Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa
File: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (raw, json)
Hash identifier: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=
Subject key identifier: F2:26:F1:39:BF:01:C0:79:AE:3E:A2:8F:9A:B1:56:86:97:76:A6:4E
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C2CFBB56868737FF432F994E12E0
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41370
IP address blocks: 31.172.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c2:cf:bb:56:86:87:37:ff:43:2f:99:4e:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f226f139bf01c079ae3ea28f9ab156869776a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:0a:3d:23:7e:e5:8c:ab:5a:4e:1f:0e:0d:
b9:24:05:6c:f4:da:78:c1:4d:35:d3:88:c3:ba:ff:
a7:15:52:28:e4:58:56:0c:50:14:cd:d4:80:5e:9a:
ab:9a:b2:37:5c:db:19:ed:73:9f:18:0d:df:82:de:
7c:22:c4:d3:15:eb:28:62:58:14:23:8b:76:4c:94:
62:23:fa:03:3c:52:f5:79:9f:47:40:88:1e:88:66:
06:7e:05:fa:e7:8f:5c:13:3c:85:fb:07:dc:57:bd:
6e:b0:e2:b0:8b:44:d3:59:e5:9f:c9:d1:3e:f9:36:
fa:99:21:eb:48:20:c6:02:23:78:6e:1c:eb:c3:31:
4d:08:16:6c:18:0a:cb:18:c1:fd:20:b5:62:82:3e:
a8:6e:ac:64:e4:a0:b9:b6:c9:19:ff:c8:11:5a:4c:
27:29:03:5e:d6:0b:ef:ac:8c:41:01:d7:6d:03:a9:
29:8d:e6:15:1b:1c:b0:5c:d7:44:29:f8:a4:a7:79:
b8:e8:2c:5a:dd:84:d5:0a:d6:b6:2c:48:dd:34:70:
e3:28:10:7f:06:c1:59:d8:20:48:d4:72:f6:fd:49:
19:98:1a:75:c4:00:3f:c6:99:a6:b2:7e:fe:9a:89:
ae:ac:7c:c7:a5:0b:ae:be:27:ca:60:e6:01:63:c0:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:26:F1:39:BF:01:C0:79:AE:3E:A2:8F:9A:B1:56:86:97:76:A6:4E
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.161.0/24
Signature Algorithm: sha256WithRSAEncryption
53:44:a1:79:33:31:ed:28:dd:04:72:89:38:c9:8d:04:c4:a3:
47:fb:32:7a:eb:01:e0:e6:0e:5f:c8:5b:f4:97:19:62:68:5f:
8d:ab:25:8d:7e:fa:37:49:6d:db:b9:04:0d:01:ec:63:e4:79:
cc:48:26:e6:2a:fb:8b:4b:d9:06:e7:88:11:15:b5:1a:ed:bc:
3e:ed:5a:e1:01:bc:a7:a3:8a:47:d9:b9:3f:29:42:b2:25:70:
fd:69:95:11:c0:74:88:b9:91:a4:46:27:71:08:f4:cb:bf:86:
b2:bb:c7:0a:20:39:db:e1:43:12:64:64:5e:47:cd:aa:32:88:
14:c9:70:9a:ca:3f:74:94:6f:7d:9d:c1:08:46:4c:ad:8b:4a:
43:be:a4:44:94:9a:da:2e:9b:a9:4c:33:24:64:78:32:5d:72:
51:e7:83:0d:ca:d0:05:45:dd:d0:6c:f9:92:e4:c2:71:cb:2f:
56:b5:20:b5:6d:fb:c7:d7:0f:00:b8:d3:30:a0:27:9b:c8:8c:
b7:c8:22:c4:3e:71:6b:ae:28:67:43:a1:27:ec:a7:63:34:61:
0e:59:5b:5d:d0:11:48:06:e4:59:85:67:18:91:bb:46:51:ad:
f7:78:18:7d:41:de:68:46:59:a3:1f:3a:7d:b8:f1:c8:a4:42:
b9:e0:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:23:50 2025 by rpki-client