Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIZnnfv7WU7Xvz2bow4zsXKJr2k.roa
File: lIZnnfv7WU7Xvz2bow4zsXKJr2k.roa (raw, json)
Hash identifier: qinlKxe+kgFeuZ7iZZTLmki6ZUqVegTCuEXKiqOciM0=
Subject key identifier: 94:86:67:9D:FB:FB:59:4E:D7:BF:3D:9B:A3:0E:33:B1:72:89:AF:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019428234E844FEC9D9BE8BCBBFD09C73E5A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIZnnfv7WU7Xvz2bow4zsXKJr2k.roa
Signing time: Thu 02 Jan 2025 17:49:49 +0000
ROA not before: Thu 02 Jan 2025 17:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61311
IP address blocks: 31.57.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4e:84:4f:ec:9d:9b:e8:bc:bb:fd:09:c7:3e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9486679dfbfb594ed7bf3d9ba30e33b17289af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:c6:a9:c9:ae:52:d4:0f:68:73:67:9a:31:
e8:63:6c:1a:4f:51:df:39:41:a9:22:38:ff:d7:f2:
19:e4:dd:1e:f2:3f:17:59:3a:7e:76:92:f2:fe:17:
ef:15:8c:6c:f9:a9:a3:dc:0d:ca:1d:b0:c2:8a:16:
a9:52:de:b5:13:b4:02:60:e6:72:2b:13:c5:df:c2:
8b:bb:df:db:68:85:cb:39:03:aa:d3:86:1c:ae:e6:
04:23:ee:61:d3:da:1f:82:dc:5f:ba:92:2f:3e:0a:
de:33:79:b7:6f:60:68:3c:89:e6:21:22:bb:c8:c4:
27:c2:ad:e1:42:3f:72:54:17:58:b4:43:34:b1:65:
87:a7:df:27:aa:43:d5:6d:fc:ab:98:a2:02:f7:74:
c2:08:fb:7c:55:3e:fa:45:d9:2d:6b:f9:d5:bb:41:
8b:bc:e7:3f:16:2e:8f:c2:95:8b:56:17:69:f7:5e:
5d:be:62:91:56:44:4b:79:f4:1d:44:03:ba:97:d9:
13:49:14:08:3d:30:28:d0:d3:09:c5:e0:00:5f:83:
a7:69:bd:a1:3f:db:64:a6:5a:4b:bf:87:32:d6:84:
6e:a6:03:76:b8:34:a5:7b:57:9d:aa:59:89:b4:e8:
60:25:24:56:d0:c2:c2:1c:ff:8d:df:2c:58:40:9a:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:86:67:9D:FB:FB:59:4E:D7:BF:3D:9B:A3:0E:33:B1:72:89:AF:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lIZnnfv7WU7Xvz2bow4zsXKJr2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8f:22:42:66:b2:62:fd:84:20:07:36:55:44:1a:eb:30:0d:
0c:88:04:10:4f:40:e2:b9:5d:1f:8c:0c:2f:d5:2d:cb:f2:3f:
e2:51:15:92:d9:e9:d8:26:cf:b9:8d:b7:c7:03:b0:3b:d3:98:
8b:b2:b6:af:16:c9:22:6e:2e:0f:89:bd:04:f5:be:99:a9:e8:
34:ca:f9:95:68:96:3d:38:cb:27:2f:f1:1e:47:b4:bf:af:8c:
ef:40:91:e5:74:10:4d:ab:7e:ea:c2:02:4c:08:ad:c7:a3:24:
33:fa:95:2e:f4:a0:3f:04:82:80:f7:e8:c6:24:39:32:ed:f2:
aa:c7:ce:e4:f6:33:15:dd:fb:d8:d2:f8:9f:c3:0e:0f:2b:11:
7f:d6:82:9c:67:70:f8:0e:de:87:95:49:12:84:3b:b0:02:21:
c2:28:3b:1c:95:10:fb:1f:05:ce:de:e1:66:0a:78:c8:88:67:
ee:b5:0d:e2:da:59:a5:e5:6e:70:df:49:65:b7:1e:3a:e4:30:
d3:44:23:94:f1:c0:46:9b:e3:5a:3b:00:86:95:e5:fb:3d:26:
76:4c:88:51:ac:4a:cd:47:2f:ae:51:03:97:ca:6b:f8:d9:f4:
0f:05:f4:43:27:d3:0f:1f:79:ec:78:8b:4c:00:b7:00:9e:d4:
2d:17:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:14:25 2025 by rpki-client