Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/2T0aMlfR0ATFKpqtUP7n90RqKnA.roa
File: 2T0aMlfR0ATFKpqtUP7n90RqKnA.roa (raw, json)
Hash identifier: fjsjXCouyk8srf5vlT8YoPXPxjjjOSOWPOpwRx0N+gw=
Subject key identifier: D9:3D:1A:32:57:D1:D0:04:C5:2A:9A:AD:50:FE:E7:F7:44:6A:2A:70
Certificate issuer: /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial: 018570D4F8A944E02F32A59F606F53CD8490
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/2T0aMlfR0ATFKpqtUP7n90RqKnA.roa
Signing time: Mon 02 Jan 2023 04:54:43 +0000
ROA not before: Mon 02 Jan 2023 04:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 31.134.0.0/22 maxlen: 22
31.134.4.0/22 maxlen: 22
31.134.8.0/22 maxlen: 22
31.134.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d4:f8:a9:44:e0:2f:32:a5:9f:60:6f:53:cd:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Validity
Not Before: Jan 2 04:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d93d1a3257d1d004c52a9aad50fee7f7446a2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:28:4f:bc:3c:46:43:5d:19:3f:52:83:2a:
ea:19:d8:7e:df:a7:84:f4:4f:35:41:38:aa:99:4f:
bc:7b:f7:7d:15:7a:e2:37:fb:ad:34:f9:ae:ba:e0:
7d:ff:b7:fb:59:93:bb:7b:71:f0:36:44:e1:0b:9f:
27:99:d0:54:9f:47:27:fb:d7:3c:1c:46:51:44:33:
db:b4:6e:7c:16:c2:8e:f6:33:e8:77:b8:49:18:14:
9b:3d:2c:d8:93:2d:8f:50:76:18:f4:b9:e2:26:20:
1a:b4:ed:cd:b4:e8:31:2b:6b:68:8b:16:11:20:31:
bf:a7:b0:a2:10:af:96:e1:23:ac:81:34:86:de:1c:
0e:4d:37:f0:ae:34:3e:1b:4c:a9:25:27:c4:d7:5a:
1d:f0:b5:34:d7:2b:79:3d:db:df:21:ee:42:d2:80:
26:0f:93:fe:70:dc:ef:14:1f:f4:61:30:f0:59:70:
2f:09:33:6b:eb:d1:1c:18:ae:1a:d4:df:b2:a4:f2:
11:84:87:dc:b8:fb:15:ea:85:cd:75:0c:0b:95:bb:
ac:2d:fd:67:9e:95:f9:60:fa:6e:10:3f:30:66:31:
9d:77:df:7f:e0:22:82:d0:28:31:f0:4d:d1:82:23:
4c:71:2c:2d:43:1f:b3:8b:31:53:70:4f:8a:02:ba:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:1A:32:57:D1:D0:04:C5:2A:9A:AD:50:FE:E7:F7:44:6A:2A:70
X509v3 Authority Key Identifier:
keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/2T0aMlfR0ATFKpqtUP7n90RqKnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.0.0/20
Signature Algorithm: sha256WithRSAEncryption
42:fc:80:68:0d:d1:74:d0:df:ae:4f:9c:6b:94:a9:be:f7:86:
4c:0e:dc:91:92:e6:84:22:d3:38:ea:b2:56:a5:5e:c6:c1:21:
20:f5:29:95:46:35:f4:f8:42:a6:91:00:dd:ba:6f:e3:97:28:
b5:24:fb:fe:ca:c9:ea:82:68:cc:47:f5:9d:cf:65:d4:4e:8c:
4f:3f:0e:36:60:17:6b:eb:d5:3e:e6:af:00:61:d3:9b:c7:63:
fa:60:2f:6c:16:f2:f4:cc:6a:32:bf:e9:60:0f:c8:7f:34:d3:
ee:93:50:bc:c2:e2:de:05:f9:ee:98:a2:dd:40:54:73:a3:31:
e4:a9:69:3f:da:e6:ec:10:0d:5e:ac:55:fb:36:e2:6f:29:76:
03:7e:45:6a:e1:3e:b7:8f:b8:00:60:43:0d:bc:e1:9e:3d:20:
8d:ba:11:27:02:47:76:3b:e1:8c:59:24:7a:50:a5:bf:d1:c8:
91:a1:0e:ff:51:98:8f:62:af:d9:e0:d5:50:6a:2a:32:46:ea:
6e:15:8e:61:2e:83:bf:0d:fc:26:3d:4e:a5:27:b4:97:18:f9:
79:ef:a3:89:57:58:e4:9f:e5:03:f9:3d:f0:6d:48:68:09:e4:
ef:d2:eb:95:2c:c5:55:4b:ae:e0:5d:7f:d0:2f:df:73:a3:f5:
c0:c1:d5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:43:00 2025 by rpki-client