Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yQfvtfdFSSSw3quMEkYj63RUn1g.roa
File: yQfvtfdFSSSw3quMEkYj63RUn1g.roa (raw, json)
Hash identifier: J5l/e/uFVPMHPZEDqJZ2/BlkK9bMRUWdU4/ruBYq9lI=
Subject key identifier: C9:07:EF:B5:F7:45:49:24:B0:DE:AB:8C:12:46:23:EB:74:54:9F:58
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019421440E84D03884680B311FE538C767E5
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yQfvtfdFSSSw3quMEkYj63RUn1g.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 31.40.201.0/24 maxlen: 24
195.216.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:84:d0:38:84:68:0b:31:1f:e5:38:c7:67:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c907efb5f7454924b0deab8c124623eb74549f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:05:7a:ac:bc:21:b8:6f:a3:c2:2b:4f:5b:
bb:28:b1:f1:12:82:d6:a7:87:31:fe:13:0a:a1:1c:
76:94:87:6e:7e:83:6a:06:8d:de:97:bb:4a:47:bd:
5f:2b:6a:95:f1:61:87:20:0a:ad:31:73:5d:69:94:
90:b8:f7:8a:03:d4:f5:e7:3b:d2:75:0c:b3:fc:ca:
db:f7:67:da:59:5b:d8:c0:b4:be:5f:9b:fc:64:e4:
a4:30:8f:c8:ef:03:4e:ee:c2:d3:a0:56:b6:e2:94:
e2:10:d6:bd:e9:86:eb:bb:19:80:1a:cc:11:30:fb:
b3:2b:23:a7:a1:49:27:c9:ec:13:6c:29:e1:71:42:
83:61:e9:02:40:67:b2:52:8a:e0:df:dc:f1:57:0b:
e4:8a:be:c4:b2:a2:a9:bf:2d:82:41:22:ba:ec:ea:
de:41:e6:4c:a9:5a:60:10:35:64:fe:5e:1f:ec:27:
16:a3:97:54:1e:5b:40:7f:e6:4b:79:47:b2:32:ab:
3d:b0:f3:12:61:c2:12:16:5d:f6:36:32:50:6f:e3:
d2:7f:98:b2:06:d7:04:3d:0c:6d:a8:62:04:07:08:
5c:46:62:eb:23:94:d9:01:5d:0c:69:d0:72:76:3a:
ba:64:ca:09:3d:3e:de:6d:d5:04:20:17:6b:e5:21:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:EF:B5:F7:45:49:24:B0:DE:AB:8C:12:46:23:EB:74:54:9F:58
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yQfvtfdFSSSw3quMEkYj63RUn1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.201.0/24
195.216.154.0/24
Signature Algorithm: sha256WithRSAEncryption
28:62:77:f6:e8:65:58:80:36:06:3e:53:79:e3:fa:b1:fe:0c:
d0:c1:bb:75:a7:8b:19:36:db:29:03:1c:d5:07:b9:8c:cd:8a:
2c:8d:53:d2:2c:79:01:b1:fc:8d:92:c1:cd:56:96:9d:97:ba:
69:11:dc:b2:ec:e5:55:2e:dd:30:54:ff:18:75:15:48:e3:e9:
ad:8c:b5:a1:07:67:af:a4:f8:b8:4b:cf:92:f8:67:d7:5f:7c:
cf:60:d4:c9:f5:a0:55:35:bc:d0:1c:79:26:46:7e:ba:a5:04:
98:a2:17:2e:02:21:46:4a:8a:de:e5:3c:43:a7:b4:54:cc:4a:
4d:02:68:69:7b:bd:b2:93:69:ea:cc:a0:55:95:c7:9d:f2:7b:
94:41:76:61:50:53:16:f1:4c:aa:c1:0a:2b:75:f6:c7:d6:cd:
1d:3e:6c:b6:0c:bd:a8:d0:b3:98:f8:72:0e:5f:bb:cf:83:87:
32:55:a4:fc:fe:35:4a:ff:52:08:30:0e:09:78:81:b5:f7:d0:
79:f2:cf:d3:18:b7:66:c7:e6:13:91:ab:9a:cd:32:54:c1:ce:
ad:56:9a:29:46:89:56:01:1f:94:0c:30:1f:bc:ee:24:96:9c:
bd:f1:97:22:09:e0:44:20:3c:fe:42:1f:19:5d:66:a3:9b:98:
40:47:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:07 2025 by rpki-client