Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa
File: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (raw, json)
Hash identifier: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=
Subject key identifier: 43:47:B6:9D:9C:16:4E:04:8E:9C:DD:D7:62:BA:3F:C8:2D:C0:AA:A6
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 0194221F82FECF28F5E451D527559FC12DDF
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197506
IP address blocks: 31.44.16.0/20 maxlen: 24
45.144.100.0/22 maxlen: 24
2a00:d400::/32 maxlen: 54
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:82:fe:cf:28:f5:e4:51:d5:27:55:9f:c1:2d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4347b69d9c164e048e9cddd762ba3fc82dc0aaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:aa:e7:2b:03:d4:90:57:d7:4d:05:a0:2d:
d6:2f:1a:28:f3:a1:65:8b:a3:a1:3c:59:90:22:da:
19:97:00:28:35:54:ce:42:3e:31:fa:1e:fa:b3:16:
dd:cc:c7:2b:b1:6f:5d:a2:da:8c:57:70:85:f4:fc:
9a:dd:21:79:ae:7f:fa:be:9b:f7:a4:4e:2e:6c:2f:
7b:83:f9:06:b7:66:5e:64:49:37:d2:1e:a0:66:7d:
29:cf:f0:d4:f2:ac:03:9b:8e:1f:6f:8d:94:39:2d:
de:f0:d8:ad:51:b5:ab:02:4f:e8:be:f0:2b:bf:0c:
a7:b6:4b:d7:ec:df:01:91:49:86:cb:1d:03:68:70:
13:48:4e:83:6f:25:d9:14:e4:d0:f4:43:ee:64:5a:
95:d5:d0:25:ec:3f:94:76:3c:a9:72:9d:ad:cb:98:
d2:c4:c2:4f:d0:fd:59:be:97:5e:ac:fc:20:cf:fa:
22:8d:e8:b9:ce:39:3b:3c:0c:55:c0:eb:7b:32:8a:
c3:bf:92:48:da:d6:79:c0:2f:c2:34:58:dc:f0:8c:
92:05:2e:aa:a9:5e:90:74:38:c5:5c:66:79:75:df:
9e:78:16:06:71:6d:71:f1:57:47:ea:c1:a8:f0:3d:
3b:9e:1b:11:75:44:6a:84:28:9d:32:87:c4:48:f7:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:B6:9D:9C:16:4E:04:8E:9C:DD:D7:62:BA:3F:C8:2D:C0:AA:A6
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.16.0/20
45.144.100.0/22
IPv6:
2a00:d400::/32
Signature Algorithm: sha256WithRSAEncryption
65:a5:7c:d3:43:40:a0:2b:2e:55:c8:e3:c1:55:01:6a:4a:61:
a2:2d:84:89:35:af:c9:28:df:8c:15:be:fa:48:1e:f7:d0:73:
2d:8f:3f:c4:c1:3b:02:c5:24:e1:73:36:28:53:5f:00:c9:a2:
f5:21:f9:37:5c:ab:10:dc:d6:c0:2b:ac:62:9c:81:3f:8f:30:
47:f3:c8:fc:ab:49:a6:51:07:61:db:26:20:cb:ec:fa:b9:13:
3d:15:f6:7b:67:56:f1:13:7a:18:bc:e6:ec:78:d0:49:18:16:
36:70:e6:ca:8e:4c:37:31:79:a7:18:f9:5b:16:41:7f:85:8b:
81:56:4a:88:13:87:4b:3e:a7:36:da:05:5b:80:02:99:e5:4d:
17:d8:dc:0f:d7:ea:81:cd:d8:ec:87:d3:49:ac:fb:18:8c:e3:
a6:35:f8:73:24:48:33:2c:56:bb:fc:46:26:ca:a9:65:24:95:
45:e1:af:72:c0:a5:41:e4:84:c6:21:f2:c2:7d:a8:0a:f4:3d:
2b:ff:04:56:1e:43:d3:89:95:87:e3:1a:ab:2d:9b:e1:53:05:
de:12:a7:7e:3b:e9:f8:70:bf:1f:18:a0:3f:ff:4d:ac:c9:d3:
3c:6b:7e:82:e1:3d:a5:70:99:36:e5:36:d6:5b:2d:7a:81:d0:
d6:d6:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:01 2025 by rpki-client