Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/LdFx4O_axkyLwKBn8hayXhVuuTY.roa
File: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (raw, json)
Hash identifier: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=
Subject key identifier: 2D:D1:71:E0:EF:DA:C6:4C:8B:C0:A0:67:F2:16:B2:5E:15:6E:B9:36
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 019427B384FACD7FD80427F4D0A209B02F22
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/LdFx4O_axkyLwKBn8hayXhVuuTY.roa
Signing time: Thu 02 Jan 2025 15:47:43 +0000
ROA not before: Thu 02 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59595
IP address blocks: 31.135.184.0/22 maxlen: 22
31.135.188.0/23 maxlen: 23
31.135.190.0/24 maxlen: 24
31.135.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:84:fa:cd:7f:d8:04:27:f4:d0:a2:09:b0:2f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jan 2 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dd171e0efdac64c8bc0a067f216b25e156eb936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:5e:2a:0e:87:78:fd:22:34:f2:23:31:d3:
54:f4:9b:cd:a4:c6:59:82:9e:33:dc:a4:db:36:c0:
0c:6c:1d:f7:79:f0:5e:c5:03:eb:f4:3a:df:34:c8:
29:aa:89:d8:a2:0a:76:95:a6:2b:23:02:39:c9:64:
e3:1d:87:57:8b:aa:34:24:c2:9e:92:45:f8:d0:35:
ed:a6:fd:90:fc:4f:6f:58:71:32:5f:ce:c6:1d:19:
d8:4f:29:f6:9a:0f:ce:69:8f:eb:6c:37:de:b6:63:
60:bb:c5:0a:ca:d3:37:94:38:6f:ba:ff:8b:66:07:
29:29:37:80:e9:5f:40:d5:03:b1:95:fc:9d:f1:88:
aa:4a:a2:92:e7:5d:63:ef:48:77:bd:21:29:f6:a3:
fa:b7:2c:aa:97:8b:3b:95:14:e3:bc:5d:f4:df:fe:
e4:6c:a8:2a:6e:97:6d:c7:e6:7b:08:b0:8f:41:f4:
84:b0:39:2a:41:0a:60:9a:49:29:68:ff:cf:04:28:
a2:40:b2:6d:7a:70:d4:8d:bd:25:30:3d:96:f9:cc:
63:9e:05:1c:9c:e2:fa:8b:0c:0e:9d:fe:3a:48:76:
a9:38:40:64:55:e9:d4:6a:6f:b7:d2:32:ac:a8:c4:
13:29:91:c3:aa:70:b9:1f:d3:de:5c:16:49:5b:8c:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:71:E0:EF:DA:C6:4C:8B:C0:A0:67:F2:16:B2:5E:15:6E:B9:36
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/LdFx4O_axkyLwKBn8hayXhVuuTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:0d:ce:2b:c1:02:81:9e:ad:73:5b:51:b5:e3:08:ac:31:61:
16:70:3c:a0:d0:a8:d5:69:ca:94:0b:b2:51:31:34:42:f2:1a:
00:91:23:7e:c5:48:86:18:70:60:d5:55:b0:14:53:ec:97:8c:
a0:1c:c8:bd:36:f6:0e:6e:9d:ae:65:84:75:08:5d:6b:ee:cc:
8e:6e:73:81:b3:46:c6:1e:29:f1:f9:11:b1:73:cf:a4:11:79:
0f:16:d5:df:85:47:0a:85:75:98:9a:18:33:99:ec:67:8c:0f:
d3:f5:bc:f2:e1:cc:dd:0d:cf:8b:44:5c:31:a0:26:f2:5d:fe:
78:3b:db:f5:41:10:a9:6e:91:b4:55:0c:89:ad:f9:f7:b2:fa:
89:82:88:c4:fe:ac:45:f8:88:a5:34:ab:87:4f:29:8d:fd:88:
e6:00:2f:d1:87:d0:fe:a5:7a:e6:3e:18:fb:cf:d2:0d:d0:92:
41:01:51:55:d8:13:76:df:e9:ec:97:05:7f:94:0c:d5:45:54:
5d:74:f6:29:f9:83:0d:9b:4d:4f:de:6b:eb:b5:4c:e5:4f:d9:
60:70:c2:dc:f5:02:9d:f5:3c:37:33:1f:88:ad:da:20:12:28:
c9:dc:52:5d:88:58:30:31:3a:1d:29:8b:01:89:49:21:ae:42:
26:2a:a6:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQns4T6zX/YBCf00KIJsC8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj
NGRkNGIwHhcNMjUwMTAyMTU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZGQxNzFlMGVmZGFjNjRjOGJjMGEwNjdmMjE2YjI1ZTE1NmViOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z5eKg6HeP0iNPIjMdNU9JvNpMZZ
gp4z3KTbNsAMbB33efBexQPr9DrfNMgpqonYogp2laYrIwI5yWTjHYdXi6o0JMKe
kkX40DXtpv2Q/E9vWHEyX87GHRnYTyn2mg/OaY/rbDfetmNgu8UKytM3lDhvuv+L
ZgcpKTeA6V9A1QOxlfyd8YiqSqKS511j70h3vSEp9qP6tyyql4s7lRTjvF303/7k
bKgqbpdtx+Z7CLCPQfSEsDkqQQpgmkkpaP/PBCiiQLJtenDUjb0lMD2W+cxjngUc
nOL6iwwOnf46SHapOEBkVenUam+30jKsqMQTKZHDqnC5H9PeXBZJW4zFtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC3RceDv2sZMi8CgZ/IWsl4Vbrk2MB8GA1UdIwQY
MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt
ZWVkMWQwOTY3MDc4LzEvTGRGeDRPX2F4a3lMd0tCbjhoYXlYaFZ1dVRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4
LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4e4MA0G
CSqGSIb3DQEBCwUAA4IBAQCmDc4rwQKBnq1zW1G14wisMWEWcDyg0KjVacqUC7JR
MTRC8hoAkSN+xUiGGHBg1VWwFFPsl4ygHMi9NvYObp2uZYR1CF1r7syObnOBs0bG
Hinx+RGxc8+kEXkPFtXfhUcKhXWYmhgzmexnjA/T9bzy4czdDc+LRFwxoCbyXf54
O9v1QRCpbpG0VQyJrfn3svqJgojE/qxF+IilNKuHTymN/YjmAC/Rh9D+pXrmPhj7
z9IN0JJBAVFV2BN23+nslwV/lAzVRVRddPYp+YMNm01P3mvrtUzlT9lgcMLc9QKd
9Tw3Mx+IrdogEijJ3FJdiFgwMTodKYsBiUkhrkImKqbT
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:54 2025 by rpki-client