Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FXwS1usM9Gw8btRI8PnsNDkj9_4.roa
File: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (raw, json)
Hash identifier: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=
Subject key identifier: 15:7C:12:D6:EB:0C:F4:6C:3C:6E:D4:48:F0:F9:EC:34:39:23:F7:FE
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC17B40A7E136979C0843F93122BE1
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FXwS1usM9Gw8btRI8PnsNDkj9_4.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61352
IP address blocks: 31.12.56.0/21 maxlen: 21
2a02:101c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:17:b4:0a:7e:13:69:79:c0:84:3f:93:12:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=157c12d6eb0cf46c3c6ed448f0f9ec343923f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:8d:48:a1:ea:08:d6:f3:21:76:5b:61:c7:
35:ff:ba:83:5d:76:54:33:1f:65:18:cd:ae:cd:93:
b3:f5:bf:d8:09:f6:21:f4:3d:aa:00:6f:03:53:8b:
ae:77:db:99:9d:df:7b:c3:8e:4f:aa:2e:c2:26:a0:
e9:ba:61:15:bc:86:d5:37:d9:69:61:4d:b7:4a:7c:
ca:0a:9a:8a:35:23:47:8b:c9:3f:f9:7b:ea:fa:68:
07:15:f1:bb:0e:1a:e6:a0:77:4e:6c:d4:97:07:0f:
8b:6b:ef:73:5d:ba:2e:97:4a:46:d9:c5:65:ba:ed:
35:46:aa:ed:d1:73:8e:a4:23:41:0c:85:ab:21:84:
20:b8:8d:96:d2:10:03:27:7a:44:71:a3:20:67:e7:
5f:f8:6b:21:f2:3f:ce:22:66:e0:ab:d3:ef:f7:f0:
f2:f1:1b:a1:16:9a:14:c1:1c:aa:43:4d:07:bb:8e:
62:41:ce:bd:94:d7:3e:9f:1f:09:9a:06:3c:2f:4e:
8e:e5:f0:a1:17:75:61:3b:e1:f7:36:6c:fe:a7:bd:
98:91:ad:55:9f:72:30:b4:03:c9:c7:77:01:3a:51:
93:4b:84:3c:60:5f:f6:6f:6a:c7:dc:8e:2a:a8:76:
b3:93:76:c6:18:41:18:4e:e1:47:c3:1b:5e:a0:25:
ea:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7C:12:D6:EB:0C:F4:6C:3C:6E:D4:48:F0:F9:EC:34:39:23:F7:FE
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/FXwS1usM9Gw8btRI8PnsNDkj9_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.12.56.0/21
IPv6:
2a02:101c::/32
Signature Algorithm: sha256WithRSAEncryption
29:09:85:95:28:40:55:7e:8a:79:32:16:77:25:42:43:63:66:
f4:60:8c:67:88:a3:a0:14:ec:51:48:df:ea:23:7e:7e:9b:ce:
38:c4:ed:a5:48:0c:7b:e3:b4:74:ae:85:9f:94:be:a9:df:ba:
24:15:ee:fc:18:b2:af:dd:ad:3a:39:e8:0c:bb:a2:b2:6d:bf:
56:a1:4f:ae:ec:81:ae:07:96:5c:fb:d5:39:c8:01:64:0b:b3:
95:14:56:fc:12:93:e9:d6:58:0a:a0:77:5b:0e:5e:db:ee:f5:
34:d5:87:46:7c:78:a6:c9:62:20:36:23:bc:e7:29:e3:78:d2:
b0:a1:3d:0a:91:7b:d3:8a:f9:66:0b:04:ac:08:af:1c:1f:8f:
b7:9b:a4:16:3d:c5:34:51:1f:ba:5d:b9:69:fc:94:a2:09:a0:
f5:d9:48:fe:b0:e0:4b:ce:e9:da:d8:6b:7c:49:de:79:9f:6e:
d3:85:44:d4:e4:70:74:1a:8c:d4:e1:77:cb:b4:67:93:60:74:
2c:8e:ff:4f:c2:61:f2:99:47:9a:8b:db:6e:1c:38:55:b1:1d:
6e:16:d7:e7:b4:08:77:45:2f:e3:4c:91:50:1b:80:81:c9:09:
da:13:2a:76:2f:57:ea:75:8f:77:d8:6d:75:2d:91:82:2b:1d:
e2:da:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:14:57 2025 by rpki-client