Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa
File: Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa (raw, json)
Hash identifier: wIpRRei7PG3Jt4hc0d1ub13vmuztDQLCyD4oxK8b+CQ=
Subject key identifier: 46:0A:3D:69:73:A5:2C:4D:D3:3C:C1:8B:01:2B:76:BB:14:0D:AA:80
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA1A03AE7CBC4F4E4B3319B4A97AD7
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211867
IP address blocks: 31.40.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1a:03:ae:7c:bc:4f:4e:4b:33:19:b4:a9:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=460a3d6973a52c4dd33cc18b012b76bb140daa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:98:dd:0d:a0:db:73:4b:dc:97:c5:01:88:
dc:88:d0:ca:d4:39:a8:f1:89:24:bb:e6:c9:69:2b:
89:8c:80:ba:01:06:50:d9:6b:b8:d8:29:70:06:a3:
b3:59:5e:e0:2b:91:c2:1a:14:01:13:1a:20:15:84:
5c:92:65:0f:18:9a:58:be:7f:15:45:38:22:02:84:
0e:16:ac:5c:2e:5a:0c:b0:f8:a4:43:8c:bd:a4:73:
16:74:8c:79:aa:2b:14:72:76:97:9f:d7:ab:26:23:
6f:8a:a6:c5:22:a1:af:a6:b3:42:6c:c2:45:54:ad:
51:fc:88:14:b7:26:56:2a:e7:ef:26:fa:bd:3a:7f:
66:d6:e5:aa:5d:c6:15:87:b4:3b:8f:ac:95:5c:12:
57:c7:e7:1d:20:10:e3:e8:00:48:08:3d:b3:a4:a5:
62:17:a6:15:43:3a:a0:77:e9:fb:19:23:5d:c6:7c:
11:86:72:98:4e:5a:0f:96:e8:9d:a0:d3:95:a1:42:
6e:b3:41:c5:25:bc:20:07:1b:62:09:20:7a:40:ce:
95:67:74:ef:da:61:e5:2b:83:56:e7:be:41:33:4b:
87:28:37:f3:8c:d4:bb:fb:18:be:6a:05:9a:e4:f3:
27:92:75:fb:6b:27:5c:dd:a8:91:ff:e6:09:69:49:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:3D:69:73:A5:2C:4D:D3:3C:C1:8B:01:2B:76:BB:14:0D:AA:80
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Rgo9aXOlLE3TPMGLASt2uxQNqoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.142.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cd:5f:8a:c2:b8:fc:51:d4:b1:bc:23:8d:d2:38:96:35:74:
7f:06:87:f1:e1:3f:ab:aa:a4:e4:7c:bb:72:54:b5:30:de:e0:
0f:0e:0b:ec:ca:79:60:c9:fc:c6:7c:0d:92:79:ee:e0:5d:eb:
d5:6c:15:55:6f:fb:21:88:6c:ec:b3:5c:0f:d1:7a:0c:a6:c7:
6a:b1:c6:fa:45:b9:3a:b4:34:bd:3f:43:44:8a:a4:d7:88:3d:
15:15:4c:bc:a1:3f:8a:26:ea:86:25:e1:11:4b:d8:c3:71:3c:
53:0d:c4:1a:a4:80:11:e2:7e:a1:3f:c7:42:b4:0c:9e:87:4f:
2b:eb:0b:62:00:ff:6a:41:f7:46:42:7c:17:d9:4e:f7:5b:4f:
d3:09:a7:a2:69:8a:d8:c9:67:7e:6d:94:4f:a0:a2:f5:b7:93:
1e:12:15:3c:db:59:79:27:55:e8:8b:3c:7b:31:f7:f9:ab:9d:
d0:3d:ff:c9:fc:9f:91:b5:3f:41:9f:ad:a8:62:41:85:69:7c:
62:f9:a2:39:d5:ba:5f:14:ec:95:5b:56:e1:e3:6f:85:05:9f:
de:c3:75:ff:58:b5:98:39:6d:ce:1c:7f:ab:67:2e:2b:20:aa:
a3:76:f3:c5:e1:b2:c5:e9:9a:51:6c:24:35:65:d1:5e:0c:40:
73:b3:51:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:22 2025 by rpki-client