Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cPyRuKFkjK-GPVroPS4U0hxF_c.roa
File: 6cPyRuKFkjK-GPVroPS4U0hxF_c.roa (raw, json)
Hash identifier: fXY9Tzjd2bfGN6gkwj5DqRfk8SAvfHvefD0YnKdZxAg=
Subject key identifier: E9:C3:F2:46:E2:85:92:32:BE:18:F5:6B:A0:F4:B8:53:48:71:17:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194300B118F13DC066FAAF9769DD76A7F83
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cPyRuKFkjK-GPVroPS4U0hxF_c.roa
Signing time: Sat 04 Jan 2025 06:40:19 +0000
ROA not before: Sat 04 Jan 2025 06:40:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 31.57.179.0/24 maxlen: 24
31.58.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:30:0b:11:8f:13:dc:06:6f:aa:f9:76:9d:d7:6a:7f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 4 06:40:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9c3f246e2859232be18f56ba0f4b853487117f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:d0:c8:44:fc:16:ef:92:96:3c:1e:ec:be:
53:f9:31:81:7e:84:9a:b3:57:29:c2:aa:03:37:6a:
61:a4:53:a1:43:00:c3:91:57:85:33:8f:b2:37:3a:
56:d7:b2:58:2d:bb:ad:ef:8d:01:23:74:60:21:b1:
74:de:b5:66:67:90:57:83:01:40:51:96:bb:7b:e6:
75:d8:ce:db:d6:1b:4f:a1:e9:a0:d4:52:2b:36:a8:
84:9d:c3:b1:bc:a9:46:f3:0c:ab:5b:22:de:4d:0d:
9c:8a:8e:42:ac:8f:e2:55:2d:20:bf:ed:c7:29:a9:
33:f9:3e:da:d0:ce:e2:e6:dd:b2:0e:a7:a2:04:7d:
1c:d2:08:36:60:7e:cc:6c:95:66:0a:51:96:08:d9:
c3:2c:0e:cb:e2:8e:0d:c8:9a:01:f7:b7:ea:01:1b:
70:49:59:f9:50:00:a0:30:a1:6c:8b:8c:5d:ad:7c:
ba:e6:8b:0d:9d:1a:8e:4d:7e:60:b3:42:46:4a:c6:
88:fe:4b:f6:db:66:c1:a0:a8:3c:fa:08:a6:49:b8:
18:b0:2c:de:a2:09:65:28:3f:2e:f8:fa:38:ea:87:
c6:d9:20:8d:fa:1d:51:5b:75:91:4d:c0:e6:64:75:
df:4e:5b:d4:ce:c9:2d:33:a3:2f:c3:81:b0:5c:c2:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C3:F2:46:E2:85:92:32:BE:18:F5:6B:A0:F4:B8:53:48:71:17:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6cPyRuKFkjK-GPVroPS4U0hxF_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.179.0/24
31.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a0:cf:c6:10:87:e2:12:63:2a:a1:5f:fb:88:d5:1a:b8:ba:
60:5f:24:c0:91:22:13:00:51:24:3f:d2:d5:5b:71:63:ae:6d:
87:6a:5b:bd:4c:58:96:6e:35:31:35:83:45:14:ac:5f:e1:16:
e3:79:8c:0b:79:ff:9e:7d:a1:e1:d9:2a:10:c4:c1:51:1e:cf:
5a:ea:f9:53:d0:de:1d:96:2f:c9:8f:e5:70:af:c9:96:71:3a:
44:fc:f9:99:4d:93:48:a3:73:a8:a3:1c:e7:67:82:03:e2:02:
f9:9a:79:24:85:33:36:f0:09:08:5d:83:f4:eb:4a:38:61:c6:
d3:c0:33:bd:54:6f:d1:e0:84:10:a4:3b:5c:64:2e:dc:4c:b8:
1b:8d:fb:f7:f9:74:37:3a:f8:b0:c2:b3:35:52:43:1f:ac:3b:
b5:ec:a1:87:e7:be:92:2f:74:eb:cf:89:2a:c9:cc:a5:32:ea:
13:3a:7d:c0:9a:b8:cd:71:c0:5a:11:ca:de:22:ba:6d:f8:c3:
21:c9:91:41:35:63:1c:bd:66:c0:ea:34:c4:ec:a6:a6:59:5b:
01:ce:be:f3:6d:97:ff:1a:91:1b:6f:d8:52:d4:37:93:f7:cc:
58:82:0c:de:31:08:cd:b2:78:70:45:c8:84:d4:e4:3e:95:af:
84:87:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:50:14 2025 by rpki-client