Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vHbopGgXWJSh407b-8suMMb8dCY.roa
File: vHbopGgXWJSh407b-8suMMb8dCY.roa (raw, json)
Hash identifier: ZPXHdpxntaqlDecqux77hmIq68OL6m/uAakjqPGtvng=
Subject key identifier: BC:76:E8:A4:68:17:58:94:A1:E3:4E:DB:FB:CB:2E:30:C6:FC:74:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194ABACA8801F299F1A788E941483724392
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vHbopGgXWJSh407b-8suMMb8dCY.roa
Signing time: Tue 28 Jan 2025 06:50:06 +0000
ROA not before: Tue 28 Jan 2025 06:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 31.56.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ab:ac:a8:80:1f:29:9f:1a:78:8e:94:14:83:72:43:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 28 06:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc76e8a468175894a1e34edbfbcb2e30c6fc7426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:11:f8:62:94:04:1e:cf:bc:95:1d:79:48:
69:4e:91:a8:eb:91:92:88:d0:27:ac:42:2a:fc:91:
08:da:65:4b:a9:3d:32:3e:25:f6:81:40:a3:ea:1a:
2d:c2:45:e8:f6:ec:13:73:80:96:21:3d:ef:84:e9:
9d:4b:b3:cc:64:92:44:c8:a2:05:ea:09:90:f2:10:
1d:16:f7:23:a7:5e:e3:8e:1d:de:e5:57:71:e0:0c:
3e:2a:63:6b:ca:4d:8c:1d:ab:fd:75:a0:8b:87:9c:
80:1a:50:44:10:60:ad:36:c3:05:d3:25:82:f1:5e:
69:54:55:62:e4:11:55:1b:18:68:b2:7b:8b:0d:c9:
5f:33:b5:08:6e:6f:7b:71:0a:ce:40:b6:3b:8d:98:
58:3c:29:de:23:14:1e:91:f8:55:04:d0:b4:38:3b:
90:3c:94:ec:ea:fe:26:bb:7d:56:60:f0:40:db:fa:
84:02:1e:73:75:f7:0d:39:46:f2:95:2e:cd:50:1a:
56:17:a2:57:5e:ae:09:d7:fa:22:8d:ac:d3:37:94:
38:c0:32:55:34:ad:5b:4f:a6:7f:d6:d3:62:b8:37:
b9:28:7b:06:2d:80:b7:fa:9b:96:42:52:a8:44:f3:
ea:d2:ff:35:6f:89:fa:b7:20:69:a8:38:8b:95:63:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:76:E8:A4:68:17:58:94:A1:E3:4E:DB:FB:CB:2E:30:C6:FC:74:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vHbopGgXWJSh407b-8suMMb8dCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ed:90:63:23:7f:ad:cf:96:59:2a:72:5c:c8:68:b1:81:83:
32:23:4b:73:f9:85:71:ca:15:10:14:bc:19:fa:7b:2c:cb:63:
1f:31:46:c6:5d:09:e7:0f:1a:78:a0:5a:75:86:f6:02:dd:f1:
89:0f:5d:8c:cc:c7:95:dd:ba:db:ed:ac:4b:56:b7:82:a1:8d:
12:53:79:9e:b0:a9:07:4e:4e:08:c0:21:f4:2e:40:23:8a:81:
80:16:56:81:33:0d:f7:fd:52:f0:c4:8f:bc:d3:d6:c6:a0:ba:
1c:4f:67:bf:47:a1:14:56:34:ce:0f:2f:c3:e9:17:78:92:53:
04:cd:0c:f5:cf:4a:d1:79:2c:b7:70:38:79:ea:0b:7e:78:78:
a5:e2:82:89:36:43:5e:ea:33:81:0c:c3:b1:d3:89:17:72:25:
12:9a:4e:5f:48:b8:0a:45:7c:a1:ad:89:68:f4:c2:de:05:d9:
d7:a3:09:45:c9:82:1a:9d:a3:7c:f2:73:fa:0b:7d:3b:c6:f9:
a1:84:80:68:c6:ac:ed:24:9b:4a:df:c4:69:4e:9c:19:cb:ba:
25:2c:35:46:5c:99:b5:eb:27:b4:1f:bb:9a:70:72:6f:ca:87:
c1:e4:2e:a3:1c:d2:9f:8f:88:52:8e:02:e3:4e:ee:0b:c1:33:
91:1c:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:25 2025 by rpki-client