Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa
File: Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa (raw, json)
Hash identifier: 657I1jLunRMhj2vBtHhC7I7kj5ImF6yxkiyRsM9bRks=
Subject key identifier: 0A:97:6B:EA:E7:07:D3:82:F3:EB:3F:15:C4:E5:00:9D:D1:C4:E9:9C
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019424459D9DE458F0D1269A2BD98F2D697E
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56703
IP address blocks: 31.40.0.0/23 maxlen: 23
31.40.2.0/24 maxlen: 24
194.26.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9d:9d:e4:58:f0:d1:26:9a:2b:d9:8f:2d:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a976beae707d382f3eb3f15c4e5009dd1c4e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:49:e2:3b:8b:a7:88:4f:88:a4:27:dd:0b:
77:9c:d0:82:b4:d7:71:bf:aa:93:45:0f:08:b1:ac:
1d:7f:85:d4:c0:5a:dc:b8:e2:94:e3:b7:01:46:57:
e5:33:cc:69:81:49:ce:c2:a2:85:45:e9:08:d7:aa:
83:48:0d:5d:99:1b:b2:79:23:b4:e8:df:56:82:0b:
fb:72:ee:17:b9:a2:43:11:fc:d8:b9:ad:1b:f6:3a:
18:22:58:5d:31:84:28:92:ac:65:35:aa:f3:20:a6:
c5:b3:55:69:b8:4f:43:c3:b5:74:b9:c0:5c:16:0d:
dc:91:0d:ec:c8:7a:28:0b:e9:3d:3a:79:64:f8:c6:
13:cb:5d:5b:8b:5a:c6:d3:be:46:99:d4:e7:1f:1c:
01:73:5d:17:68:d8:77:29:be:69:99:d1:6b:91:b8:
23:0a:76:29:75:a4:5e:bb:c7:04:c7:5a:4f:8c:92:
60:6a:7a:36:73:99:54:6c:1e:23:82:5d:f8:8e:b9:
1f:bd:5e:c1:f5:c1:d3:6b:57:5d:82:dc:f3:f4:c1:
ac:5a:63:03:b0:47:31:19:c9:4c:2f:e9:22:51:e2:
9a:d0:00:9b:79:11:ea:32:fb:42:66:e1:b7:48:68:
64:80:9b:65:11:4a:61:d3:99:52:92:96:3c:ca:1f:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:6B:EA:E7:07:D3:82:F3:EB:3F:15:C4:E5:00:9D:D1:C4:E9:9C
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/Cpdr6ucH04Lz6z8VxOUAndHE6Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.0.0-31.40.2.255
194.26.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:23:b8:ae:49:4d:5b:a1:41:71:19:69:2d:23:1e:fe:36:0e:
86:40:ea:74:88:d7:fb:a6:bd:c1:4a:d9:16:f8:97:50:6e:ff:
67:1d:ea:c3:49:77:a2:4f:fc:30:b3:9b:11:41:f0:af:4b:d9:
14:56:dd:84:ba:66:ba:c3:56:49:9a:5f:04:30:36:0a:29:ab:
fc:09:48:f3:7b:1d:97:5c:f1:85:c4:8c:37:46:17:3e:d1:a2:
15:ce:ed:7b:ca:09:d1:a8:b3:5f:90:d2:d8:e4:2d:84:19:a9:
f6:1d:2c:9a:63:3a:9c:5f:bf:1b:04:b0:70:51:27:f6:3d:ed:
ec:cc:31:1a:61:7a:8c:82:fd:05:37:bf:f7:b8:11:cd:49:6c:
67:10:9b:0d:ef:4b:0e:5e:a4:22:46:91:4d:88:52:8c:c7:eb:
dc:17:a9:da:e3:6a:e0:42:3f:c5:1c:0c:68:cf:52:01:4a:3c:
9b:c4:d3:b5:25:c7:34:b1:f1:15:5d:7e:bb:f4:5d:d5:d0:ae:
28:6d:a8:3a:82:ac:e3:08:9f:51:31:4b:12:e4:5f:5d:1c:96:
e2:dd:0d:c3:1d:3b:c0:13:0d:81:84:1d:17:42:80:07:3a:6b:
7b:0e:28:72:f3:06:72:60:59:fb:5d:0d:d9:37:0d:92:82:58:
8c:85:d5:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:05 2025 by rpki-client