Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3f8gscv2UVG_FwGY63ZelU9GbDQ.roa
File: 3f8gscv2UVG_FwGY63ZelU9GbDQ.roa (raw, json)
Hash identifier: IacnUg901XhQWSa+0+KCREbxM7Rn3cxMp1yUNb0qKO8=
Subject key identifier: DD:FF:20:B1:CB:F6:51:51:BF:17:01:98:EB:76:5E:95:4F:46:6C:34
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194644F63FFEA6B17C2630090F1EABAC572
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3f8gscv2UVG_FwGY63ZelU9GbDQ.roa
Signing time: Tue 14 Jan 2025 10:15:12 +0000
ROA not before: Tue 14 Jan 2025 10:15:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 31.57.67.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:4f:63:ff:ea:6b:17:c2:63:00:90:f1:ea:ba:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 14 10:15:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddff20b1cbf65151bf170198eb765e954f466c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:dd:e7:51:a4:08:eb:6c:c6:a5:1e:73:a4:
a3:0d:8d:b6:fb:39:a0:dc:c1:49:16:2f:23:ac:6a:
fa:0f:87:08:14:ed:0c:1f:c3:3d:bb:b9:f6:ec:fa:
f1:77:bd:d1:8e:46:7c:0e:42:74:f5:94:9f:7c:e8:
10:c7:c5:63:39:09:b7:39:62:02:43:17:85:e9:2b:
61:18:a1:1b:18:69:bb:56:ab:88:fc:a9:ff:1e:4b:
d2:bc:6c:c1:76:7a:4e:09:7c:32:4a:c6:ed:01:f4:
4e:01:60:f7:4c:7d:d6:41:ba:96:cc:ec:ec:d4:89:
f5:ab:e7:96:79:50:b7:03:0b:83:ff:14:bc:82:28:
43:1e:69:d9:cb:08:d4:53:2a:b3:94:7a:90:d9:45:
de:7e:28:a3:15:65:01:63:f3:e5:7d:a5:7a:2f:bd:
8b:91:55:42:0c:6b:49:28:e5:71:64:78:8b:82:90:
5a:bc:63:d1:2e:3d:e7:e0:64:97:80:60:5c:3c:6c:
af:2e:2f:f8:70:66:d6:a9:18:b1:7f:86:9c:04:a9:
50:87:0a:98:c4:bc:0b:73:c5:c6:d0:6e:88:19:57:
f6:53:a1:47:a7:3e:f8:38:94:76:3f:fc:97:57:db:
cf:5b:b2:13:33:43:fc:0f:33:6f:41:66:60:b4:9c:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:20:B1:CB:F6:51:51:BF:17:01:98:EB:76:5E:95:4F:46:6C:34
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3f8gscv2UVG_FwGY63ZelU9GbDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.67.0/24
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1c:46:19:c8:75:8a:a6:f0:79:be:a7:c4:70:ef:fb:d7:68:
ec:e3:e9:59:75:b7:a9:0c:fe:e8:d9:f0:66:76:a3:a1:83:b2:
0c:17:66:f8:6f:47:18:a2:13:7d:63:2a:48:9b:ce:61:a4:08:
03:79:bc:2d:97:96:13:fb:06:32:8c:e4:be:b6:40:8a:c2:04:
c4:1d:8c:97:7e:21:0a:b0:7f:e2:1f:94:91:c5:1e:28:cf:f7:
b2:5c:8e:39:56:c9:84:3c:fc:6c:60:93:25:33:99:2b:a7:37:
aa:0b:06:c7:31:e4:82:ed:d2:20:19:d3:6f:0b:30:af:6e:24:
14:58:ac:3a:a0:0f:e2:9a:df:fe:4c:69:57:e2:5d:f0:93:c8:
d1:5c:ea:5e:b4:e5:66:14:45:15:ba:f6:a0:b6:09:67:0c:a5:
0f:4e:38:f7:28:00:1d:2a:13:a2:bb:e9:97:8c:fb:25:5b:a3:
8c:aa:94:67:10:96:88:1b:3a:18:05:a8:79:30:0c:b8:f4:19:
df:0e:49:09:59:30:a4:bb:3a:1b:3a:00:3b:05:99:45:b7:fa:
c1:21:a1:03:46:46:16:14:04:ba:59:b8:88:29:3f:6b:11:35:
50:89:34:c2:7f:a9:d4:ab:18:15:e0:96:57:07:de:fe:23:05:
f7:54:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:49 2025 by rpki-client