Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/06rc37d4ySiHH7U_G0pZ2A8ZWso.roa
File: 06rc37d4ySiHH7U_G0pZ2A8ZWso.roa (raw, json)
Hash identifier: y488XmHmKUr06Gkib6kZv84Q3w6h48Qpmjga5mYEARE=
Subject key identifier: D3:AA:DC:DF:B7:78:C9:28:87:1F:B5:3F:1B:4A:59:D8:0F:19:5A:CA
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA15A7237D69EB33B3BC5AEB46156E
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/06rc37d4ySiHH7U_G0pZ2A8ZWso.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57679
IP address blocks: 31.40.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:15:a7:23:7d:69:eb:33:b3:bc:5a:eb:46:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3aadcdfb778c928871fb53f1b4a59d80f195aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4a:8b:f6:e0:3b:f1:7c:66:ef:30:3e:df:97:
30:53:bd:a1:0c:df:f7:8b:99:35:f6:80:a9:4f:e4:
da:0e:24:3a:5a:01:67:0b:70:ee:f2:60:6e:39:e4:
b6:f5:bc:77:fb:5a:fd:5b:34:18:57:07:98:89:c2:
56:a6:a0:67:66:ba:25:bd:2d:f2:8e:22:66:01:f1:
0e:af:c6:9a:c6:44:fc:bb:fd:24:1d:6d:d3:ec:11:
42:01:f2:5c:f6:51:6e:e4:8f:2e:0b:f3:d4:02:bb:
20:45:9b:aa:4d:5b:3d:21:83:d2:c8:f4:4d:d5:c4:
4f:71:c3:fb:f2:a3:94:c4:b9:c6:e9:17:ae:e9:2e:
02:17:c2:88:02:e9:80:33:60:25:1f:7f:a8:da:41:
58:d1:cc:73:c4:dc:d7:8a:57:0d:7e:09:a5:2e:b7:
a5:61:62:10:47:72:0c:72:02:2b:7f:c4:37:12:74:
da:b0:af:61:7f:d9:83:92:79:14:42:cf:67:49:15:
8e:8b:d1:64:34:1c:58:29:51:e6:ad:4a:94:d1:58:
46:ef:78:a1:c0:23:30:3e:31:6e:cb:33:9d:8c:f8:
ed:81:b3:6c:87:39:06:98:50:5b:8c:14:da:9d:66:
0a:94:d8:12:35:cb:9b:7e:bc:c3:f1:f9:e5:e3:53:
89:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AA:DC:DF:B7:78:C9:28:87:1F:B5:3F:1B:4A:59:D8:0F:19:5A:CA
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/06rc37d4ySiHH7U_G0pZ2A8ZWso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.159.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:d2:db:38:87:a7:e6:d5:95:97:fe:94:b0:e9:f5:63:74:8c:
0b:0b:08:41:29:95:34:98:2e:02:49:88:b2:79:94:31:eb:35:
3b:28:e3:9a:85:5b:f9:84:25:87:0e:eb:07:e5:d2:15:7d:00:
38:ea:af:2c:84:d1:64:3f:1d:cd:34:08:fc:27:69:e4:89:f8:
42:bc:47:ee:f8:3b:88:0a:74:ec:0a:46:d3:e7:8e:c3:68:60:
fe:3b:12:b5:5b:00:23:9f:ff:8f:f9:94:c0:f2:18:f8:41:15:
2d:cf:fc:24:4b:b1:24:1d:54:0a:4e:7d:de:e4:6d:a7:25:9f:
0f:29:b1:f5:71:9d:3c:83:50:d8:79:bf:c5:1b:0c:d9:5f:58:
57:6f:2b:fe:db:d2:bb:1e:e8:51:39:54:a6:d2:d0:74:01:94:
25:7c:24:80:39:4d:c5:a0:d3:a4:b4:23:d5:9c:d1:d9:26:43:
c8:67:03:40:0f:15:5a:db:6d:5b:79:99:de:95:ce:d7:df:4b:
40:2b:5e:d9:87:97:ba:55:89:5f:26:96:86:06:f8:0a:68:18:
25:28:00:f1:3d:51:31:5f:ee:7b:cc:e9:d0:49:30:d3:67:c3:
0a:da:06:6c:ef:ec:52:ba:60:83:a6:40:e0:80:61:e9:6a:cc:
68:f7:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:10:07 2025 by rpki-client