Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/dnVM1cVOQmo9o53eHsEv3eXfeEM.roa
File: dnVM1cVOQmo9o53eHsEv3eXfeEM.roa (raw, json)
Hash identifier: h/M7g6bSmmEmFXClXRgmZ/cbukURXTiejXMMoqawhio=
Subject key identifier: 76:75:4C:D5:C5:4E:42:6A:3D:A3:9D:DE:1E:C1:2F:DD:E5:DF:78:43
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 0195DF4D254BADB98534B6F992289C914043
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/dnVM1cVOQmo9o53eHsEv3eXfeEM.roa
Signing time: Sat 29 Mar 2025 00:28:49 +0000
ROA not before: Sat 29 Mar 2025 00:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2639
IP address blocks: 31.186.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:4d:25:4b:ad:b9:85:34:b6:f9:92:28:9c:91:40:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Mar 29 00:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76754cd5c54e426a3da39dde1ec12fdde5df7843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:71:6f:d7:4e:44:5b:df:05:4b:97:2e:ef:
8d:e4:6f:a0:58:c8:6c:c3:4b:16:77:95:db:c4:7d:
51:ee:7a:ab:81:35:0d:8a:4d:b7:89:eb:ef:d0:91:
f3:b0:39:aa:19:f5:60:39:66:e6:65:31:fb:be:64:
1a:05:05:60:2a:ff:f4:60:a4:ab:13:7d:91:99:fe:
35:f9:95:f7:a8:b3:d4:fb:36:c7:1a:a8:5e:3c:93:
db:aa:db:f2:90:13:60:1d:52:78:ae:28:a4:62:9c:
f8:4e:70:9a:2e:ab:6e:b0:8f:95:2c:a6:09:d1:9f:
f0:fa:21:74:0a:a7:10:a2:d1:0d:ad:0b:6d:9a:74:
f8:e6:06:c1:2c:51:90:3a:65:39:d3:07:62:f2:08:
f4:c4:bc:6f:90:12:f1:d7:d6:62:0f:95:d0:10:57:
9e:17:2e:51:54:e0:c6:e9:35:bf:bb:d2:d1:e6:b0:
4b:81:31:92:02:fc:1c:08:61:4e:3b:d4:3d:ed:af:
bc:3f:a0:a5:af:35:d7:f6:4b:9f:df:4b:31:17:cb:
35:5e:b8:19:0d:b1:51:99:ec:32:b4:b5:b0:dd:6a:
01:b6:36:d7:7c:1b:27:85:02:98:d8:5b:96:80:5f:
e1:da:94:33:dd:c7:c2:24:1f:53:5b:b6:d5:c9:45:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:4C:D5:C5:4E:42:6A:3D:A3:9D:DE:1E:C1:2F:DD:E5:DF:78:43
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/dnVM1cVOQmo9o53eHsEv3eXfeEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.243.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fe:e7:ab:1b:3e:a3:b0:99:8a:e1:79:ed:87:25:f3:14:56:
15:71:06:3a:e5:63:6a:22:d9:90:30:b0:f9:cc:ad:a8:3a:f9:
78:60:6f:11:4f:f8:b6:eb:c0:8c:1c:45:65:96:7d:24:02:5c:
0f:a6:ee:a4:8e:08:1e:af:bd:03:04:c0:2d:cd:bb:4c:28:91:
ac:ef:17:bb:e5:6a:e2:41:7e:68:3e:87:dc:b0:1a:b3:d4:df:
97:43:11:ff:92:e2:41:d8:41:d2:64:ff:c1:64:e2:67:cd:00:
4a:54:9b:d3:77:a9:88:2f:1d:0f:65:51:b6:68:48:f6:be:ff:
34:d4:6a:94:93:1f:1f:2d:a7:66:07:27:3f:62:a9:89:83:ec:
58:4c:3c:a6:2a:ef:30:88:1d:50:34:fd:28:cb:ad:a3:e8:09:
34:86:77:af:41:13:a8:3f:79:19:51:d9:ac:62:7a:1b:67:90:
26:ed:34:ff:43:85:94:f2:14:0b:ee:6a:98:f0:70:9b:4e:35:
9f:7b:0e:ae:e2:da:9a:68:98:5b:41:a2:5c:78:a4:b0:f6:1b:
83:9d:7b:a2:6a:f3:49:84:1a:6b:df:f1:32:9e:a7:95:7d:b0:
84:40:e6:6d:ab:9d:6c:31:de:0d:21:97:ea:2c:2f:1d:bd:66:
32:74:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:26 2025 by rpki-client