Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cRx5X6IhRT4TGGyntem5wN-e6hw.roa
File: cRx5X6IhRT4TGGyntem5wN-e6hw.roa (raw, json)
Hash identifier: yPAxnOnpXhe7f+3HKZRzpk/rpOcCsLAbvqxnozbBZBg=
Subject key identifier: 71:1C:79:5F:A2:21:45:3E:13:18:6C:A7:B5:E9:B9:C0:DF:9E:EA:1C
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B577BCEC23661596FC19753B52806C
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cRx5X6IhRT4TGGyntem5wN-e6hw.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41612
IP address blocks: 94.31.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:77:bc:ec:23:66:15:96:fc:19:75:3b:52:80:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=711c795fa221453e13186ca7b5e9b9c0df9eea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:30:b8:ff:6c:6d:c9:49:f4:23:a5:57:3e:4d:
8c:d8:3d:7f:8b:fc:e4:de:0f:40:9c:ae:c2:00:14:
02:94:e4:09:95:0b:de:7b:4f:a7:9a:68:94:f3:cd:
47:56:aa:cb:bf:6c:48:ad:4c:4b:8c:78:4a:0a:af:
57:6f:0a:24:08:43:7e:e1:3b:9f:03:b3:13:e2:f2:
44:41:47:4f:50:49:0c:e9:ff:3f:7d:26:52:4e:68:
be:27:5e:be:65:d3:99:7e:d1:4e:fa:2f:25:71:54:
8f:2d:78:44:95:8f:0a:26:c8:a8:df:74:1e:28:2c:
20:b0:97:38:1f:5e:60:fa:39:dd:94:6f:25:04:29:
92:f9:b4:0b:20:ed:31:67:32:fd:8f:ce:13:44:f5:
37:01:e0:f1:e6:16:c2:8f:a2:c7:be:ad:0c:af:95:
a6:df:3a:f6:bd:27:b0:0b:ea:11:e3:b4:64:66:e2:
de:b5:a6:4a:85:0f:0c:aa:e2:98:f7:bc:10:69:e3:
69:c4:89:e4:15:5b:89:59:f6:ca:e8:a7:5e:62:a4:
ff:93:da:ba:95:d5:e2:80:f4:4a:e8:85:0d:0f:02:
95:43:8d:82:6c:f4:2c:01:6d:e2:95:6b:d0:5a:54:
b2:79:55:fb:26:71:0b:d0:81:40:c0:a7:d8:1f:0f:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:79:5F:A2:21:45:3E:13:18:6C:A7:B5:E9:B9:C0:DF:9E:EA:1C
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cRx5X6IhRT4TGGyntem5wN-e6hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:02:d7:26:ce:b5:6f:51:9c:cc:9f:a8:c7:a2:cb:18:29:64:
b7:a9:40:0e:82:b6:44:2d:f9:5d:59:92:74:15:15:43:5b:89:
c9:33:09:2f:06:4e:28:6e:ee:77:b1:7c:38:62:6e:5c:45:45:
1d:9d:e0:1f:63:66:15:02:5b:36:17:69:12:45:06:cf:b2:47:
2b:1e:2c:62:55:c2:05:22:3d:c4:81:84:4f:de:fd:d4:a5:e2:
7e:9e:de:fb:0d:52:c9:a2:f6:6e:00:c9:ee:55:d8:d6:df:e8:
f3:42:d2:fe:cc:24:10:e2:4c:2f:f5:d0:37:9e:b0:04:75:88:
1d:c7:44:cb:bc:9f:7f:4d:05:43:62:86:90:fe:58:e2:57:40:
42:f0:5f:4b:b2:fe:e7:db:fb:9b:a4:e8:0d:3f:44:a0:71:73:
b6:1e:ad:7b:a3:17:8d:b2:12:aa:73:19:95:2b:fe:29:c0:6f:
23:35:db:94:75:5a:16:8c:fb:17:cb:e5:10:d2:2a:a3:e8:f6:
c2:88:4c:c2:f9:56:b3:f2:fc:e4:f5:38:2b:3c:1b:ba:b1:80:
1c:00:09:aa:89:94:65:2c:b0:3c:90:47:d2:ec:12:31:60:3d:
22:6c:85:aa:dc:ae:c5:2f:ba:29:4c:6b:dd:e0:1b:e8:23:30:
7a:f8:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:12 2025 by rpki-client