Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rd4uwLGaxdI6ETiUbyk5Hm8ugiM.roa
File: rd4uwLGaxdI6ETiUbyk5Hm8ugiM.roa (raw, json)
Hash identifier: Ja+1vYkXmgsG3k3cQkU07ht3IE8iqp6c1J6FC1y2BJ4=
Subject key identifier: AD:DE:2E:C0:B1:9A:C5:D2:3A:11:38:94:6F:29:39:1E:6F:2E:82:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194282386208FF09F2F3D5A6930FA3DD6E3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rd4uwLGaxdI6ETiUbyk5Hm8ugiM.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270187
IP address blocks: 31.57.172.0/24 maxlen: 24
31.57.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:86:20:8f:f0:9f:2f:3d:5a:69:30:fa:3d:d6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adde2ec0b19ac5d23a1138946f29391e6f2e8223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:51:7e:e8:44:e9:f8:c8:62:56:a3:bf:65:
4e:07:23:58:8f:96:01:80:bc:6e:58:33:9e:b6:24:
65:09:fc:2c:1a:d3:7a:f6:50:2f:9c:a8:de:32:b2:
72:ab:81:4e:9d:77:03:ac:1b:e2:d3:4d:39:47:5c:
4f:c8:4e:73:4d:08:57:43:4c:81:62:d2:ce:01:7a:
2a:a4:95:b0:e3:92:4b:d9:3a:8d:2b:18:33:42:ed:
e1:1e:2c:7f:4c:a9:af:b4:78:f6:32:b6:1f:5f:f1:
a8:6e:f0:e4:cc:ac:08:fb:23:44:f2:3d:f8:44:d7:
a7:8f:03:b5:ad:8a:97:dd:9a:82:12:d1:52:42:42:
ea:b1:c0:4e:5a:ea:0b:5d:8e:cb:c8:53:cc:90:7b:
50:c1:83:f5:e1:55:8d:38:63:82:61:ca:36:ce:12:
ec:89:b4:3e:ed:f6:df:4c:58:04:99:b8:b5:7a:5d:
ec:b4:ab:7b:44:41:14:a6:cc:b3:43:64:d2:1d:df:
fd:81:c1:62:ee:25:c9:b2:1d:ff:88:19:7a:20:ce:
1e:0b:1c:c8:9b:d5:ca:c6:94:41:d2:4b:61:ea:27:
66:10:59:67:58:a9:43:89:3c:a3:3c:cb:24:94:38:
ba:c8:3d:ce:cd:f8:05:6f:c0:a1:23:22:93:79:1a:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:2E:C0:B1:9A:C5:D2:3A:11:38:94:6F:29:39:1E:6F:2E:82:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/rd4uwLGaxdI6ETiUbyk5Hm8ugiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.172.0/23
Signature Algorithm: sha256WithRSAEncryption
11:d4:7b:17:98:e6:fd:d5:bf:82:a2:a0:33:9d:6d:ba:e5:9c:
13:65:c8:a0:d8:fc:83:1e:aa:6f:74:e1:f4:0c:7b:91:3c:5f:
c1:ba:45:af:f7:19:14:1a:8f:38:b8:4c:f8:5a:86:17:11:00:
6a:a0:f9:88:de:91:f5:7b:15:02:45:82:cf:6c:c0:4a:91:18:
e7:4c:2b:ae:57:f9:b7:eb:1a:95:f6:7e:b9:26:d8:e1:2e:e3:
a0:ba:bd:79:9b:14:19:5e:0b:ec:bc:1f:4c:b6:74:39:dd:25:
17:52:92:18:ae:8f:7e:07:ff:38:79:41:06:e3:09:1e:e7:a6:
4d:2e:47:a6:b5:98:cc:6b:c3:fd:88:d0:38:fb:0b:4c:10:0d:
74:9e:ad:71:ff:63:2d:c9:36:03:9d:ee:c6:c5:d6:7d:2e:5d:
23:59:d9:a6:22:ac:14:4c:6b:8c:7a:c8:bd:35:8c:c0:92:e1:
fe:e9:b4:45:c1:e6:21:e4:80:16:63:ff:84:32:e1:6a:da:f3:
4a:e0:a4:bd:35:db:db:37:09:3a:0e:d5:c0:80:29:6d:bf:03:
2c:55:4a:ad:3f:02:8b:d5:61:56:75:54:2b:6e:98:ed:79:25:
ae:48:ce:4b:d2:ab:8a:55:99:a7:c4:8c:54:95:96:77:a1:b9:
99:52:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:45 2025 by rpki-client