:c7:2d:02:7c:5d:98:3b:
6e:24:08:ec:79:cb:63:c2:23:a9:43:6a:cf:87:64:
e9:35:a0:a1:0a:10:45:fd:40:60:0e:e1:6d:bc:07:
e1:1b:d4:24:11:a7:d4:82:2e:b8:8a:57:4e:9b:09:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6C:2C:27:E7:DA:A9:E6:03:89:B4:FF:DC:DD:60:B8:9E:8D:78:A8
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/DGwsJ-faqeYDibT_3N1guJ6NeKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.104.0.0/16
31.120.0.0/16
31.126.0.0/15
46.68.66.0/24
109.180.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a5:45:37:1a:b1:0d:77:a8:4e:47:7d:c4:c2:7f:b6:ca:cf:75:
24:13:11:cc:c2:56:d4:bf:bd:22:a7:6b:08:f3:e0:b1:93:d4:
c1:bb:7e:41:fe:9a:0e:01:77:d5:6b:0c:02:26:ad:9a:a8:55:
2e:56:4f:54:42:80:de:ff:c5:ff:52:c2:dc:96:f4:30:1e:57:
97:39:0b:06:2a:90:ca:ba:6b:6b:a1:61:08:20:14:e0:d3:77:
38:82:45:03:d6:43:15:27:1f:99:54:de:d9:d0:2a:0e:eb:7e:
06:be:09:35:87:4c:e2:38:f0:86:b2:c2:91:9d:6c:75:d0:f9:
02:52:9c:ef:fd:9e:1e:96:56:6b:d4:0e:54:bc:8e:21:5c:66:
61:ae:bd:99:72:81:63:74:29:50:cd:68:06:17:f6:ac:07:b9:
64:ca:a9:4f:ec:ae:ef:c0:c2:18:8b:7f:cc:6f:4a:d9:25:a2:
87:4b:31:51:5c:4c:8d:e8:15:da:09:c6:03:7f:79:04:ef:7a:
1b:32:a5:2c:26:e8:1b:07:6d:41:e7:9f:cb:5b:2f:09:19:2e:
be:22:82:34:ee:68:9a:81:9f:c4:8d:5f:7c:5d:f0:93:cc:6d:
1a:0f:be:fb:19:7a:70:a1:af:2f:70:bf:ff:66:77:25:5f:7c:
dc:ac:b0:0e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZTaxxCTk8Fb+4ziuBvIjo4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUwMjA2MTAyMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzZjMmMyN2U3ZGFhOWU2MDM4OWI0ZmZkY2RkNjBiODllOGQ3OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3zCrY+bR0n09a871CzACMtc4yy8
m/MdV0gStCNUfmljzY27X0npPqgtCupERi0n34xFwhBczmSDUfM2HqvFDxAh7p+4
L8v80KY7FzsWxFCGwnQuWqfWiFgauZujVJHTeylu7pYx5AcHtouBDgRPRIqDt9oX
1llqWFY+8rlFxc8gWP4r6iaGSvhn0Jxx1bFREkBaWsbfWfAR09B/9OH1anVZSVjs
8TNczd30s4FNqvVq/LSjaXp4zyhUlxFZLVU8TmdvGCwPO5CZ+8ctAnxdmDtuJAjs
ectjwiOpQ2rPh2TpNaChChBF/UBgDuFtvAfhG9QkEafUgi64ildOmwmH0wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAxsLCfn2qnmA4m0/9zdYLiejXioMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvREd3c0otZmFxZVlEaWJUXzNOMWd1SjZOZUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwMAH2gDAwAf
eAMDAR9+AwQALkRCAwMBbbQwDQYJKoZIhvcNAQELBQADggEBAKVFNxqxDXeoTkd9
xMJ/tsrPdSQTEczCVtS/vSKnawjz4LGT1MG7fkH+mg4Bd9VrDAImrZqoVS5WT1RC
gN7/xf9SwtyW9DAeV5c5CwYqkMq6a2uhYQggFODTdziCRQPWQxUnH5lU3tnQKg7r
fga+CTWHTOI48IaywpGdbHXQ+QJSnO/9nh6WVmvUDlS8jiFcZmGuvZlygWN0KVDN
aAYX9qwHuWTKqU/sru/AwhiLf8xvStkloodLMVFcTI3oFdoJxgN/eQTvehsypSwm
6BsHbUHnn8tbLwkZLr4igjTuaJqBn8SNX3xd8JPMbRoPvvsZenChry9wv/9mdyVf
fNyssA4=
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:29 2025 by rpki-client on console.sobornost.net