Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/TI9rtNLD66XYwxwHXpdPJetrLYc.roa
File: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (raw, json)
Hash identifier: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=
Subject key identifier: 4C:8F:6B:B4:D2:C3:EB:A5:D8:C3:1C:07:5E:97:4F:25:EB:6B:2D:87
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 019421440B205E01C346B88F2A2A590EA37C
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/TI9rtNLD66XYwxwHXpdPJetrLYc.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 31.186.168.0/23 maxlen: 23
2a02:40c0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0b:20:5e:01:c3:46:b8:8f:2a:2a:59:0e:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c8f6bb4d2c3eba5d8c31c075e974f25eb6b2d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:bf:92:47:d3:44:2b:ee:23:85:a2:53:6f:
48:a0:c7:4a:ce:27:93:6f:08:a7:42:fc:30:cc:39:
a8:e5:f4:f0:35:86:1a:d0:8a:46:5f:12:4a:ec:6a:
1a:50:7c:66:74:85:2e:ca:72:dd:cd:3b:18:3b:9e:
e7:ef:7d:59:37:4a:56:33:04:bd:6a:2a:91:69:27:
71:6d:3b:66:64:8d:a2:04:22:30:d4:b3:d6:75:77:
65:1f:b8:51:fa:1e:ca:38:a4:74:c3:8a:e6:e7:08:
e0:98:74:e6:5c:17:57:7e:fe:81:cb:a8:5b:54:f2:
c0:c9:c0:ce:4c:6a:c4:e5:b3:02:94:2e:1f:31:f8:
7a:11:bf:77:76:19:e9:8a:a1:50:73:2f:c8:4c:f4:
48:04:1b:6f:a1:5f:81:70:6c:c6:2d:3b:de:7e:eb:
bf:3b:14:bc:98:62:d6:ba:76:02:8c:73:07:a9:d2:
ac:39:a9:ef:71:12:3d:54:74:ce:37:60:63:50:c7:
0d:c8:08:17:a6:36:f7:38:4c:9d:9b:57:56:de:b3:
cc:18:14:da:a6:63:94:31:43:42:be:45:ee:e0:b5:
26:a3:7b:f9:47:40:67:89:13:23:68:91:4d:7f:57:
f6:6c:2f:ae:bf:19:78:c5:22:03:2f:ef:1f:01:d9:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8F:6B:B4:D2:C3:EB:A5:D8:C3:1C:07:5E:97:4F:25:EB:6B:2D:87
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/TI9rtNLD66XYwxwHXpdPJetrLYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.168.0/23
IPv6:
2a02:40c0::/36
Signature Algorithm: sha256WithRSAEncryption
29:89:44:1f:88:b4:4e:09:8b:a5:58:c3:0a:0e:54:fa:f2:9d:
f0:b2:ac:19:b0:ea:f3:02:35:e7:c6:d9:10:a2:3f:51:df:69:
81:75:70:97:9c:9d:8b:f9:94:ef:cb:16:03:6a:3e:84:7f:93:
d6:4a:d2:00:8a:ca:92:ab:ed:81:c4:6c:e7:7c:c1:50:19:db:
dd:3e:c8:39:9f:32:3f:ec:26:ae:eb:79:75:9d:aa:ab:22:3a:
b3:f9:0c:e7:5c:d2:5e:c3:1d:de:57:9e:6a:73:6d:dd:1b:f5:
14:27:f7:57:98:e3:1a:d6:ba:b2:fc:0c:b8:71:a3:30:87:3e:
4b:b5:2e:fc:19:c8:f2:e6:fc:b3:66:dc:23:8b:fc:cc:18:a7:
56:85:97:7a:71:c3:fa:21:2c:84:bd:28:06:69:1f:55:ff:c7:
1d:3c:b6:5a:31:ad:38:51:32:11:ad:a0:f3:1b:0c:9a:2d:65:
10:eb:e0:e4:a0:f4:94:86:f3:00:1a:a9:eb:33:56:82:a4:e3:
e3:02:b8:88:62:db:3d:6f:6c:69:75:b0:4f:73:99:c1:93:61:
66:e6:b0:99:42:eb:9d:c5:bc:80:60:7e:01:ff:af:20:7d:5c:
db:08:59:f1:2a:3e:3b:00:f2:d9:7e:b0:b4:ae:45:c3:09:ae:
28:ac:85:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:20 2025 by rpki-client