Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa
File: QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa (raw, json)
Hash identifier: eiv+LUkW2mCzBfv89ZxOhPY004Yp10lyTQAV2IGZ1m0=
Subject key identifier: 41:C6:8C:75:FF:30:37:FA:0A:AD:42:8A:8D:00:DA:0C:21:B7:9C:B5
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424456553B83F574EBAC112AD319197F3
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa
Signing time: Wed 01 Jan 2025 23:48:35 +0000
ROA not before: Wed 01 Jan 2025 23:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213145
IP address blocks: 31.155.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:65:53:b8:3f:57:4e:ba:c1:12:ad:31:91:97:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41c68c75ff3037fa0aad428a8d00da0c21b79cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:26:7a:d2:63:31:8e:b2:68:8c:e6:3d:68:
2b:a6:ee:7a:a6:86:c1:8a:32:90:82:af:28:71:73:
35:8e:8b:cf:c9:3f:68:21:a5:24:00:b1:de:db:55:
ca:29:41:70:7b:f6:53:74:00:76:a7:c4:c2:5d:6c:
f3:58:f2:fa:d6:d1:69:a8:a2:e2:be:a6:66:7a:2d:
e5:28:6b:fb:ab:8e:91:f8:87:7f:f9:e9:cd:88:77:
58:75:ae:e3:37:02:f6:c4:13:89:28:d4:64:f7:55:
f8:55:35:a9:9f:6a:80:58:7a:42:db:5d:1b:a9:17:
cb:4f:74:f9:f8:78:f4:ff:e9:d6:a0:38:94:9e:9a:
a4:3a:ca:46:f4:d4:ef:3d:07:2d:17:ea:32:44:a7:
43:19:3b:61:42:99:9d:37:5d:ba:50:5c:b3:a5:79:
24:90:36:31:72:f5:e6:34:27:4b:e9:87:e8:31:6d:
bb:2f:e1:a6:92:58:88:2b:00:7e:f7:18:d0:97:f9:
1d:11:b4:f0:d8:1a:df:47:8e:30:b3:e3:3c:ec:52:
e2:d0:ca:b3:7d:af:fe:17:50:4d:d4:6e:55:bc:b2:
fe:68:bc:ad:ec:7c:c4:d0:25:fa:40:b1:91:e2:81:
30:de:df:ea:c7:b3:0c:d4:75:ee:63:68:2b:dc:fa:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C6:8C:75:FF:30:37:FA:0A:AD:42:8A:8D:00:DA:0C:21:B7:9C:B5
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/QcaMdf8wN_oKrUKKjQDaDCG3nLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.155.7.0/24
Signature Algorithm: sha256WithRSAEncryption
09:15:a0:40:b2:9c:21:5a:25:27:a2:20:7e:f0:38:85:4c:30:
96:b3:91:39:03:9c:7d:7a:90:33:a0:ce:e8:ac:84:4d:99:48:
a2:9d:98:b0:f3:7f:76:13:9a:b1:08:ae:1a:11:9a:f4:4b:d7:
4a:f4:d1:82:9c:f2:74:e7:39:db:2d:28:bd:6e:cc:57:0a:f1:
52:ea:c9:c9:cf:c5:48:60:a6:a8:7a:85:42:c6:cc:76:de:0e:
15:63:64:cd:6d:e7:70:72:3d:7e:1c:5d:b3:f8:13:84:11:cf:
e7:bb:e7:ca:9f:f2:5c:fa:2b:a0:14:39:58:07:1d:6c:7d:d9:
4e:fd:26:3b:33:75:0b:ac:3a:65:ab:18:37:5b:8c:b0:08:68:
da:66:4c:df:2b:0d:55:9d:2a:83:6e:fe:9c:a8:ab:15:c1:bf:
a6:bd:8c:89:f1:67:b5:82:cc:d7:90:55:6e:f1:8f:37:09:96:
35:28:89:fb:13:63:b7:46:35:cd:97:77:dc:72:4e:fe:76:f2:
19:76:c6:bc:b4:0b:19:d0:11:60:1a:19:e8:11:f3:04:0c:56:
a5:eb:8c:d5:b2:4d:0c:d2:34:78:6b:9c:11:d9:9c:14:34:82:
33:51:f8:10:f9:34:4d:a9:3d:e9:93:cb:f0:2b:9d:8b:5c:1c:
02:a1:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:26 2025 by rpki-client