Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa
File: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (raw, json)
Hash identifier: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=
Subject key identifier: 0A:3D:2E:63:F8:E8:11:41:00:7C:6B:62:65:F7:B7:64:BD:0F:A1:6D
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 0194258FBD4CE60887C82A4D5CBCEFD5449C
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21110
IP address blocks: 31.222.55.0/24 maxlen: 24
31.222.56.0/24 maxlen: 24
31.222.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:4c:e6:08:87:c8:2a:4d:5c:bc:ef:d5:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a3d2e63f8e81141007c6b6265f7b764bd0fa16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:b5:5f:0b:34:11:e2:49:30:15:1d:69:88:
86:24:bd:01:f5:40:d7:6b:ea:5d:2b:29:30:9c:4c:
6e:dd:8e:6f:55:b8:ff:79:cb:1e:75:a4:8a:9e:ea:
53:ec:28:25:81:a9:1e:20:1e:45:ec:50:f0:74:5e:
c8:98:12:a7:5b:7f:74:e2:62:1e:3b:49:01:8c:ce:
fa:7a:6c:05:cd:99:88:2e:43:15:4c:c4:58:bd:f0:
b3:94:c5:e1:38:54:0d:ab:2a:b6:1a:02:7f:c8:bc:
77:ee:d7:e4:d8:87:80:1e:a0:ee:17:80:a1:b4:d6:
85:36:ee:7b:ee:f4:9e:16:c6:b4:cd:98:32:5b:af:
28:99:ca:68:55:6d:da:62:42:a6:85:1a:fc:71:96:
a4:3a:53:ec:33:46:90:c8:81:86:f1:4b:d9:27:2d:
51:ee:ca:27:84:fc:63:cb:08:10:c2:61:ac:77:65:
96:ef:5a:5b:98:d4:31:b0:14:e3:cf:77:83:30:09:
b9:91:0d:14:26:76:52:68:c2:dd:00:b5:0c:81:c7:
9c:bb:af:6c:a6:b3:99:b1:39:c3:f6:41:b2:a6:cf:
9d:f1:08:64:72:63:03:c3:f5:de:f5:f8:d2:39:1a:
55:20:a2:ed:1d:90:5e:b1:9b:a8:52:0b:2f:d4:e8:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3D:2E:63:F8:E8:11:41:00:7C:6B:62:65:F7:B7:64:BD:0F:A1:6D
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.55.0-31.222.57.255
Signature Algorithm: sha256WithRSAEncryption
58:cb:d8:a6:16:24:89:c0:fa:b2:22:ba:88:20:f4:28:20:52:
7c:f8:b2:01:38:29:df:d2:c0:b2:cd:8c:63:be:c4:1b:a3:e6:
a6:4a:ef:da:8b:38:a1:29:d3:3c:e9:42:20:0d:3c:a0:c1:d3:
16:90:9e:4b:39:da:99:0f:ce:79:77:20:a4:8e:4a:27:94:a0:
ed:0f:37:37:0b:ce:b9:cb:3e:8a:14:43:d4:f3:c7:9a:16:63:
95:bf:12:22:e3:e5:a6:cc:3e:a8:58:d4:ff:d8:e0:ec:de:80:
2f:1f:46:48:9d:7c:48:84:5e:fe:df:59:e2:78:3a:2c:f7:2b:
f2:9e:5b:dc:75:df:c8:46:b5:6a:78:b4:b3:07:2a:34:a1:d5:
47:b1:f2:f4:b3:cb:c8:9e:fc:03:8c:f4:a5:29:c1:93:60:29:
79:36:29:44:de:ec:3f:29:6f:2d:41:ec:f7:ad:21:fe:bb:78:
b0:e1:22:f6:b6:06:cc:51:52:9e:8c:25:aa:62:e4:6a:27:28:
2e:be:45:5c:10:5d:90:81:92:7b:18:6f:e0:4d:e8:29:82:26:
52:03:5e:88:0e:86:e8:af:b3:c0:8a:ad:a1:69:12:50:6b:40:
6a:9a:77:38:51:89:7e:45:58:c1:cc:fc:0a:6a:29:c9:be:08:
e9:6c:11:15
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQlj71M5giHyCpNXLzv1UScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4
Y2NkNjcwHhcNMjUwMTAyMDU0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTNkMmU2M2Y4ZTgxMTQxMDA3YzZiNjI2NWY3Yjc2NGJkMGZhMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A21Xws0EeJJMBUdaYiGJL0B9UDX
a+pdKykwnExu3Y5vVbj/ecsedaSKnupT7CglgakeIB5F7FDwdF7ImBKnW3904mIe
O0kBjM76emwFzZmILkMVTMRYvfCzlMXhOFQNqyq2GgJ/yLx37tfk2IeAHqDuF4Ch
tNaFNu577vSeFsa0zZgyW68omcpoVW3aYkKmhRr8cZakOlPsM0aQyIGG8UvZJy1R
7sonhPxjywgQwmGsd2WW71pbmNQxsBTjz3eDMAm5kQ0UJnZSaMLdALUMgcecu69s
prOZsTnD9kGyps+d8QhkcmMDw/Xe9fjSORpVIKLtHZBesZuoUgsv1OivxwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAo9LmP46BFBAHxrYmX3t2S9D6FtMB8GA1UdIwQY
MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt
MTA5NTlhYWE4YjNlLzEvQ2owdVlfam9FVUVBZkd0aVpmZTNaTDBQb1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl
LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAf3jcD
BAEf3jgwDQYJKoZIhvcNAQELBQADggEBAFjL2KYWJInA+rIiuogg9CggUnz4sgE4
Kd/SwLLNjGO+xBuj5qZK79qLOKEp0zzpQiANPKDB0xaQnks52pkPznl3IKSOSieU
oO0PNzcLzrnLPooUQ9Tzx5oWY5W/EiLj5abMPqhY1P/Y4OzegC8fRkidfEiEXv7f
WeJ4Oiz3K/KeW9x138hGtWp4tLMHKjSh1Uex8vSzy8ie/AOM9KUpwZNgKXk2KUTe
7D8pby1B7PetIf67eLDhIva2BsxRUp6MJapi5GonKC6+RVwQXZCBknsYb+BN6CmC
JlIDXogOhuivs8CKraFpElBrQGqadzhRiX5FWMHM/ApqKcm+COlsERU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:50:18 2025 by rpki-client