Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/6ZS1LbNmbU2Dme2X3_gzNREznsk.roa
File: 6ZS1LbNmbU2Dme2X3_gzNREznsk.roa (raw, json)
Hash identifier: 7mlj5mGnipI/AE82u0QQU0YPx7IKBIrIQn/3UDMnE9E=
Subject key identifier: E9:94:B5:2D:B3:66:6D:4D:83:99:ED:97:DF:F8:33:35:11:33:9E:C9
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 01954C516F0C9D3C165448BEA745DAE7A0BC
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/6ZS1LbNmbU2Dme2X3_gzNREznsk.roa
Signing time: Fri 28 Feb 2025 11:29:19 +0000
ROA not before: Fri 28 Feb 2025 11:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.209.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:51:6f:0c:9d:3c:16:54:48:be:a7:45:da:e7:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Feb 28 11:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e994b52db3666d4d8399ed97dff8333511339ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:51:23:dd:47:d1:22:e8:a3:8d:29:57:6b:
06:8b:0a:72:db:f4:d5:3e:41:c4:52:e1:8e:39:b4:
37:ae:d7:38:7c:58:97:00:68:97:00:2d:14:95:6a:
34:fd:1a:90:c8:14:6d:36:9a:05:e5:b0:f7:4c:28:
c1:83:e0:a3:d6:28:f9:89:ec:cc:6c:bb:a3:23:09:
3a:c6:b9:42:b2:17:e9:63:23:a7:42:19:6a:70:75:
15:77:f6:04:c4:33:42:4c:09:36:af:25:b5:bd:f3:
80:d9:f8:f7:87:d1:f0:cb:21:83:34:c2:56:ed:fb:
61:de:5a:15:33:96:c8:13:25:a7:08:54:1a:38:4c:
80:c0:d8:cd:e8:59:05:86:19:a1:f6:bd:03:19:81:
35:a3:29:19:29:62:34:89:9e:08:ae:39:f9:ad:d6:
fa:7c:66:a4:66:72:e4:9a:6f:0e:98:67:8d:0c:6a:
85:1d:5d:c3:36:6d:cf:6c:bc:26:21:12:fc:66:bc:
18:88:99:24:f1:db:99:bc:2b:fd:70:a6:e0:48:73:
40:50:5a:f9:ab:d9:93:c0:9f:c3:47:3b:47:66:a7:
0c:3a:59:be:b9:b5:d9:e4:01:fb:fe:b4:3b:2c:52:
89:21:60:f3:cc:8b:3d:67:91:f1:96:14:ef:2a:5c:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:B5:2D:B3:66:6D:4D:83:99:ED:97:DF:F8:33:35:11:33:9E:C9
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/6ZS1LbNmbU2Dme2X3_gzNREznsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:6c:8f:64:70:6f:91:e7:79:4b:af:6e:8c:d2:f7:bb:01:fd:
08:52:f9:e9:4b:0c:77:aa:23:0c:c8:f5:ce:21:09:fb:89:66:
80:13:f1:9e:9d:8a:9e:f7:1b:b3:5b:c1:22:e4:55:dd:68:5b:
59:2b:a8:87:cf:2d:25:2c:27:24:f7:6c:cb:7a:9f:9d:6f:ee:
7f:23:fd:db:c9:9c:7f:8f:2e:98:21:50:41:3f:e7:97:a3:fc:
61:f1:ff:58:8c:71:36:7e:4b:68:70:78:aa:25:44:4c:55:43:
d9:13:71:5a:2b:dd:54:14:75:6c:cc:fa:09:2f:b9:21:db:18:
f8:51:11:9c:b0:61:f7:78:83:ab:a3:b0:6a:7a:d2:22:d5:3a:
5a:97:64:d9:f3:64:79:bf:14:86:38:97:e0:5c:52:6e:a4:34:
3b:d0:1c:22:90:7e:88:63:3d:62:8b:a7:4f:1d:a0:0d:c8:60:
a0:34:7d:dd:e0:4b:46:35:a3:a5:13:03:c8:cd:51:7d:8c:91:
59:c8:f1:d7:e9:ea:b6:e4:a1:63:31:d9:06:d6:86:54:2e:93:
c2:23:ff:e4:c0:a2:2e:7f:54:71:1a:56:65:93:c0:10:6d:2f:
bb:bc:63:c6:95:bf:95:3c:89:14:96:c7:da:53:be:7b:a2:07:
22:81:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:00 2025 by rpki-client