Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/oKqU8tjo3Uny7cExpTu79CEQXs0.roa
File: oKqU8tjo3Uny7cExpTu79CEQXs0.roa (raw, json)
Hash identifier: 6npitP1IZschN8M7amkfuQxbFmC+YxEdlFbbthwP1nQ=
Subject key identifier: A0:AA:94:F2:D8:E8:DD:49:F2:ED:C1:31:A5:3B:BB:F4:21:10:5E:CD
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA16C885F4753C8EB6FEB7F1284608
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/oKqU8tjo3Uny7cExpTu79CEQXs0.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58000
IP address blocks: 31.40.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:c8:85:f4:75:3c:8e:b6:fe:b7:f1:28:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0aa94f2d8e8dd49f2edc131a53bbbf421105ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:b9:e7:04:a8:f0:87:f5:4f:9e:38:77:a7:
d1:35:40:61:f6:bd:37:53:c4:30:bf:1b:17:35:d7:
37:35:57:56:cb:d7:ee:2a:19:21:f7:20:b6:75:64:
64:92:61:fc:87:9b:9e:7c:78:d5:33:50:c2:5e:4b:
32:4c:9c:30:6f:32:7d:01:8f:d9:74:40:b6:8b:c3:
96:95:74:66:44:57:66:c4:fe:2d:6d:39:a2:4e:68:
23:26:60:9c:5c:7c:29:31:26:e5:64:7c:c4:5e:d4:
de:ad:98:0d:bf:25:1d:36:33:85:25:ae:5f:c8:32:
ea:35:8a:46:3c:94:f1:85:cf:62:4a:e5:2d:71:b0:
50:05:f3:3c:5d:bf:2e:05:23:39:03:29:78:54:eb:
c8:4c:8e:b8:9e:9a:16:3d:62:77:6f:1f:4c:9a:d4:
fa:5f:36:48:6d:da:72:53:d4:0c:4f:52:9c:46:e2:
bb:9e:9d:26:a2:b8:df:f4:c9:3e:84:4c:38:1f:c9:
d4:9b:ec:c9:47:a2:8b:4d:fe:6d:06:f8:be:c1:3f:
4c:99:9f:f3:c0:5f:04:5a:77:89:0a:12:81:a4:3e:
b9:18:be:61:f8:fe:45:50:8f:e8:e4:95:fc:26:c0:
b4:2c:ce:fa:f9:c3:d1:8b:6b:50:d7:cb:30:08:90:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:94:F2:D8:E8:DD:49:F2:ED:C1:31:A5:3B:BB:F4:21:10:5E:CD
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/oKqU8tjo3Uny7cExpTu79CEQXs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.135.0/24
Signature Algorithm: sha256WithRSAEncryption
61:68:b1:e9:69:1e:64:fb:2c:da:c5:ff:aa:a8:b6:71:f7:32:
66:90:56:c3:da:37:a3:79:54:a2:33:2b:53:a4:80:25:c4:2a:
d7:25:e6:5c:bf:6d:fa:38:d3:89:bb:a0:cd:7b:32:76:49:6b:
d4:cc:2b:0f:32:22:5f:d4:02:b4:9c:0e:ad:4a:b9:a2:29:60:
f2:23:01:0a:5d:18:1c:99:98:98:68:d8:41:3d:38:27:3f:5a:
24:b3:95:48:39:41:87:11:77:ad:f2:c6:58:eb:7a:ff:ab:b5:
e4:73:0a:b6:87:bd:98:60:f7:33:12:72:f5:4e:18:0e:68:95:
d8:4f:a0:e2:02:1d:cf:3a:04:6f:df:bf:99:68:ac:6a:97:bd:
6a:a9:3e:ac:d5:77:2d:c9:e4:c6:af:34:5f:12:a3:7c:cd:c9:
36:c6:83:8d:a3:c9:a7:44:8e:98:ff:7b:77:e3:ed:90:0d:e0:
19:cc:a0:62:a6:58:10:2d:c7:be:94:92:f0:75:38:f4:f2:44:
f1:cb:0b:92:83:41:50:97:bc:6d:db:a3:ae:4b:07:9e:04:cd:
4f:32:3f:95:5c:81:a7:28:b3:ec:1f:39:3c:3d:aa:72:7f:16:
33:3e:2a:65:98:2d:d0:ec:2a:16:40:c0:a1:45:b7:bc:ff:20:
c8:28:a7:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+hbIhfR1PI62/rfxKEYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjUwMTAxMDM0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGFhOTRmMmQ4ZThkZDQ5ZjJlZGMxMzFhNTNiYmJmNDIxMTA1ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kG55wSo8If1T544d6fRNUBh9r03
U8QwvxsXNdc3NVdWy9fuKhkh9yC2dWRkkmH8h5uefHjVM1DCXksyTJwwbzJ9AY/Z
dEC2i8OWlXRmRFdmxP4tbTmiTmgjJmCcXHwpMSblZHzEXtTerZgNvyUdNjOFJa5f
yDLqNYpGPJTxhc9iSuUtcbBQBfM8Xb8uBSM5Ayl4VOvITI64npoWPWJ3bx9MmtT6
XzZIbdpyU9QMT1KcRuK7np0morjf9Mk+hEw4H8nUm+zJR6KLTf5tBvi+wT9MmZ/z
wF8EWneJChKBpD65GL5h+P5FUI/o5JX8JsC0LM76+cPRi2tQ18swCJDdpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCqlPLY6N1J8u3BMaU7u/QhEF7NMB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvb0txVTh0am8zVW55N2NFeHBUdTc5Q0VRWHMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyiHMA0G
CSqGSIb3DQEBCwUAA4IBAQBhaLHpaR5k+yzaxf+qqLZx9zJmkFbD2jejeVSiMytT
pIAlxCrXJeZcv236ONOJu6DNezJ2SWvUzCsPMiJf1AK0nA6tSrmiKWDyIwEKXRgc
mZiYaNhBPTgnP1oks5VIOUGHEXet8sZY63r/q7Xkcwq2h72YYPczEnL1ThgOaJXY
T6DiAh3POgRv37+ZaKxql71qqT6s1XctyeTGrzRfEqN8zck2xoONo8mnRI6Y/3t3
4+2QDeAZzKBiplgQLce+lJLwdTj08kTxywuSg0FQl7xt26OuSweeBM1PMj+VXIGn
KLPsHzk8PapyfxYzPiplmC3Q7CoWQMChRbe8/yDIKKfa
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:42 2025 by rpki-client