Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/4VlPk-V4OmdI8dedIcEiZPcSpQw.roa
File: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (raw, json)
Hash identifier: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=
Subject key identifier: E1:59:4F:93:E5:78:3A:67:48:F1:D7:9D:21:C1:22:64:F7:12:A5:0C
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 0194221FC4874338DCACC2351E9DCF30B54D
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/4VlPk-V4OmdI8dedIcEiZPcSpQw.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210670
IP address blocks: 31.222.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c4:87:43:38:dc:ac:c2:35:1e:9d:cf:30:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1594f93e5783a6748f1d79d21c12264f712a50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:1c:21:00:84:9e:bb:e9:3d:92:c8:7a:5e:
4a:d4:73:3c:22:3a:72:62:72:e5:35:2a:dd:87:8f:
84:51:7a:97:16:30:db:3d:f1:25:1e:ac:74:1d:c3:
29:7f:dd:db:ba:09:98:2b:b5:15:0f:40:82:8d:f0:
b7:08:ac:5c:09:bc:35:b4:d8:d9:0d:89:12:ba:88:
7c:32:01:bb:2d:7a:7d:16:5c:64:29:96:f3:38:42:
af:e6:b3:1e:0f:64:b5:e3:b8:f3:83:b1:af:32:f7:
37:c6:56:2a:71:84:cc:38:ad:29:09:65:ca:e3:88:
c8:8a:74:b1:54:8f:8e:03:da:41:ba:ab:68:b4:f7:
86:bf:48:ff:b6:8c:14:94:10:6b:f8:ef:73:88:f9:
15:96:3a:20:1a:2d:dd:19:24:5e:24:b5:8a:05:c3:
ab:54:37:6c:60:0b:19:e0:65:e7:60:a9:46:74:6a:
ba:15:f8:14:5b:3e:23:fb:d6:86:b5:36:00:6e:21:
01:aa:b9:ac:19:66:79:9a:e1:ad:0a:12:df:ea:cb:
22:03:1b:1b:1e:40:53:c2:88:ec:23:c3:bd:9d:36:
ec:cf:eb:1f:08:01:8b:ec:31:a3:eb:b4:6c:9b:f3:
cb:98:60:8e:38:25:10:f5:ce:1a:1d:4f:7f:d3:5a:
c6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:4F:93:E5:78:3A:67:48:F1:D7:9D:21:C1:22:64:F7:12:A5:0C
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/4VlPk-V4OmdI8dedIcEiZPcSpQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.232.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e3:09:73:6e:05:d7:03:62:9f:b3:a4:87:ac:c6:b7:7f:fa:
6c:b5:d4:00:24:8a:03:d6:78:e8:a5:f2:dd:ff:7a:6b:2c:5c:
7a:ed:e0:27:c8:15:ca:10:32:1c:1a:28:55:98:49:f6:a0:29:
b3:71:be:13:c4:56:b1:1c:f8:ea:ae:da:47:cd:d1:2b:97:18:
d2:f4:82:33:a4:6a:59:f1:47:a2:78:33:34:f8:0c:d9:e4:f4:
62:2e:15:5f:85:31:28:f9:d2:a7:6b:a0:69:fe:ab:e4:78:70:
87:22:04:c7:23:1c:62:f1:16:30:ee:0a:a9:00:d3:29:66:19:
65:6b:ff:a9:2d:2f:55:bc:c1:c4:5a:68:d6:f5:c6:66:a7:cc:
40:b6:b6:aa:24:bb:dd:76:49:5b:10:b1:7f:bd:6e:d5:38:fe:
f3:a9:ff:c7:31:b2:d1:cf:a5:66:4e:13:20:a6:0b:70:de:9b:
e5:9b:ba:21:2d:33:e0:59:a7:74:93:64:a2:15:1e:ea:c6:d2:
c9:ad:b2:30:18:e9:df:86:c1:e7:3e:9d:02:fa:e2:f5:a0:f4:
0e:7a:c4:6f:d0:4e:33:bc:a3:f1:a2:01:40:5f:85:48:6d:f3:
b8:02:2f:12:05:64:25:ea:c4:fe:b8:69:08:bd:11:b1:b8:36:
b2:8f:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:01:18 2025 by rpki-client