Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa
File: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (raw, json)
Hash identifier: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=
Subject key identifier: F7:4A:92:4C:96:D8:A0:98:57:86:32:62:E2:BB:4F:FD:93:65:84:95
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 019422FB4A26ED49F093D7FA2679D987B732
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa
Signing time: Wed 01 Jan 2025 17:48:01 +0000
ROA not before: Wed 01 Jan 2025 17:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197943
IP address blocks: 31.211.168.0/22 maxlen: 22
31.211.172.0/24 maxlen: 24
2a03:7360:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4a:26:ed:49:f0:93:d7:fa:26:79:d9:87:b7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jan 1 17:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74a924c96d8a09857863262e2bb4ffd93658495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:d3:50:7f:6f:7c:e4:2b:59:44:de:bc:a7:
6a:77:57:82:2d:f3:d4:80:cb:f3:1a:a8:27:02:89:
81:e9:cc:89:af:6d:10:5b:d3:b0:0e:91:57:60:85:
c2:87:59:0e:33:ba:58:c5:d2:22:53:12:d0:a3:ed:
f2:82:74:e0:38:25:d4:21:94:f7:66:2f:a0:90:56:
45:79:87:9d:43:b8:7d:a5:fb:22:47:92:45:a6:7c:
6c:6e:20:33:92:43:58:31:1f:4e:f3:1d:29:cf:e8:
90:a9:5e:09:5a:99:fd:c6:be:ef:a4:04:c5:1c:e3:
23:0d:a0:08:c3:84:95:17:ca:85:81:94:96:9c:14:
b6:7b:cc:94:51:4d:69:b8:1c:d2:4e:14:f9:64:cb:
42:d6:4d:29:e1:c7:86:39:b3:cb:05:78:d0:dc:98:
43:f5:66:86:3a:5d:3d:44:bd:4c:a3:5d:1e:ec:aa:
99:81:f6:0d:f0:6b:53:67:56:93:66:b8:83:07:b8:
9e:ba:20:ac:95:8c:21:68:8c:d8:4a:7a:50:96:0e:
57:ee:5a:ba:a2:d6:34:a2:9f:96:6d:b0:f4:e7:fa:
2b:31:78:50:28:46:ee:d0:ab:d6:b6:89:7c:87:31:
a2:dd:d7:cc:d4:2b:a8:8c:b5:fb:17:00:9b:d6:50:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:92:4C:96:D8:A0:98:57:86:32:62:E2:BB:4F:FD:93:65:84:95
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.168.0-31.211.172.255
IPv6:
2a03:7360:1::/48
Signature Algorithm: sha256WithRSAEncryption
5e:ed:6e:f9:75:6c:1b:2e:8f:07:67:7a:a3:6d:df:dd:79:dc:
99:17:5d:a7:23:37:63:80:b5:f5:55:63:8c:20:5a:3a:ca:34:
d4:99:13:14:0a:b8:da:51:66:47:28:dd:d8:2f:bd:39:5d:d2:
14:49:bc:65:c3:01:ba:df:0c:d1:30:94:1d:a4:20:3a:6d:60:
58:f2:28:81:6d:06:61:66:dd:db:ab:0e:ea:6c:14:d4:87:2f:
91:02:3e:b9:6c:a0:9e:b2:8c:c7:35:46:5d:50:46:84:2e:4c:
8e:9d:cf:7c:7d:ce:56:fe:19:30:b1:46:f1:a2:ae:1b:49:8c:
da:e7:bc:b9:81:c6:d4:e2:a6:12:81:cb:14:70:af:07:8f:e2:
14:77:96:6e:8c:76:da:03:8f:c3:d0:5f:0c:05:c1:aa:ec:f2:
9d:4e:c7:6a:0f:2c:8f:a2:8b:6c:e5:6e:8a:f8:82:e1:d5:9f:
5f:bf:6f:c7:7e:12:6b:60:56:8c:24:1e:d5:0a:00:b4:41:28:
c0:a6:7c:1e:35:e0:af:31:21:d8:bb:9b:d8:f8:9e:d2:17:62:
1f:b2:e5:74:6f:ca:f3:e1:a0:d4:c8:0a:f9:03:e9:56:20:c2:
66:d2:c4:cf:28:8c:90:2a:d3:85:66:c4:89:d0:1b:73:9a:c8:
22:ca:45:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQi+0om7Unwk9f6JnnZh7cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjUwMTAxMTc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzRhOTI0Yzk2ZDhhMDk4NTc4NjMyNjJlMmJiNGZmZDkzNjU4NDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jLTUH9vfOQrWUTevKdqd1eCLfPU
gMvzGqgnAomB6cyJr20QW9OwDpFXYIXCh1kOM7pYxdIiUxLQo+3ygnTgOCXUIZT3
Zi+gkFZFeYedQ7h9pfsiR5JFpnxsbiAzkkNYMR9O8x0pz+iQqV4JWpn9xr7vpATF
HOMjDaAIw4SVF8qFgZSWnBS2e8yUUU1puBzSThT5ZMtC1k0p4ceGObPLBXjQ3JhD
9WaGOl09RL1Mo10e7KqZgfYN8GtTZ1aTZriDB7ieuiCslYwhaIzYSnpQlg5X7lq6
otY0op+WbbD05/orMXhQKEbu0KvWtol8hzGi3dfM1CuojLX7FwCb1lDSCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdKkkyW2KCYV4YyYuK7T/2TZYSVMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvOTBxU1RKYllvSmhYaGpKaTRydFBfWk5saEpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAMf06gD
BAAf06wwDwQCAAIwCQMHACoDc2AAATANBgkqhkiG9w0BAQsFAAOCAQEAXu1u+XVs
Gy6PB2d6o23f3XncmRddpyM3Y4C19VVjjCBaOso01JkTFAq42lFmRyjd2C+9OV3S
FEm8ZcMBut8M0TCUHaQgOm1gWPIogW0GYWbd26sO6mwU1IcvkQI+uWygnrKMxzVG
XVBGhC5Mjp3PfH3OVv4ZMLFG8aKuG0mM2ue8uYHG1OKmEoHLFHCvB4/iFHeWbox2
2gOPw9BfDAXBquzynU7Hag8sj6KLbOVuiviC4dWfX79vx34Sa2BWjCQe1QoAtEEo
wKZ8HjXgrzEh2Lub2Pie0hdiH7LldG/K8+Gg1MgK+QPpViDCZtLEzyiMkCrThWbE
idAbc5rIIspFVw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:30 2025 by rpki-client