Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/RlSX_O9nuK4visZrcXhuUrMTobY.roa
File: RlSX_O9nuK4visZrcXhuUrMTobY.roa (raw, json)
Hash identifier: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=
Subject key identifier: 46:54:97:FC:EF:67:B8:AE:2F:8A:C6:6B:71:78:6E:52:B3:13:A1:B6
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019421444D794684FD23D030535A94EF9C1B
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/RlSX_O9nuK4visZrcXhuUrMTobY.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199095
IP address blocks: 31.31.128.0/19 maxlen: 24
80.91.144.0/20 maxlen: 24
185.195.28.0/22 maxlen: 24
217.64.240.0/20 maxlen: 24
2a11:bfc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:79:46:84:fd:23:d0:30:53:5a:94:ef:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=465497fcef67b8ae2f8ac66b71786e52b313a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:32:35:3f:4c:85:35:3c:ff:44:e3:a8:7d:
bf:b4:f9:c2:c5:19:61:b4:d6:b8:2c:d2:9c:5f:7a:
27:00:d3:94:d1:3e:88:3c:b0:f2:c8:e8:06:aa:4d:
df:e6:a7:a4:22:ff:19:4e:86:ca:09:b8:ab:3a:5a:
6a:f8:ea:fe:b4:af:26:df:78:6c:4e:c6:ae:9d:3f:
40:7f:32:8f:cb:59:f7:23:ba:93:d2:11:a1:68:ad:
3b:87:8c:40:84:e4:c6:79:c6:02:94:5c:32:46:b0:
60:2a:0a:cc:0c:af:38:1b:df:cf:2a:db:30:31:f6:
c4:3f:e2:2a:cc:3a:4e:0f:27:45:ca:9d:90:7c:e9:
f4:21:60:81:3b:69:7a:d0:66:b5:59:51:bd:47:80:
99:02:88:47:bf:59:70:18:9c:96:60:ec:a2:a7:03:
a1:59:53:1a:9b:1d:b0:22:22:c3:cb:fb:4e:14:44:
d4:fa:68:7e:fe:96:c1:d1:03:44:be:d6:63:62:ce:
d9:59:7c:ed:da:5b:bb:c4:4d:72:39:34:fd:9d:7d:
71:d0:78:df:d0:e9:4c:a1:d7:79:1d:9f:f7:65:11:
a4:69:57:ea:5c:9e:00:d0:c8:5b:99:a2:34:cd:89:
99:7b:67:2f:ab:e8:8a:ce:66:0f:e5:f9:c7:e8:3f:
bd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:97:FC:EF:67:B8:AE:2F:8A:C6:6B:71:78:6E:52:B3:13:A1:B6
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/RlSX_O9nuK4visZrcXhuUrMTobY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.128.0/19
80.91.144.0/20
185.195.28.0/22
217.64.240.0/20
IPv6:
2a11:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:72:9b:52:90:50:5f:fa:b0:71:9f:6c:46:62:62:bb:18:7e:
7f:b2:6b:70:7a:42:a8:0b:c2:22:74:bb:12:ca:fa:7b:cd:31:
86:55:54:89:8e:c3:d4:01:10:61:09:ea:e3:1a:55:d6:1c:45:
9a:b8:4c:41:c0:4c:f3:a0:4b:dd:c2:8a:a5:86:1a:8d:0b:bc:
ee:52:a0:be:6b:81:1f:65:76:a0:9f:0e:16:5d:1e:24:49:9f:
e1:3f:80:0e:73:82:b2:0a:67:6d:43:6d:bd:8e:f1:75:af:ea:
25:fb:b3:52:57:e2:cf:9b:3c:e9:01:66:1f:a8:17:1f:67:29:
69:36:cd:91:17:97:f7:ed:20:e5:cc:88:4f:2a:8c:19:24:c9:
78:00:b6:0f:00:8c:03:23:e6:96:ee:e7:03:cf:2b:30:a3:9f:
f4:06:ed:93:0b:a2:db:b5:ec:a7:b9:48:f4:b9:0d:f4:fc:96:
38:fa:b8:20:7c:6d:e7:76:00:ab:1a:f9:1b:24:a2:76:dc:43:
3e:1b:9b:5e:de:32:6b:5f:d2:3d:dd:19:11:0e:62:4b:cb:40:
d7:d2:85:bf:2a:e1:bd:5c:68:a7:77:25:90:52:56:ac:1a:22:
24:db:70:90:af:c9:cd:15:8f:5a:89:df:18:18:a4:65:41:4c:
52:fb:70:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:11 2025 by rpki-client