Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/j5nYf12qE5CfbgsAVy8qNXHXbNM.roa
File: j5nYf12qE5CfbgsAVy8qNXHXbNM.roa (raw, json)
Hash identifier: HTjM3or3TJ0Q74+ID5aPefChtbKzUVgijSm8ozVS3uU=
Subject key identifier: 8F:99:D8:7F:5D:AA:13:90:9F:6E:0B:00:57:2F:2A:35:71:D7:6C:D3
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01942522302674F6DE35793A7ED8437357D3
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/j5nYf12qE5CfbgsAVy8qNXHXbNM.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50606
IP address blocks: 31.6.247.0/24 maxlen: 24
91.218.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:30:26:74:f6:de:35:79:3a:7e:d8:43:73:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f99d87f5daa13909f6e0b00572f2a3571d76cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:98:fe:24:2a:6e:d9:d9:ac:d5:bc:d4:50:
1e:64:7b:51:bb:aa:90:5e:34:9c:ae:11:66:78:5f:
e1:af:92:22:17:e7:7c:13:3b:5d:c1:80:16:8f:df:
f1:b8:75:c1:fd:12:93:21:d6:87:64:ea:4c:67:0e:
18:df:22:bc:bb:61:aa:f1:1d:f8:a7:80:12:fa:21:
da:9d:7e:0e:c2:68:75:54:2b:e6:5c:6a:10:af:bf:
5d:1f:5e:fe:fc:05:7d:d8:35:21:3a:7b:22:22:62:
6d:10:b6:35:42:a4:8c:03:c3:07:e6:01:99:a9:30:
fb:43:08:82:d6:9a:41:14:a5:b4:68:15:9d:4d:24:
7a:e0:1c:05:82:c0:aa:82:3f:2d:5d:e0:04:10:45:
2c:6d:49:40:58:4a:9d:1d:3e:fe:de:0b:ef:7c:b5:
98:77:87:2c:dd:99:6c:d7:ea:d1:74:61:66:9e:a4:
f6:2f:67:da:bf:21:08:97:05:ad:4a:09:73:c0:9d:
3f:4c:f6:c0:a9:3c:b1:5a:74:5d:2b:0a:71:41:79:
6a:05:b8:22:fd:ef:8e:cb:20:24:53:0e:d2:c5:91:
c9:27:01:77:ec:93:1e:58:46:94:9c:f6:b6:17:90:
5c:ac:ba:b2:2d:e0:53:e3:5a:ff:a7:85:76:3a:e8:
09:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:D8:7F:5D:AA:13:90:9F:6E:0B:00:57:2F:2A:35:71:D7:6C:D3
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/j5nYf12qE5CfbgsAVy8qNXHXbNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.247.0/24
91.218.242.0/23
Signature Algorithm: sha256WithRSAEncryption
64:a3:14:81:e7:af:29:65:24:0a:7b:e5:8a:8a:d5:c6:d5:d7:
24:e3:0a:34:e7:b4:13:88:b3:78:cc:92:0f:6d:57:ec:42:ad:
ff:a7:5e:00:7f:4e:a4:24:ee:17:bc:d1:ee:2d:1f:8d:b1:33:
8e:e0:86:51:69:7a:ee:c6:17:f9:b7:a0:62:33:0a:99:78:22:
d6:5c:56:dc:42:d2:9f:8a:ab:3b:3b:14:42:68:ab:0c:bd:e9:
26:a2:50:9b:90:38:40:4c:5b:86:42:7a:d2:7d:37:cd:ef:f3:
bd:53:26:54:88:26:01:9e:d2:42:bc:e3:c0:d9:2d:ba:6c:84:
75:01:4f:98:77:ef:3c:24:06:50:b3:83:16:f1:f9:69:f4:43:
d2:a0:d0:d4:3b:77:b4:7e:4f:fe:b5:79:b4:aa:01:83:da:75:
bf:25:18:f4:fb:b3:eb:c6:3c:e9:9e:9e:ea:36:fe:e5:2d:03:
11:6b:6a:f6:30:99:25:85:c9:7a:1d:dc:eb:3b:fe:81:09:6b:
eb:cb:0c:f9:a5:4e:e7:00:cd:d4:c0:0e:1d:db:3a:55:14:2a:
bf:36:26:52:29:b2:dc:87:8e:df:57:c8:57:1f:77:7d:06:05:
32:f4:25:05:c0:b8:3e:0c:c6:2d:f2:14:42:5c:63:9c:47:aa:
33:99:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:46 2025 by rpki-client