Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/1-utv31eNtHYCODQjw0OBJ9A1ak.roa
File: 1-utv31eNtHYCODQjw0OBJ9A1ak.roa (raw, json)
Hash identifier: /AARSXPg1zjQZ6XPrMtvagEPxIaMWqUCldvhvMILl0E=
Subject key identifier: D7:EB:AD:BF:7D:5E:36:D1:D8:08:E0:D0:8F:0D:0E:04:9F:40:D5:A9
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019424B28AD7EA8418E53125FFAFE65548FE
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/1-utv31eNtHYCODQjw0OBJ9A1ak.roa
Signing time: Thu 02 Jan 2025 01:47:48 +0000
ROA not before: Thu 02 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 31.25.236.0/22 maxlen: 24
31.25.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8a:d7:ea:84:18:e5:31:25:ff:af:e6:55:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7ebadbf7d5e36d1d808e0d08f0d0e049f40d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f8:4f:52:76:5b:c7:f2:47:b0:50:af:e7:84:
78:a3:08:29:db:15:f0:b6:40:bb:4f:19:4b:a2:27:
61:56:c2:f1:7e:7d:bb:1d:5b:7a:a6:0f:9e:57:e6:
c3:67:47:3b:f1:d7:6f:d9:66:55:a7:80:08:2a:a9:
83:ae:90:71:16:6d:cc:3d:91:0c:58:8e:52:37:9a:
58:d5:4d:44:55:70:de:34:cb:25:3d:56:50:1d:eb:
40:59:86:4b:fc:7e:ab:88:eb:ed:be:b7:ed:a6:81:
5c:22:b1:64:fb:db:a2:66:a4:86:5d:a5:95:9a:47:
04:a8:18:8b:3a:2f:53:c1:3c:31:42:7a:a1:b0:d9:
8d:c8:c5:29:30:55:69:5d:de:ca:75:b5:ba:6a:f9:
ed:c5:41:59:67:58:b7:23:89:64:5f:bf:7b:14:c5:
f1:d9:e5:be:e9:49:7d:53:f6:d0:c0:36:94:79:8f:
6d:ea:64:9b:24:c9:b4:90:dd:d4:be:35:a1:6b:82:
87:e9:9a:aa:41:d0:25:1f:61:e9:c3:78:8d:2a:ea:
cf:e5:6a:2b:07:b1:90:f9:10:05:e3:2b:59:2f:bc:
59:ce:69:18:81:f3:be:b7:1c:4e:0a:40:ec:4e:e2:
4a:fc:ed:68:ac:98:26:c3:68:70:1d:1b:31:a4:43:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EB:AD:BF:7D:5E:36:D1:D8:08:E0:D0:8F:0D:0E:04:9F:40:D5:A9
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/1-utv31eNtHYCODQjw0OBJ9A1ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.236.0/22
Signature Algorithm: sha256WithRSAEncryption
85:f3:7e:41:6b:b9:41:dc:cf:4a:4c:64:af:36:de:54:61:e9:
c3:a9:eb:58:f5:cf:4b:24:d9:a0:85:d7:a1:b3:21:c9:4d:4c:
c2:a9:e7:64:9a:35:e4:ab:c0:08:56:b5:bb:f3:54:33:bc:22:
d5:12:48:97:fc:1c:f9:ca:7c:55:74:37:0d:02:a4:4b:11:f0:
2b:db:82:28:86:5c:40:16:42:a0:2c:a0:5a:77:dd:92:d5:b6:
e3:e0:32:ec:f9:13:e1:6c:77:3a:0e:33:e0:70:04:77:03:d7:
33:98:c6:76:fb:9a:b5:51:15:bc:32:ce:8e:02:f4:54:da:fa:
ee:c2:0e:52:da:2f:21:5b:94:2d:e4:2c:43:a6:4f:49:0f:5a:
a6:8a:c2:e9:e8:56:2f:7b:8a:f1:8b:54:a4:bb:0a:2e:79:45:
c5:fb:2b:74:8a:15:f5:fd:26:fe:1b:ef:e7:7a:87:e9:a9:ae:
a0:54:c9:b6:e6:aa:0c:cf:ae:eb:00:8f:72:50:5a:22:e6:86:
66:d1:e9:7a:33:89:b8:a0:54:cc:d9:28:02:f4:ca:42:fb:94:
50:c6:90:b8:7a:c7:54:59:de:e0:2d:f1:13:48:ae:59:29:9a:
2b:96:e0:0d:5d:75:e8:c4:68:86:d1:d8:5e:9b:fc:da:09:0e:
92:6f:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:37 2025 by rpki-client