Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/SJFANTgwe4hEyH_EtKYCt-bwKco.roa
File: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (raw, json)
Hash identifier: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=
Subject key identifier: 48:91:40:35:38:30:7B:88:44:C8:7F:C4:B4:A6:02:B7:E6:F0:29:CA
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 0194713DDA0E6AABFD29BC092C8F01CE9067
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/SJFANTgwe4hEyH_EtKYCt-bwKco.roa
Signing time: Thu 16 Jan 2025 22:31:06 +0000
ROA not before: Thu 16 Jan 2025 22:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44527
IP address blocks: 31.44.214.0/23 maxlen: 23
31.44.214.0/24 maxlen: 24
31.44.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:71:3d:da:0e:6a:ab:fd:29:bc:09:2c:8f:01:ce:90:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Jan 16 22:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4891403538307b8844c87fc4b4a602b7e6f029ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:00:19:af:71:07:a5:25:b6:94:6a:9c:cb:
4e:5b:cb:14:72:e6:d7:b8:76:26:69:32:c9:1e:01:
82:9f:d8:80:c0:a7:d6:67:fe:c4:49:fc:03:d1:e8:
87:1a:ca:e5:80:1e:d4:cc:c1:e2:33:cc:e0:5e:52:
55:0a:6b:6c:97:b1:47:a7:d3:98:75:79:c5:3c:b0:
61:3b:44:37:68:c2:35:6e:4c:d2:b6:28:62:67:af:
eb:2c:18:d3:8b:c8:eb:a8:5e:c5:e1:be:2e:4a:78:
ce:ae:46:83:bd:35:a6:04:1a:83:78:2d:c9:b8:f2:
55:4b:a8:09:a5:55:9b:f2:10:53:ff:ee:be:0a:4a:
ef:cb:4e:15:5d:72:dc:60:58:62:2f:04:6d:19:6b:
ee:ee:b3:23:66:a8:83:82:a6:14:37:87:c6:7b:bc:
ed:04:0d:24:83:b8:ad:40:15:96:46:ff:66:21:b1:
d6:8e:b7:c2:e9:a8:47:66:95:a6:f2:d2:03:54:e7:
43:49:b4:a7:42:d6:9f:82:b4:37:b6:8d:4f:90:43:
b4:70:56:ed:5a:68:2e:96:43:3b:36:00:7f:ac:37:
f8:10:6e:2e:09:2c:b7:db:5e:09:b2:79:70:2b:70:
55:26:44:6c:37:63:58:91:f1:5b:9d:7c:03:83:ef:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:40:35:38:30:7B:88:44:C8:7F:C4:B4:A6:02:B7:E6:F0:29:CA
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/SJFANTgwe4hEyH_EtKYCt-bwKco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.214.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:16:53:4b:d0:e5:45:17:c8:1c:83:31:7c:84:14:2f:a3:85:
55:59:a4:ac:a2:a4:ec:42:5d:7e:e6:05:5d:07:5d:a6:2f:11:
f0:8f:45:36:93:eb:43:52:bc:ce:55:d1:f0:f7:ac:1d:b2:58:
f4:a3:4a:a0:3a:0c:ee:c2:8e:10:1d:5b:47:98:35:77:f8:12:
20:7f:25:3f:97:d1:16:29:a4:9c:20:86:0d:e2:36:c0:74:f5:
af:8a:22:09:20:67:78:7c:b9:d5:7a:18:0b:f3:a5:b6:52:81:
29:71:a1:02:5c:0e:fa:61:01:d5:b3:ce:da:9f:02:c4:ac:82:
ad:06:24:f6:4f:03:2c:21:bd:2f:9a:39:cc:78:64:61:d0:9e:
0b:95:1e:12:a9:c6:8a:3e:7e:6b:71:5b:c2:1a:fa:01:47:d3:
a7:be:38:7b:d7:c6:26:2c:14:98:98:67:d7:7a:28:76:ec:f9:
38:dc:ef:e0:37:d1:68:64:bb:6b:f8:7e:2a:54:1e:27:b6:df:
54:94:5e:98:87:c8:9f:2d:06:7c:59:12:20:53:47:6a:67:20:
f8:e6:16:56:53:63:30:45:a9:33:aa:c2:c0:c0:25:7b:0a:80:
cb:38:6a:fb:8c:b5:93:57:a1:7f:85:b1:82:a7:93:03:ec:f9:
f5:77:98:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRxPdoOaqv9KbwJLI8BzpBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjUwMTE2MjIzMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODkxNDAzNTM4MzA3Yjg4NDRjODdmYzRiNGE2MDJiN2U2ZjAyOWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rgAGa9xB6UltpRqnMtOW8sUcubX
uHYmaTLJHgGCn9iAwKfWZ/7ESfwD0eiHGsrlgB7UzMHiM8zgXlJVCmtsl7FHp9OY
dXnFPLBhO0Q3aMI1bkzStihiZ6/rLBjTi8jrqF7F4b4uSnjOrkaDvTWmBBqDeC3J
uPJVS6gJpVWb8hBT/+6+Ckrvy04VXXLcYFhiLwRtGWvu7rMjZqiDgqYUN4fGe7zt
BA0kg7itQBWWRv9mIbHWjrfC6ahHZpWm8tIDVOdDSbSnQtafgrQ3to1PkEO0cFbt
WmgulkM7NgB/rDf4EG4uCSy3214JsnlwK3BVJkRsN2NYkfFbnXwDg+9gNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiRQDU4MHuIRMh/xLSmArfm8CnKMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvU0pGQU5UZ3dlNGhFeUhfRXRLWUN0LWJ3S2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyzWMA0G
CSqGSIb3DQEBCwUAA4IBAQDCFlNL0OVFF8gcgzF8hBQvo4VVWaSsoqTsQl1+5gVd
B12mLxHwj0U2k+tDUrzOVdHw96wdslj0o0qgOgzuwo4QHVtHmDV3+BIgfyU/l9EW
KaScIIYN4jbAdPWviiIJIGd4fLnVehgL86W2UoEpcaECXA76YQHVs87anwLErIKt
BiT2TwMsIb0vmjnMeGRh0J4LlR4SqcaKPn5rcVvCGvoBR9Onvjh718YmLBSYmGfX
eih27Pk43O/gN9FoZLtr+H4qVB4ntt9UlF6Yh8ifLQZ8WRIgU0dqZyD45hZWU2Mw
RakzqsLAwCV7CoDLOGr7jLWTV6F/hbGCp5MD7Pn1d5hL
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:32 2025 by rpki-client