Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CsHRty9mRnt0BIZyK9xPxLB8vMI.roa
File: CsHRty9mRnt0BIZyK9xPxLB8vMI.roa (raw, json)
Hash identifier: SOTUJt2h333yX+nLIVz1pZ1xGDOUOZ+oSW3hWCCQZd0=
Subject key identifier: 0A:C1:D1:B7:2F:66:46:7B:74:04:86:72:2B:DC:4F:C4:B0:7C:BC:C2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019424459DD332B9B75B49F8DE018F3C075D
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CsHRty9mRnt0BIZyK9xPxLB8vMI.roa
Signing time: Wed 01 Jan 2025 23:48:49 +0000
ROA not before: Wed 01 Jan 2025 23:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58262
IP address blocks: 31.40.3.0/24 maxlen: 24
31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
91.226.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:9d:d3:32:b9:b7:5b:49:f8:de:01:8f:3c:07:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jan 1 23:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ac1d1b72f66467b740486722bdc4fc4b07cbcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:ce:4f:68:79:19:f4:57:a0:e8:b7:11:40:
59:18:01:be:40:8b:43:5b:7e:2a:f7:5d:b9:87:1f:
76:0e:ba:a0:23:93:f1:4d:91:08:c5:0a:33:d3:63:
56:5b:5c:53:8d:f0:ef:8b:95:40:d0:93:15:e1:31:
65:e1:ac:c5:34:74:34:f6:98:4c:6a:0b:18:e1:8f:
bb:c0:d9:b0:29:ee:db:79:fc:bb:54:0b:e7:88:a3:
3c:39:ef:7c:00:5f:da:c4:08:05:c2:4c:e1:ab:99:
64:05:f5:16:1f:8f:34:0e:cd:fd:c9:66:a3:3d:d0:
a3:9b:1f:63:a9:e6:9a:62:2d:e6:a5:9c:86:2e:ac:
09:62:9a:4e:b4:8b:82:be:fb:84:db:ad:17:3c:ad:
4c:4a:a5:48:28:8c:b4:d7:fd:66:6c:f9:8d:00:f0:
d5:a4:f3:1f:31:eb:94:68:b2:20:fd:5a:8f:17:37:
87:0b:8a:02:11:5b:6b:95:3e:70:b8:ae:13:52:da:
a8:8f:00:5e:75:d5:44:34:a0:81:82:b1:09:6b:d4:
e0:d7:11:3a:d5:ec:f3:3f:29:3c:63:e5:0a:b0:f8:
1f:04:08:13:26:42:86:fe:a6:7f:3f:f6:15:92:39:
5a:fa:74:9d:ea:61:48:a0:b5:74:c2:0e:3b:25:14:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:D1:B7:2F:66:46:7B:74:04:86:72:2B:DC:4F:C4:B0:7C:BC:C2
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/CsHRty9mRnt0BIZyK9xPxLB8vMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.3.0-31.40.5.255
91.226.224.0/24
Signature Algorithm: sha256WithRSAEncryption
47:47:0a:b2:42:c2:fd:c9:27:6b:41:22:b2:1d:76:f6:0e:a5:
f3:9e:c7:14:08:a6:fd:a1:8a:26:10:54:b5:d1:da:c4:10:01:
26:78:37:cf:af:f0:b5:ed:ec:a1:79:14:33:a8:ad:f0:8c:7f:
25:9f:fd:3a:a5:de:f1:7e:c7:ab:2e:9f:1d:24:01:5d:39:0b:
83:96:e4:f4:87:7c:5f:10:64:13:9b:75:d3:d4:e9:c6:d4:e9:
14:75:1e:79:ac:3b:35:15:e7:75:ff:95:5f:e8:68:a8:3b:b3:
d6:66:d3:ef:de:da:45:7b:62:d7:9e:ea:42:76:fd:fe:e7:b6:
19:45:8f:b5:c0:43:09:7a:58:c1:6d:42:bb:e1:ea:c8:9f:56:
5b:2d:8c:2b:4c:16:fb:18:4f:a8:00:24:4a:be:82:ac:d7:19:
2c:55:d8:0c:13:75:9b:1e:40:48:99:e4:63:19:0a:9f:15:59:
ba:0d:0e:3c:12:24:b2:1b:49:ce:f8:75:02:e7:26:3b:3e:ca:
9f:f2:72:13:ec:25:fe:ac:bb:d0:c7:34:5b:7b:4e:36:29:88:
81:08:02:55:b5:83:72:d6:58:3d:b8:4f:8d:ef:73:64:45:2a:
54:03:e9:17:27:0f:42:de:64:80:f0:9a:c1:e8:39:7e:11:21:
45:de:e4:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:07 2025 by rpki-client