Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa
File: bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa (raw, json)
Hash identifier: jmPCp6yXzxLJDYKrtXi4j0Nqwi74mWH6TllKsaF2WqU=
Subject key identifier: 6D:25:8E:34:9F:84:FF:C5:7D:11:43:93:8D:58:3C:06:40:41:B6:A3
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA15529360F70497EF2BBC4BE28A3A
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48882
IP address blocks: 31.40.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:15:52:93:60:f7:04:97:ef:2b:bc:4b:e2:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d258e349f84ffc57d1143938d583c064041b6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:3c:23:a9:df:0f:6e:e5:a0:72:71:18:c5:
ea:bc:70:ee:c7:2a:c3:14:b4:1c:d5:f8:4a:e9:e2:
bf:24:eb:0f:ec:8a:08:5f:f3:6f:ef:50:3e:1c:e3:
d5:31:4a:d6:c4:97:f7:b2:3d:6c:fb:40:36:bd:1a:
4c:61:93:13:4b:2a:8a:d5:2b:29:f6:c9:1b:c1:d6:
28:0d:e7:f2:5d:b5:e2:80:e9:c9:29:93:a7:aa:17:
a5:ea:53:0d:8b:4f:78:d0:2b:c3:fb:8a:e2:5a:53:
ad:56:b0:67:e4:e1:fc:ec:2f:17:df:b0:8a:de:0d:
3a:c0:7f:f9:f0:ba:32:c4:87:ee:3c:0f:fc:5f:4b:
dc:3e:2f:1d:0f:0a:54:55:de:7e:0a:65:ce:4d:ba:
35:c9:4d:7c:ef:cb:1d:c9:c7:ed:a3:6f:56:e4:60:
b5:4c:3a:54:e9:9f:67:5a:f0:94:aa:63:2a:65:fb:
3d:ec:b7:af:95:c2:72:53:ef:c0:f9:50:3a:c4:57:
01:09:78:ec:fc:d3:e6:a8:b1:5e:84:d4:a2:5d:08:
ee:23:85:48:1f:af:ec:50:36:8e:db:2b:a5:db:8d:
cd:0f:d6:39:a2:99:d6:06:e2:9f:2d:19:f1:d2:87:
7a:48:75:4f:45:3b:92:45:2a:7c:af:a2:9d:24:c7:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:8E:34:9F:84:FF:C5:7D:11:43:93:8D:58:3C:06:40:41:B6:A3
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/bSWONJ-E_8V9EUOTjVg8BkBBtqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.156.0/24
Signature Algorithm: sha256WithRSAEncryption
94:11:d7:49:70:81:e8:9c:86:1e:99:55:a1:99:e8:8a:63:30:
6b:c8:c0:a5:ab:91:55:24:b4:c7:53:b5:07:e3:b3:20:d1:10:
aa:9a:46:00:d1:fe:44:95:09:77:fa:ee:68:1b:f9:d5:67:d4:
5b:53:17:e6:f1:f1:8b:40:da:31:78:82:be:3a:fd:10:8c:84:
2a:7c:1e:88:a2:98:9a:06:54:94:66:c2:d3:2e:0c:a4:d7:df:
98:b4:b9:f9:a5:d9:28:47:f1:a5:39:6b:98:e4:0d:0a:09:be:
1d:54:b9:cb:d5:3e:b6:0f:15:59:4e:17:39:44:83:ac:85:f2:
03:04:30:e5:5b:5c:05:d2:29:a2:4e:f2:ac:34:3d:c1:fb:e6:
95:fd:32:b4:bd:4d:89:48:3c:16:ce:cc:18:43:62:73:f8:c4:
0b:bf:ec:d4:17:c2:48:90:c6:32:48:3a:a5:33:ab:24:48:46:
51:f6:52:00:86:85:c4:fd:25:30:40:ec:74:dc:72:55:37:f4:
5b:25:ad:b7:f0:7f:ea:7d:e1:1c:bd:9a:f3:21:00:b5:10:ad:
da:cb:54:07:a6:b3:17:e6:d7:cf:85:68:dd:3b:9c:d6:3f:af:
82:5b:02:d2:05:30:45:01:c0:9c:c2:ea:31:a5:b9:7f:31:4d:
75:81:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:41 2025 by rpki-client