Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/TTEx5Tf_ryhhBEghXe_juH2H65U.roa
File: TTEx5Tf_ryhhBEghXe_juH2H65U.roa (raw, json)
Hash identifier: 6yFkwOTsWr11Au8Jovaobg2AJZpMXPDe7vY/stuVAs4=
Subject key identifier: 4D:31:31:E5:37:FF:AF:28:61:04:48:21:5D:EF:E3:B8:7D:87:EB:95
Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Certificate serial: 019422FB9BFBE3FCF24B33C371862B0CDD19
Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/TTEx5Tf_ryhhBEghXe_juH2H65U.roa
Signing time: Wed 01 Jan 2025 17:48:22 +0000
ROA not before: Wed 01 Jan 2025 17:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216269
IP address blocks: 31.172.172.0/22 maxlen: 24
2a13:eac0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:9b:fb:e3:fc:f2:4b:33:c3:71:86:2b:0c:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e
Validity
Not Before: Jan 1 17:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d3131e537ffaf28610448215defe3b87d87eb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:c2:aa:df:41:4a:ce:b2:5b:cd:0a:29:92:
36:51:d8:94:55:84:73:34:7f:ab:c6:b9:f7:5c:b7:
b1:64:d8:73:27:84:28:81:8c:c4:da:c0:e8:01:c6:
a2:06:ac:df:97:64:4f:71:f1:0d:e8:77:f6:9a:63:
de:66:7d:64:03:4c:07:b7:18:48:f8:74:76:c6:b6:
2a:8c:29:35:5a:c2:95:f1:dd:9c:c9:24:b1:3a:3d:
37:6c:87:6a:d0:b0:4f:7a:97:ea:07:fc:e3:a5:72:
a0:b3:ce:a6:d0:1b:59:49:5a:af:bf:6f:95:d3:27:
1e:98:ae:29:a8:1d:d1:98:65:a3:57:80:9e:ee:83:
0c:ed:a1:fd:d2:44:88:31:58:ae:c1:9e:7d:38:34:
36:2e:0c:0d:f5:70:ab:9e:02:64:d8:8f:66:a7:96:
e7:28:9e:0a:1e:6a:40:dd:59:ad:7a:23:b8:d1:d9:
95:b1:fd:97:e4:f5:54:57:b4:6e:96:e2:24:1b:36:
50:89:d3:d5:df:21:34:6f:25:61:f6:0b:7b:b9:47:
dc:05:4b:3a:a8:a3:da:29:de:f7:fc:7c:d3:69:c3:
a4:2b:49:1b:62:c4:b3:74:d6:cf:ee:6b:58:73:14:
ac:7e:dd:ef:1c:55:f5:57:08:ad:69:47:30:48:75:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:31:E5:37:FF:AF:28:61:04:48:21:5D:EF:E3:B8:7D:87:EB:95
X509v3 Authority Key Identifier:
keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/TTEx5Tf_ryhhBEghXe_juH2H65U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.172.0/22
IPv6:
2a13:eac0::/29
Signature Algorithm: sha256WithRSAEncryption
19:65:da:74:de:0b:a9:b6:f5:35:0d:4c:c8:99:0d:f0:96:da:
35:64:33:a9:d5:be:d6:ba:02:24:f7:49:e6:0b:75:d5:ae:f3:
c9:84:53:28:6e:3a:d6:a1:1d:bb:d2:5f:17:de:ef:5c:1d:1e:
64:eb:18:e0:d2:ff:f6:38:44:df:39:d8:62:1c:ed:9b:18:b1:
43:31:b2:7c:a4:1d:7b:d5:97:16:79:7a:6a:d7:27:72:96:9e:
b9:7c:17:bf:be:50:d3:d6:55:84:ec:bc:56:71:17:f0:35:7b:
ec:65:27:4e:fc:0f:fd:4a:12:aa:82:94:1e:19:cc:71:97:64:
78:a2:9c:ba:ab:25:de:ed:b4:17:3a:ac:20:3a:96:f1:8f:f7:
ab:c2:94:7b:6e:c0:54:92:91:a3:ee:d7:c3:2a:60:92:09:57:
73:9c:32:54:99:cf:80:2e:42:a6:70:0d:4c:05:d6:bb:e1:7d:
c7:f7:9a:f6:cb:3f:a9:f7:a5:99:cb:8d:51:a7:62:ab:04:e7:
aa:be:d9:ea:c7:cc:e9:81:5b:02:60:24:bd:5d:ca:58:fb:09:
88:a2:99:9d:ed:aa:ca:07:02:cc:51:31:ed:f7:f6:f4:32:d5:
c7:f3:1c:8a:e2:02:30:b8:89:c8:d6:f5:65:05:ed:21:d7:cb:
00:5b:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:29:46 2025 by rpki-client