Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/LARL1hIKcaD4vW3zR5MLoEhaFxc.roa
File: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (raw, json)
Hash identifier: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=
Subject key identifier: 2C:04:4B:D6:12:0A:71:A0:F8:BD:6D:F3:47:93:0B:A0:48:5A:17:17
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 019423D7F3E7E659A5F5C9B9724E96263344
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/LARL1hIKcaD4vW3zR5MLoEhaFxc.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.14.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f3:e7:e6:59:a5:f5:c9:b9:72:4e:96:26:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c044bd6120a71a0f8bd6df347930ba0485a1717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:fe:51:26:27:60:10:83:2f:25:80:e0:72:
7d:fc:2e:6c:df:05:e2:90:63:01:6a:6a:5d:3c:ac:
25:ba:52:dd:ec:8b:c7:86:78:35:a8:ee:c3:1c:6d:
62:7f:46:f9:26:54:09:dd:04:69:02:d5:3c:00:50:
bb:36:95:28:84:73:df:8e:19:26:15:bd:51:ab:6f:
dd:69:58:25:e5:e6:2b:32:f4:e8:47:fe:54:04:ea:
a7:36:64:2a:73:dd:8a:4b:51:e6:88:84:55:16:a2:
13:a5:92:31:08:cc:91:60:69:c6:8e:f4:d8:f9:9d:
c5:90:d7:21:50:aa:67:54:0d:d2:61:72:4e:52:86:
eb:43:02:e0:48:28:ae:58:cf:62:6d:21:ab:e0:b4:
b8:5e:61:1e:72:38:22:bf:2c:cd:96:e2:83:c7:9b:
28:89:e1:6b:37:8c:07:d8:aa:b0:11:5f:ed:89:2b:
ab:2b:44:77:90:02:12:43:f0:ea:a1:2d:60:ab:b0:
1f:09:b0:36:4f:9f:04:75:3c:56:c0:1e:ef:ab:2a:
81:ec:2b:98:e4:d6:63:ce:76:68:9a:a5:41:0b:a4:
40:6c:a8:27:20:b6:63:13:6f:31:fe:40:8c:af:32:
2f:82:9b:8d:97:c7:04:ee:39:80:70:58:24:df:17:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:4B:D6:12:0A:71:A0:F8:BD:6D:F3:47:93:0B:A0:48:5A:17:17
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/LARL1hIKcaD4vW3zR5MLoEhaFxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.31.0/24
Signature Algorithm: sha256WithRSAEncryption
09:52:91:e0:79:c5:ce:6c:cb:e6:2f:1c:b6:6f:7e:62:63:da:
ce:8d:ed:cb:18:0d:92:80:70:08:cd:a8:5c:54:91:2f:9a:ab:
b5:b0:70:48:76:36:53:de:6a:37:e5:2f:1c:e1:85:86:51:85:
5f:8a:a6:2c:fc:9b:eb:4c:37:92:ad:74:08:ae:61:0e:b5:36:
12:02:40:48:38:5b:7f:f6:14:ea:af:e9:1a:c6:84:1e:c1:73:
db:1d:23:62:df:0f:68:07:10:25:ab:b1:80:d4:4f:3a:42:f9:
9e:f4:1d:8c:62:3e:63:69:68:10:59:24:48:46:cb:1d:d0:9a:
43:b1:88:0f:a6:1f:cc:16:0f:7a:a3:25:a5:63:3a:2d:87:d2:
95:a3:dc:6b:24:8c:67:a4:05:2c:ad:70:bc:9c:5b:cf:d8:aa:
e2:2a:ed:25:a0:c2:b9:b1:17:f1:b9:9e:e0:98:34:d7:d3:84:
ab:88:24:5d:99:7b:39:d1:8b:e7:77:17:f8:8d:76:69:a1:3e:
a3:6d:bd:e9:21:44:bd:f3:25:d0:3b:e2:37:4f:3c:9f:dc:4d:
4a:72:28:13:4f:d9:63:49:68:7f:b2:6a:5a:3f:62:e3:93:11:
5f:8a:f3:df:4e:a1:fc:8c:0e:96:8d:fe:c9:4d:c9:9b:a6:29:
3e:7e:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:45:00 2025 by rpki-client