Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/SeVKeWDlifWewWLGV-ux3X3eP-U.roa
File: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (raw, json)
Hash identifier: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=
Subject key identifier: 49:E5:4A:79:60:E5:89:F5:9E:C1:62:C6:57:EB:B1:DD:7D:DE:3F:E5
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019425222F5C7DD719A5E0BBC546F6D7CFE9
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/SeVKeWDlifWewWLGV-ux3X3eP-U.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44643
IP address blocks: 31.6.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2f:5c:7d:d7:19:a5:e0:bb:c5:46:f6:d7:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e54a7960e589f59ec162c657ebb1dd7dde3fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5c:f6:88:a6:3a:55:a3:2c:90:0e:c5:04:9c:
ae:4b:4f:45:70:5e:47:56:3a:00:fc:85:68:94:67:
66:ab:11:f8:2f:16:96:dd:52:38:d3:5b:b9:cb:24:
14:fc:b1:da:db:a1:4c:12:02:35:4c:27:ee:19:bf:
c3:59:03:21:b1:85:34:b0:16:dd:4f:cd:54:c1:d3:
68:80:f6:d3:ba:38:1b:a7:50:87:ef:05:2f:a1:34:
79:1b:4b:a5:63:56:75:f6:c0:8b:5b:c7:9a:1e:01:
5a:01:7c:9a:d7:2c:8d:8e:78:23:36:3e:a3:39:b8:
7e:86:b8:99:48:69:e0:11:1b:2f:d6:ff:f1:4d:1a:
c1:04:48:86:19:51:af:6a:9b:74:47:ca:f6:35:b7:
34:da:eb:2f:86:6b:0c:70:27:e8:41:02:ab:54:88:
99:81:50:16:57:78:ca:a0:df:93:a3:56:3e:fb:c7:
ae:2a:01:aa:d9:b2:ed:5b:fd:24:40:cf:bc:e0:2f:
ec:90:b4:bf:6b:d6:84:7d:a1:5b:40:94:d1:e2:19:
61:e4:3d:92:6d:4f:80:41:f9:99:3f:fe:a0:e0:b1:
7d:cf:f1:d1:79:9a:4c:9c:f1:38:b0:ab:68:bb:b3:
bd:2d:39:8a:2f:24:69:5d:4c:12:ad:24:a2:57:b2:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:4A:79:60:E5:89:F5:9E:C1:62:C6:57:EB:B1:DD:7D:DE:3F:E5
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/SeVKeWDlifWewWLGV-ux3X3eP-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.248.0/22
Signature Algorithm: sha256WithRSAEncryption
13:3b:9c:ac:3b:74:fd:d4:3b:9d:7d:fc:19:14:5e:ee:d1:ec:
63:64:d4:50:d1:75:13:41:00:0b:63:8e:8e:34:23:d6:6e:e1:
51:3c:0a:6f:a6:0e:a6:8e:6f:0a:b6:a4:50:7c:18:2a:ef:c1:
09:60:87:3e:33:aa:8c:c5:f9:72:22:ac:62:d2:c3:e1:3b:bf:
e0:f1:b1:0e:85:3e:fc:54:0c:18:4d:c0:48:bf:5e:94:a4:b9:
5d:8d:13:0a:01:af:cf:60:fa:d4:ee:6c:34:67:ac:3e:de:18:
89:61:fd:4b:09:2e:81:4d:d2:2d:40:28:26:16:16:95:eb:ef:
7c:58:8b:11:1b:e7:87:b6:e9:85:38:6a:fe:8f:e1:05:8f:56:
79:36:40:d0:5c:f7:22:f0:a0:bb:7e:2b:88:5a:0a:67:6e:c7:
2d:7c:9f:2d:6a:08:40:47:d5:e7:42:71:6c:a7:74:f2:01:8a:
88:66:a3:19:a5:68:6e:b4:46:da:33:6e:8a:b5:f8:53:ef:77:
37:29:ec:c0:c4:12:24:50:20:75:a8:82:32:7f:bc:b4:2b:1f:
a1:71:73:bc:96:35:ba:f5:4a:37:a6:23:54:fb:44:ad:68:48:
8a:e0:2a:91:1f:90:5e:86:cd:3a:2d:97:91:3d:ab:75:1a:19:
e6:1d:ce:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:19 2025 by rpki-client