Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Hi9hJLSsqdfwwjDafJDvlExJJoI.roa
File: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (raw, json)
Hash identifier: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=
Subject key identifier: 1E:2F:61:24:B4:AC:A9:D7:F0:C2:30:DA:7C:90:EF:94:4C:49:26:82
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01942B8E1453B3DC4EA9189E27583E16418B
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Hi9hJLSsqdfwwjDafJDvlExJJoI.roa
Signing time: Fri 03 Jan 2025 09:45:19 +0000
ROA not before: Fri 03 Jan 2025 09:45:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50551
IP address blocks: 185.48.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:8e:14:53:b3:dc:4e:a9:18:9e:27:58:3e:16:41:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jan 3 09:45:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e2f6124b4aca9d7f0c230da7c90ef944c492682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:74:fd:87:00:ae:8d:fe:63:21:c0:c4:89:
6b:19:33:48:0b:1a:cf:5c:11:f9:b0:5b:99:ea:9d:
c1:64:93:db:45:63:7d:3e:fd:2c:fd:7d:35:79:ab:
d8:6b:f3:04:bb:b2:f8:2b:84:3c:b5:80:26:61:90:
56:1f:df:5d:f0:ac:c0:2e:8d:8a:af:a6:f3:6b:da:
8e:5d:8f:19:32:36:d8:7f:2f:41:dc:e4:e9:8e:e4:
00:34:c0:83:a5:bf:6b:3a:a0:c1:f5:ed:54:48:c9:
31:ab:d8:19:ba:8c:78:8d:c3:c2:96:19:c8:90:11:
6b:de:99:6f:de:5a:3a:92:5c:f3:4b:ec:de:51:5a:
4a:33:cf:0e:c6:fc:f4:50:e4:5f:cb:f0:3a:66:01:
b5:92:f8:29:57:b6:00:6f:6d:31:c3:cb:30:15:87:
2e:d5:d2:4c:0f:ea:95:b2:51:8c:7a:76:36:3d:44:
31:ad:f9:bb:66:c0:32:eb:9c:b2:0c:f1:9e:82:19:
09:17:b5:90:5d:de:71:4d:61:2a:9b:84:bf:23:78:
d3:65:f8:6e:5f:d8:78:d0:9e:91:e1:98:be:d9:fe:
18:86:70:7a:bd:da:6d:2b:a3:ef:1b:ba:6e:7c:19:
c5:3b:f1:96:f2:81:df:a9:83:03:0b:f0:89:37:8f:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2F:61:24:B4:AC:A9:D7:F0:C2:30:DA:7C:90:EF:94:4C:49:26:82
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Hi9hJLSsqdfwwjDafJDvlExJJoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:09:c1:58:ff:48:bf:60:2e:29:62:2e:85:44:19:f0:fb:dd:
0c:a9:cb:54:55:2c:ea:55:1e:bd:2d:fa:1c:e2:95:8a:66:9e:
67:ab:85:6b:5a:53:7e:6b:c8:30:cb:f5:9a:f0:99:6a:88:e9:
76:d2:d2:fd:17:ad:cf:d1:20:82:03:b7:09:f0:b3:e0:20:49:
35:4f:a6:dc:d6:c2:d9:b3:85:1c:97:dd:a8:1e:11:01:6e:07:
8f:64:d5:78:9e:21:57:64:f1:e9:2e:10:cf:ca:91:f8:e4:47:
53:00:c1:ea:dd:5c:dc:c3:a9:ad:99:a1:28:b5:86:56:20:b4:
bf:1a:e9:00:92:84:33:16:ec:29:48:6d:21:9a:01:9f:0a:a8:
75:2d:8d:cf:85:1b:bb:7a:39:76:91:2a:06:ef:3a:70:d7:16:
e6:e2:5b:b0:c7:03:1e:a8:89:10:e0:49:1d:0c:2e:24:50:e3:
73:c8:2d:b6:80:92:28:a1:75:be:2c:ef:30:03:14:3d:3b:58:
40:b8:16:a8:aa:02:92:eb:9f:70:62:50:b6:f7:77:3a:b7:89:
d4:af:b0:af:94:cf:dc:33:64:a1:94:18:75:dc:bd:37:6b:78:
15:50:af:13:93:4d:a8:97:f3:ce:b0:96:a6:ad:95:e3:a5:50:
b6:49:6e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:25:58 2025 by rpki-client