Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pWkVhfdoXodx06q42F92Ym4ST48.roa
File: pWkVhfdoXodx06q42F92Ym4ST48.roa (raw, json)
Hash identifier: seFq9xzJF5va54Uo5XTcEVA8+ylOyxEDLWT3hjeT9QI=
Subject key identifier: A5:69:15:85:F7:68:5E:87:71:D3:AA:B8:D8:5F:76:62:6E:12:4F:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824787F9B32ACEE8FA8D5C7D4D42631
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pWkVhfdoXodx06q42F92Ym4ST48.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42794
IP address blocks: 31.13.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:78:7f:9b:32:ac:ee:8f:a8:d5:c7:d4:d4:26:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5691585f7685e8771d3aab8d85f76626e124f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:b1:ac:f5:e1:a4:55:d8:90:49:32:ac:3b:
45:b3:8f:b5:2d:0e:9f:f2:55:52:12:1a:fa:a2:01:
d4:c1:95:5f:65:60:a4:07:d8:74:13:99:bd:ff:35:
46:ce:68:9d:8f:60:ca:20:fa:52:ae:06:b3:f6:bb:
84:b1:b2:5c:d9:95:9d:92:15:b7:a9:f1:5e:47:8c:
5b:44:52:46:d9:97:c4:a3:6d:7b:b3:99:ec:7a:68:
99:e2:3e:28:e8:40:5a:56:5b:25:e5:e7:e0:7b:46:
05:ab:f1:76:36:39:b5:3e:bb:07:d2:7a:ab:d3:d2:
36:15:32:ba:48:cf:1c:eb:63:38:71:76:c5:ae:48:
03:bf:a3:2e:6f:85:97:2d:02:96:ea:8a:16:6f:90:
66:1e:ae:68:71:2b:47:53:20:ff:34:30:a6:df:8e:
f1:f2:ba:83:f6:24:d6:7b:1e:cd:d0:e0:9f:71:a1:
36:60:0b:24:6a:e8:6a:c7:a7:81:18:cf:02:75:8b:
79:f5:51:5c:25:b4:fe:fc:60:13:ad:1f:51:68:24:
f4:c5:77:17:57:6f:12:00:6a:c2:38:24:04:62:28:
ed:2f:ad:30:19:f2:46:c9:25:73:72:fa:03:22:79:
5b:bc:e4:69:34:9f:ca:1b:78:14:33:51:8e:03:be:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:15:85:F7:68:5E:87:71:D3:AA:B8:D8:5F:76:62:6E:12:4F:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pWkVhfdoXodx06q42F92Ym4ST48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.198.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a5:b4:21:50:91:3e:47:2b:b6:f9:25:07:e5:e8:9f:72:e1:
75:35:76:ca:ef:88:f5:cd:87:2b:91:d2:58:86:4f:6d:b8:a6:
0b:b8:6c:9b:5b:4b:a2:b1:9f:76:fc:43:1b:50:c0:e8:60:d5:
25:ef:b7:5b:c2:ff:fb:4a:c3:4b:7d:7b:bf:20:b6:69:10:87:
35:87:97:aa:c8:cf:53:a7:69:ef:f5:fc:e1:31:a3:50:b5:75:
1d:8d:58:f4:af:70:0c:6f:75:17:8d:e2:f2:98:91:1a:78:3c:
1c:2b:04:3a:ed:cb:17:20:3a:1b:2a:67:84:29:9e:0d:d8:bd:
7b:9c:cb:40:ad:73:f7:19:ee:d1:9a:13:8b:01:02:e4:09:f6:
e0:dc:42:3a:ad:50:78:6b:28:29:e2:74:da:81:45:35:7e:fb:
d1:c8:25:99:00:de:6c:c4:00:f8:0f:0e:11:52:fa:bc:c6:bd:
ad:fd:62:30:73:a2:2e:c9:2d:89:63:a9:05:22:7e:94:6f:01:
d8:7d:3c:32:38:d0:86:84:b8:d3:dc:57:a1:19:cb:a7:79:c8:
94:5e:ca:3c:9d:f8:a4:ad:1f:59:92:55:18:8d:f2:9c:dd:fe:
fe:1b:a5:bb:b3:00:a7:79:30:3c:ad:b6:21:8a:aa:b0:8e:9e:
aa:9b:fe:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:07 2025 by rpki-client