Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nytPIUYQ48QhDLlfVIi6pB18SwQ.roa
File: nytPIUYQ48QhDLlfVIi6pB18SwQ.roa (raw, json)
Hash identifier: 3LFgebPoNXiMAwsZ07ED/DZ73Cy6wJRysoaaEC5cNnA=
Subject key identifier: 9F:2B:4F:21:46:10:E3:C4:21:0C:B9:5F:54:88:BA:A4:1D:7C:4B:04
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195D18DDBF9B88A7794F6A2848439D599D0
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nytPIUYQ48QhDLlfVIi6pB18SwQ.roa
Signing time: Wed 26 Mar 2025 08:24:49 +0000
ROA not before: Wed 26 Mar 2025 08:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 31.42.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:8d:db:f9:b8:8a:77:94:f6:a2:84:84:39:d5:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 26 08:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2b4f214610e3c4210cb95f5488baa41d7c4b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:94:ad:53:f0:81:7e:d8:44:a1:3f:09:03:
fa:d4:55:e3:a1:94:c2:7d:0a:8d:82:1b:24:40:32:
cd:8a:43:93:cf:d6:8e:08:66:ec:16:47:35:0b:b5:
c7:fc:f0:91:0d:e9:9c:a3:e9:c6:00:d0:87:51:78:
b5:af:46:48:4a:43:9f:7f:aa:7e:b4:66:43:e7:5e:
c3:96:5e:f0:98:e8:98:46:74:ac:a6:18:9e:76:25:
86:36:c1:ab:a0:d0:1b:49:d9:bc:00:fa:2e:3d:7f:
d2:71:b3:15:4a:08:df:28:96:d2:fc:b5:14:94:41:
24:f6:17:f2:de:88:56:79:7b:a6:c4:9b:1e:5b:55:
0f:b9:9c:dc:d0:d4:7c:c7:1c:d9:a6:5e:01:5d:11:
10:fe:03:ae:0e:5b:7b:e9:e3:9e:41:88:e1:ce:2a:
97:b9:68:96:8f:fe:26:65:37:f7:8b:94:59:80:a4:
19:a4:c3:95:7e:1c:ca:4c:44:ed:18:26:45:aa:83:
bc:c4:66:b3:4c:b4:c5:c8:f6:56:8d:07:4d:47:35:
ec:51:f1:a3:1f:4b:13:ad:14:24:1d:06:55:eb:08:
c6:1a:9a:3d:b0:98:8a:44:b4:1e:e1:14:f0:8f:73:
43:b6:10:91:fe:f3:66:f9:85:f8:64:36:90:b3:a1:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:4F:21:46:10:E3:C4:21:0C:B9:5F:54:88:BA:A4:1D:7C:4B:04
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/nytPIUYQ48QhDLlfVIi6pB18SwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.127.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b1:a4:d5:33:29:35:5f:79:e7:f9:61:55:72:a9:26:ab:b9:
ab:98:73:0b:01:d9:63:68:c1:74:50:94:90:dc:b0:73:4e:dc:
10:e5:0d:59:bb:9e:7f:03:81:26:b2:73:f6:22:20:59:12:0d:
5f:38:19:7b:0d:96:ae:26:84:fa:83:e5:34:d9:9e:33:2a:7e:
3c:18:cd:59:6f:52:02:c1:38:3a:9a:1f:6e:02:69:b5:35:4b:
8f:b7:b0:4e:24:ab:bf:49:53:ea:2c:b5:d8:d6:99:2a:e3:a1:
d8:6c:68:d7:3d:f9:51:f2:d9:82:6f:2a:82:c7:a5:67:f8:87:
8b:10:d4:29:25:91:07:91:0f:9f:47:24:c4:74:7e:00:13:21:
10:b4:33:da:3c:3c:83:85:c9:9c:17:10:4a:ae:77:f9:e5:2c:
15:1a:c0:d2:b4:0e:3b:ec:d2:00:e0:38:bc:e6:4d:88:22:ce:
86:12:f0:3f:2c:e9:f2:b1:02:aa:b4:26:25:ad:e8:b1:d6:ab:
4d:38:a0:70:d9:4c:af:6c:77:92:12:83:1b:3a:d3:9d:8d:a2:
63:18:14:83:e6:8c:66:ab:53:2d:0f:5b:7e:7b:01:99:7d:ba:
d8:86:0d:b2:34:93:70:bd:c8:7d:63:8e:61:5c:0c:1a:29:a3:
12:84:00:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:42:28 2025 by rpki-client