Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/FhZd88jZ9jh03466aEP-twQcEMw.roa
File: FhZd88jZ9jh03466aEP-twQcEMw.roa (raw, json)
Hash identifier: GqVz3280439YQWP+4ZwFNVQsgWkyoEgtpCqfdDxqe8Y=
Subject key identifier: 16:16:5D:F3:C8:D9:F6:38:74:DF:8E:BA:68:43:FE:B7:04:1C:10:CC
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 019421441B0477375469D83ADDADFBEEB7F3
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/FhZd88jZ9jh03466aEP-twQcEMw.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.171.211.0/24 maxlen: 24
31.171.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:1b:04:77:37:54:69:d8:3a:dd:ad:fb:ee:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16165df3c8d9f63874df8eba6843feb7041c10cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:90:99:0a:f0:35:db:d1:b0:8a:86:bf:b2:
65:c5:bd:0b:86:04:46:d5:86:0f:11:4d:3d:46:d2:
99:3a:45:91:25:94:49:64:af:cc:d5:40:0c:30:d0:
2e:75:66:4e:31:f9:36:1f:72:e1:3f:b9:d7:13:d5:
9f:ac:42:1c:cb:5a:31:c4:b7:fb:58:b3:88:22:99:
47:c0:22:cb:06:dd:c2:90:10:f9:c0:03:da:df:1a:
15:73:70:3b:1b:3a:65:3c:1a:b6:9d:a5:a2:84:87:
b3:ad:4f:0b:f3:03:15:00:cc:48:24:b6:bc:48:ff:
b7:60:29:a0:a6:b1:c7:da:25:e3:45:37:14:63:52:
50:34:f2:af:38:4d:56:5c:4c:98:92:71:28:11:45:
00:7e:cb:cb:4d:2d:51:7e:db:b5:ce:4d:ca:16:02:
a3:00:12:75:a5:13:4e:0b:01:99:6f:c6:0b:1e:3b:
89:22:ff:ae:5e:d6:00:a0:25:9b:9b:11:61:f5:9d:
e0:3e:86:0d:a6:e6:ef:16:39:d2:52:21:69:41:21:
1b:e2:7f:15:06:1a:e6:76:70:42:cc:9d:21:06:9b:
c1:9d:2d:63:94:d2:71:93:ee:b0:8d:b9:e4:de:e0:
3c:d3:9d:a8:08:86:ee:97:77:40:30:c2:a2:d9:9d:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:5D:F3:C8:D9:F6:38:74:DF:8E:BA:68:43:FE:B7:04:1C:10:CC
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/FhZd88jZ9jh03466aEP-twQcEMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
a5:44:ef:3c:ed:c3:2d:8f:3d:e2:b3:4c:53:c4:b2:84:28:a8:
f2:11:b8:e3:54:2c:14:6d:7b:44:52:8c:a6:1a:1f:c4:b8:15:
b7:b4:a9:42:f3:68:cf:93:c0:c4:f9:09:1f:43:75:b4:b0:9b:
45:71:c6:85:68:90:e3:f5:e8:cd:fa:45:95:ab:47:3f:f6:e4:
f9:f1:15:5b:0e:51:44:c2:07:c2:83:9f:65:9f:66:3a:da:31:
29:25:39:91:ca:1f:f6:f0:f9:da:3b:fb:00:64:8e:64:c1:14:
72:e7:f2:27:84:02:f1:1a:67:28:65:bf:34:db:69:9e:a9:ba:
57:8b:82:ad:69:db:41:46:bd:5f:c5:9e:0f:2d:b3:b3:0c:67:
aa:eb:60:b9:b8:d3:9e:c2:a4:2b:e6:cf:9b:e0:2c:03:b5:22:
42:7a:2b:83:e8:fb:7e:87:4f:fe:1d:43:fd:cb:9d:d7:c5:82:
de:f5:93:a6:fa:f7:3e:80:83:a9:8f:07:e3:2c:d9:e2:73:6c:
8b:f5:bf:98:fc:ac:bc:35:5d:74:db:fe:3f:59:1d:79:56:eb:
82:a2:f0:0c:31:ae:07:08:e3:c1:5b:37:9b:c3:87:70:cb:42:
8b:3d:d3:cc:aa:61:c2:e6:4a:40:77:3b:7d:f3:d5:71:02:30:
96:0a:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:33 2025 by rpki-client