Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/DIa5pw00VBuzd8TnmLxOAmAN6Io.roa
File: DIa5pw00VBuzd8TnmLxOAmAN6Io.roa (raw, json)
Hash identifier: X2ZL9HHT+jpKG7EXK5mDhvGY1GOQw7aFu6sUd6IVFrk=
Subject key identifier: 0C:86:B9:A7:0D:34:54:1B:B3:77:C4:E7:98:BC:4E:02:60:0D:E8:8A
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 01941FFA1A49F48073D6B85623EB72F0A87A
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/DIa5pw00VBuzd8TnmLxOAmAN6Io.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21453
IP address blocks: 31.31.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1a:49:f4:80:73:d6:b8:56:23:eb:72:f0:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c86b9a70d34541bb377c4e798bc4e02600de88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2f:5f:ee:df:b5:36:48:cb:1a:e0:01:61:69:
80:6e:94:df:a3:b6:15:b2:5d:2c:6f:2e:c6:52:f6:
42:42:ce:1d:12:bc:23:e8:ea:25:ba:8d:7b:08:37:
a0:3f:77:a0:e5:96:87:bc:db:74:4a:bb:73:07:c7:
dc:81:91:17:42:2f:a8:a1:4e:57:2d:b5:bd:45:5e:
1b:3a:7a:5d:ad:65:b4:94:25:b1:0c:fb:66:96:ee:
c0:1e:fa:1b:19:9a:5c:71:ba:c6:4a:52:81:43:1d:
61:a0:31:4d:fd:7f:72:16:2e:f5:38:8a:2d:d8:11:
98:a3:7a:d3:9f:fc:a3:38:71:61:20:1a:8e:16:3e:
79:a8:cd:94:3c:b5:4c:9b:b7:17:67:84:41:11:af:
d4:4f:8b:3b:c6:b4:a8:d2:52:44:0a:d3:68:e5:fe:
bd:96:5b:88:b9:b2:e1:95:75:7d:29:ab:91:de:f5:
cb:e0:2b:d5:05:09:4c:5b:5f:c8:96:d2:57:9d:08:
5f:c4:18:18:c5:9b:d9:e1:cb:d8:e5:8e:17:60:5e:
83:6f:d5:4c:23:6d:3b:c4:59:c9:68:1f:f2:80:83:
1e:85:50:09:92:e9:9e:31:05:7c:c2:83:14:c0:26:
0c:ae:68:2a:63:64:74:ec:53:d2:bc:4c:6c:15:5c:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:86:B9:A7:0D:34:54:1B:B3:77:C4:E7:98:BC:4E:02:60:0D:E8:8A
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/DIa5pw00VBuzd8TnmLxOAmAN6Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.64.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:fc:85:67:0b:af:e2:9f:18:f7:da:ec:32:5e:2c:39:87:23:
46:87:6d:e0:f6:95:e9:74:1f:78:06:98:e8:8a:b4:07:a6:76:
45:91:c2:98:a6:92:a7:ae:b5:39:15:3a:cd:8c:ff:3e:75:4b:
c2:0a:9a:a1:80:d5:8b:40:44:75:05:b0:76:a7:94:ee:bf:11:
2c:2b:97:ff:06:01:2d:b2:5f:99:5a:7a:0e:c7:12:33:0f:15:
90:ab:ff:d7:be:24:47:2c:b0:b9:b2:b1:70:11:0d:db:f0:6d:
21:ec:14:bd:d9:33:8f:be:d2:1c:ea:15:3a:84:f5:ac:9e:b4:
d2:c9:0f:6b:6d:e0:70:b6:d7:7a:03:28:21:74:89:a8:65:b7:
43:8e:3d:20:39:61:6d:e1:c9:c9:d8:58:8f:fd:87:60:25:73:
d3:bf:e4:79:ef:a2:52:04:57:bf:b9:66:16:36:e9:6a:39:83:
97:01:9f:83:1d:2a:c0:a5:d3:4e:27:1b:f3:d0:04:64:19:3c:
c5:2d:85:8b:aa:cf:9c:2c:ea:c5:3c:83:1c:76:d5:ac:3e:0c:
77:be:33:5a:f3:36:59:7a:bb:9d:41:9c:bd:dd:dc:25:a3:ea:
b4:6e:ec:d9:5f:c2:90:76:0d:0e:ce:e4:95:b0:3f:b6:1f:98:
13:06:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:02 2025 by rpki-client