Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/v9BFv3-TNowegyiv09vLFLV5UTQ.roa
File: v9BFv3-TNowegyiv09vLFLV5UTQ.roa (raw, json)
Hash identifier: dKR68pnVeUnoZwpMGIMPLXESwr/B50jGdFPF9i1PucA=
Subject key identifier: BF:D0:45:BF:7F:93:36:8C:1E:83:28:AF:D3:DB:CB:14:B5:79:51:34
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 0194258EFDD33E8100FA37681F8B1356CA56
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/v9BFv3-TNowegyiv09vLFLV5UTQ.roa
Signing time: Thu 02 Jan 2025 05:48:35 +0000
ROA not before: Thu 02 Jan 2025 05:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211895
IP address blocks: 31.43.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:fd:d3:3e:81:00:fa:37:68:1f:8b:13:56:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jan 2 05:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd045bf7f93368c1e8328afd3dbcb14b5795134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:cd:e0:bd:af:05:f9:82:b0:dd:1c:18:32:
5a:18:64:49:16:9a:6c:0e:eb:70:18:f4:25:cb:02:
0a:f0:cb:ac:a6:2b:35:ad:14:9b:1b:dc:1e:dd:af:
4a:8a:37:3e:6e:d3:0a:10:5d:3b:1d:94:9f:da:55:
c7:f2:f3:2a:ae:bd:41:39:b1:f5:df:6f:a3:77:06:
61:3c:7e:df:19:bd:f0:e5:16:4f:d7:e4:f2:f9:12:
3f:57:69:26:29:c6:c1:57:24:bb:6c:91:84:91:e2:
f4:b5:2e:9a:bf:7b:4f:7d:66:9e:bb:cb:cc:ab:e4:
6a:b6:b8:d6:ed:88:c0:b4:20:26:46:2a:96:e6:a6:
87:6b:1d:99:cd:7b:de:83:4e:59:6f:90:6f:55:62:
eb:e3:f5:b7:49:66:35:07:a8:b7:a4:d3:10:d9:a5:
dc:e3:1e:2a:37:37:4b:16:fb:ea:3a:37:ca:a1:ed:
6c:a0:9c:98:fa:39:ad:a3:0e:ea:59:cb:bb:4e:4d:
b9:57:64:c0:db:72:51:a2:ee:34:23:14:33:99:14:
fc:c4:cb:26:5c:7f:7d:40:e6:a6:03:fc:82:b9:d3:
86:04:92:3b:c8:5d:ba:17:6e:4c:0f:83:a6:63:da:
00:96:25:65:02:ee:9a:6b:68:f4:16:8b:e6:e5:19:
fd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:45:BF:7F:93:36:8C:1E:83:28:AF:D3:DB:CB:14:B5:79:51:34
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/v9BFv3-TNowegyiv09vLFLV5UTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.163.0/24
Signature Algorithm: sha256WithRSAEncryption
92:59:59:97:cf:74:20:85:86:4d:43:f4:d9:a3:1a:71:5b:c0:
d1:1c:88:63:d4:62:e6:d3:3d:5f:da:ce:72:67:97:ec:17:ba:
0c:e9:cf:bb:28:0e:ee:21:ce:2e:c3:59:fd:59:b9:b1:6b:91:
99:7f:08:e6:17:1d:6f:ab:ce:37:52:74:6d:0a:b9:52:ba:50:
b0:82:f0:71:18:07:99:b2:c8:23:ca:b6:ee:f8:64:1b:c3:73:
a2:d5:22:52:ce:14:54:be:43:07:e2:b5:10:ed:d0:04:21:d3:
75:10:f6:e8:27:86:6f:36:de:fb:f2:3b:c8:42:83:71:d5:a0:
5a:8c:33:2f:ba:02:f9:d2:ff:1a:6c:ba:bc:bc:bc:1e:68:22:
d3:10:cc:90:b5:17:2b:fc:83:71:d4:62:03:4d:85:65:30:34:
83:d8:38:81:dd:e9:5c:a7:7a:a2:3b:67:ea:0c:08:f9:b0:a5:
ef:43:e0:df:15:22:21:42:fc:d4:8f:c3:71:fd:02:18:c3:93:
91:21:a8:5a:c5:5d:4e:5c:aa:4a:c2:6e:2f:eb:25:23:06:81:
e9:e9:e6:9c:42:0d:7b:f3:12:ab:c3:07:35:6e:fd:fe:39:51:
8e:0f:a8:e7:51:41:a0:fa:31:9d:51:cf:a1:d6:a5:e1:c6:1a:
20:98:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:14:37 2025 by rpki-client