Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/axw8eTRN4luwNfUppGZPJDLFRnk.roa
File: axw8eTRN4luwNfUppGZPJDLFRnk.roa (raw, json)
Hash identifier: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=
Subject key identifier: 6B:1C:3C:79:34:4D:E2:5B:B0:35:F5:29:A4:66:4F:24:32:C5:46:79
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 019427B4B7A5E7B40DB763FB5E2A466D353C
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/axw8eTRN4luwNfUppGZPJDLFRnk.roa
Signing time: Thu 02 Jan 2025 15:49:02 +0000
ROA not before: Thu 02 Jan 2025 15:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203055
IP address blocks: 31.216.144.0/21 maxlen: 24
89.44.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:b7:a5:e7:b4:0d:b7:63:fb:5e:2a:46:6d:35:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Jan 2 15:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b1c3c79344de25bb035f529a4664f2432c54679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:6a:d0:0f:e3:a0:c3:53:a0:59:65:11:e6:
78:9d:87:0b:c4:8d:74:fb:18:01:5c:d5:d6:f1:a9:
5b:0f:d0:1f:c7:23:9a:df:31:61:73:7d:c1:a7:3e:
b3:da:29:43:b9:20:52:d0:40:5d:15:40:31:d3:6a:
6d:8d:32:74:ba:d8:16:7d:38:ae:fe:ee:44:8d:8d:
77:7a:ad:93:8c:65:39:7f:d2:2b:4c:4c:a2:44:76:
1a:51:12:a7:a0:95:93:49:34:5e:90:51:65:fe:71:
ed:16:9c:3c:06:ad:18:6f:b7:16:18:f2:53:69:28:
97:31:26:ae:b0:78:5a:be:ad:c1:eb:ea:24:c8:82:
59:b9:c3:e3:77:d6:c2:b3:5e:f7:63:b3:65:51:83:
8f:ae:be:f2:6e:bc:48:6e:f3:b0:ca:3b:8b:eb:e5:
b6:a0:a9:09:b2:98:ed:79:f6:97:21:c0:69:0d:e4:
8d:be:9e:d6:c8:76:74:7c:89:4d:0f:98:f9:76:60:
d7:2f:d0:a6:32:9a:80:5e:ff:b8:b9:a4:da:35:c8:
58:d0:cc:54:56:53:bf:cf:ea:86:d3:c0:bc:b0:b7:
af:d3:b1:de:fb:d0:f6:99:1b:73:3f:30:82:8f:b6:
29:e0:4f:85:63:94:d5:3b:d1:b4:79:1a:13:cd:34:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:3C:79:34:4D:E2:5B:B0:35:F5:29:A4:66:4F:24:32:C5:46:79
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/axw8eTRN4luwNfUppGZPJDLFRnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.144.0/21
89.44.168.0/21
Signature Algorithm: sha256WithRSAEncryption
66:04:8e:76:16:62:90:2b:fe:67:a0:0d:06:e7:e0:72:6b:6e:
ad:8e:50:d8:31:c2:56:a1:51:1d:c5:27:be:72:fb:9e:63:9a:
78:ea:13:e2:e1:ea:3c:e6:c0:a5:5f:12:48:f1:2c:b6:69:52:
29:84:3d:b2:bf:e5:ff:c0:37:b4:10:af:96:31:f2:1f:4d:f4:
dc:88:36:dd:ba:92:68:8f:07:01:68:dd:57:c6:f6:31:c6:38:
48:d0:d2:ff:fe:19:f9:b5:4d:0d:bf:fd:4a:ca:aa:7b:78:98:
ee:d5:89:f6:74:48:ac:2b:3b:1f:ba:ec:49:ea:8f:de:f4:f4:
ea:fd:9c:73:58:9e:fc:55:ba:4d:7f:14:1c:80:da:c0:b5:a3:
6e:70:68:96:d0:d9:5e:55:fe:fd:c0:d3:1b:74:78:06:9a:f7:
e3:96:c4:14:9b:de:27:25:a2:8d:ef:c2:ba:a9:0b:8d:df:02:
62:12:62:56:03:71:63:8c:16:4a:55:01:e6:ba:ff:6b:a9:c6:
d9:54:c1:30:9b:96:a1:6b:f8:75:17:18:34:4d:f2:b8:18:78:
0d:82:e6:fb:09:56:bf:a1:5a:96:d4:43:6d:e2:9c:e3:23:1d:
b7:28:bd:0b:f5:0f:db:7f:64:34:2e:cb:6e:75:39:5e:99:ee:
e2:e7:5a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:44 2025 by rpki-client