Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa
File: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (raw, json)
Hash identifier: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=
Subject key identifier: 69:1B:8E:38:2B:71:D4:F3:0D:75:5B:ED:DA:71:C6:98:A0:C9:B3:73
Certificate issuer: /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial: 01942522376C26C0A989014BD1E8B31839FB
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa
Signing time: Thu 02 Jan 2025 03:49:46 +0000
ROA not before: Thu 02 Jan 2025 03:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142113
IP address blocks: 2.56.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:37:6c:26:c0:a9:89:01:4b:d1:e8:b3:18:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
Validity
Not Before: Jan 2 03:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=691b8e382b71d4f30d755bedda71c698a0c9b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9d:71:f5:8c:80:b4:37:dd:3b:4b:ad:11:fc:
92:40:7d:06:1d:b0:6f:1e:9d:c2:c3:49:8e:fa:19:
d4:5a:b4:bd:15:43:1c:79:3c:9d:d8:fe:af:90:3d:
b9:ac:30:da:ce:57:61:07:ec:97:b2:73:a0:9f:8f:
a3:6b:02:27:98:a6:02:21:d2:3b:ed:36:40:3f:2a:
21:30:a8:05:e5:d9:0b:a4:12:d2:ba:e9:9b:37:3d:
cb:35:2d:bf:8e:1a:84:dc:04:18:33:8d:de:73:df:
5d:c2:29:41:da:80:42:be:7b:c6:fc:5b:c1:9b:3d:
f3:bd:b4:d9:eb:d4:7b:ac:bf:eb:cd:a4:c8:45:7f:
6e:c2:13:74:8b:4c:ba:f2:00:2d:2b:b3:24:d5:33:
61:d0:69:95:c0:1c:d2:1b:cb:01:58:02:d8:80:e3:
a1:05:3e:f2:b7:dc:99:34:3f:53:3b:cf:3e:78:d4:
0e:1e:e8:2b:89:06:80:22:5c:cd:42:46:54:e0:e8:
fd:c8:86:a7:37:d9:4e:ae:07:1d:19:81:cd:4a:39:
65:2a:38:f6:9d:ef:96:31:44:31:1c:3f:b9:64:6c:
72:93:1d:ae:d2:9f:96:e6:95:b6:14:f7:f2:5e:d0:
a6:17:1e:63:f9:53:83:dd:66:23:8b:b7:2e:06:cc:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:8E:38:2B:71:D4:F3:0D:75:5B:ED:DA:71:C6:98:A0:C9:B3:73
X509v3 Authority Key Identifier:
keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.91.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7e:31:af:11:c2:b9:68:2e:6d:3c:60:53:54:de:09:2d:7a:
9d:46:0f:8b:c9:ec:0e:0d:9d:8b:94:3f:34:a4:a9:fc:93:18:
99:0b:95:0c:d1:ba:d6:73:f1:16:3f:dd:a3:7c:9a:fc:85:93:
67:6e:75:43:26:31:99:ba:27:f6:d3:c5:b2:7b:0f:06:ea:43:
d9:40:53:e5:6e:62:b0:76:4f:42:cd:04:77:fd:18:b0:28:c2:
ac:43:8a:6a:8b:59:25:32:eb:9b:ad:dd:22:c8:f6:ce:63:b2:
ca:a3:4c:1f:b6:07:8c:9c:01:1a:86:9d:d2:de:c9:79:a6:bf:
ca:79:56:52:7a:13:4c:67:9a:33:1a:25:d4:73:7a:23:2f:f4:
12:cb:d0:35:dd:87:76:44:fd:be:e1:64:dd:93:fa:9c:5e:75:
af:df:3c:5d:96:06:e2:33:5c:10:3f:c3:8e:c8:33:9c:98:d8:
a9:a4:ab:02:e5:2a:1d:00:b8:83:42:9f:2c:a2:8c:89:6f:8b:
51:25:22:44:7c:16:99:27:17:73:63:82:f8:b3:e2:27:9e:c9:
27:14:1a:d4:65:f8:1b:27:c1:52:1f:6b:8d:97:72:14:3a:18:
1e:2d:f1:68:f2:d1:2b:c9:c4:88:18:44:1c:96:85:f0:f2:93:
b6:13:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:23:00 2025 by rpki-client