Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7DOISAtw5QxforOreAJp1fgwnpQ.roa
File: 7DOISAtw5QxforOreAJp1fgwnpQ.roa (raw, json)
Hash identifier: Z9LD6TcChOeOX//bOSgewNazMxae+DTa/0RJNN7GsIg=
Subject key identifier: EC:33:88:48:0B:70:E5:0C:5F:A2:B3:AB:78:02:69:D5:F8:30:9E:94
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B130F961D046CE3C5BCE68914A97
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7DOISAtw5QxforOreAJp1fgwnpQ.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 31.184.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:30:f9:61:d0:46:ce:3c:5b:ce:68:91:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec3388480b70e50c5fa2b3ab780269d5f8309e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:91:de:4e:50:81:3d:8a:f6:ad:06:e4:3f:
81:9b:cd:a2:3c:d6:0d:11:5f:25:24:b3:64:f0:4e:
9f:dc:ba:b7:2a:52:b4:73:3d:76:ee:16:8a:6d:98:
ab:ab:da:9d:6b:e4:a8:a1:30:58:1b:2e:46:2b:cf:
a6:d7:cb:6e:a8:62:f9:0f:d6:37:b8:ad:95:86:5c:
66:a3:cd:7a:34:30:c4:c4:fe:fa:9a:d7:56:9f:4a:
08:6c:0c:af:71:07:10:b5:2a:80:e9:fe:b2:d1:c8:
44:84:e5:7f:b6:db:9a:f1:84:0d:66:e5:06:69:d8:
9d:22:e0:8c:9f:95:cc:3c:18:24:ec:10:02:0f:8c:
d9:1b:4d:4d:36:d5:1c:d0:07:3e:a5:9b:44:cc:f0:
f6:54:59:6b:d6:35:18:7f:4f:7f:95:aa:7c:50:e8:
5f:06:95:ab:a1:76:ea:cd:ee:c8:be:e0:38:ae:e6:
86:6b:2c:df:02:38:e0:7f:9e:db:b4:a6:fb:d1:c5:
05:79:ad:6b:f9:7d:c4:f7:3e:8b:4c:f2:ee:3e:89:
7f:8d:a5:f1:2f:b3:fd:6a:73:de:d7:4f:b3:71:69:
de:62:81:c0:49:f9:c3:6c:c0:d4:f9:14:93:61:be:
ee:09:58:78:29:99:79:db:22:0a:f3:55:b7:ae:c8:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:33:88:48:0B:70:E5:0C:5F:A2:B3:AB:78:02:69:D5:F8:30:9E:94
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7DOISAtw5QxforOreAJp1fgwnpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:66:33:9b:86:6d:c3:8e:e0:dc:d3:28:d9:5e:29:4e:5a:50:
99:22:0c:9d:42:74:21:e1:b4:bf:85:53:04:8c:fe:70:28:2b:
12:bc:c2:bd:81:23:22:84:a4:02:42:3f:80:58:02:d2:33:78:
bb:64:ad:f5:bb:0b:6c:d0:29:f5:2a:b9:e8:d8:5b:88:26:97:
57:8f:3d:11:c2:b8:5d:5c:44:90:c0:85:3e:4c:50:e4:1e:8c:
27:78:a9:5d:c7:23:42:bf:99:c6:7c:ac:9a:ab:71:d3:5b:99:
9a:b9:f8:3c:09:b4:81:2b:71:e6:ab:39:48:14:76:d7:52:e9:
51:cb:86:ce:ec:ac:5f:d1:30:b7:66:35:66:75:07:38:43:90:
67:c3:1f:5e:ff:2e:c8:0e:67:f0:92:24:86:ba:2c:a9:3a:9c:
ed:0f:3c:33:da:6a:5a:ce:6b:47:b1:04:4b:7d:ca:b5:41:14:
fd:ad:97:4f:df:36:90:9e:ef:a4:2b:d2:ea:11:ef:d9:3b:13:
31:c0:5f:ee:38:c6:8b:1e:4c:70:6a:83:0c:10:3e:44:b5:d4:
31:75:2e:38:2c:1c:da:fe:aa:8a:20:bc:86:f4:16:be:53:61:
95:bb:74:e0:a9:29:db:d5:df:c8:7e:bd:ed:f2:3f:67:e7:45:
2a:23:92:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntbEw+WHQRs48W85okUqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzMzODg0ODBiNzBlNTBjNWZhMmIzYWI3ODAyNjlkNWY4MzA5ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++R3k5QgT2K9q0G5D+Bm82iPNYN
EV8lJLNk8E6f3Lq3KlK0cz127haKbZirq9qda+SooTBYGy5GK8+m18tuqGL5D9Y3
uK2Vhlxmo816NDDExP76mtdWn0oIbAyvcQcQtSqA6f6y0chEhOV/ttua8YQNZuUG
adidIuCMn5XMPBgk7BACD4zZG01NNtUc0Ac+pZtEzPD2VFlr1jUYf09/lap8UOhf
BpWroXbqze7IvuA4ruaGayzfAjjgf57btKb70cUFea1r+X3E9z6LTPLuPol/jaXx
L7P9anPe10+zcWneYoHASfnDbMDU+RSTYb7uCVh4KZl52yIK81W3rsihawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwziEgLcOUMX6Kzq3gCadX4MJ6UMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvN0RPSVNBdHc1UXhmb3JPcmVBSnAxZmd3bnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH7jwMA0G
CSqGSIb3DQEBCwUAA4IBAQAtZjObhm3DjuDc0yjZXilOWlCZIgydQnQh4bS/hVME
jP5wKCsSvMK9gSMihKQCQj+AWALSM3i7ZK31uwts0Cn1Krno2FuIJpdXjz0Rwrhd
XESQwIU+TFDkHowneKldxyNCv5nGfKyaq3HTW5maufg8CbSBK3HmqzlIFHbXUulR
y4bO7Kxf0TC3ZjVmdQc4Q5Bnwx9e/y7IDmfwkiSGuiypOpztDzwz2mpazmtHsQRL
fcq1QRT9rZdP3zaQnu+kK9LqEe/ZOxMxwF/uOMaLHkxwaoMMED5EtdQxdS44LBza
/qqKILyG9Ba+U2GVu3TgqSnb1d/Ifr3t8j9n50UqI5Jf
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:45 2025 by rpki-client