Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/r9D7RoC2RTZcimkkYo0muUnC7Ko.roa
File: r9D7RoC2RTZcimkkYo0muUnC7Ko.roa (raw, json)
Hash identifier: vaqt5fY4ooc1hRYqSlTV2jpqcfrYXB+V3GFDXgsFqf4=
Subject key identifier: AF:D0:FB:46:80:B6:45:36:5C:8A:69:24:62:8D:26:B9:49:C2:EC:AA
Certificate issuer: /CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Certificate serial: 04276DB4
Authority key identifier: FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/r9D7RoC2RTZcimkkYo0muUnC7Ko.roa
Signing time: Sat 12 Feb 2022 12:24:28 +0000
ROA not before: Sat 12 Feb 2022 12:24:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206766
IP address blocks: 31.134.6.0/24 maxlen: 24
31.134.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69692852 (0x4276db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d698ecf66ae46ede1fc8230bfbe2096d5245b
Validity
Not Before: Feb 12 12:24:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afd0fb4680b645365c8a6924628d26b949c2ecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:64:00:ad:09:7b:ef:c9:36:dd:09:fd:7f:
37:ef:d1:f2:2d:44:fe:21:ea:35:a2:2f:d7:dc:bd:
e3:02:04:15:96:b2:e0:c8:1e:c9:cf:e6:2b:24:6b:
6a:0a:f2:71:a8:b6:38:cb:a3:6a:10:fc:7f:ff:c7:
d6:12:4b:04:95:7f:34:56:cf:9e:62:82:f1:38:8c:
0a:0e:ac:b8:90:bf:fb:63:d8:c1:28:f9:9d:aa:84:
6b:90:94:97:11:e2:a8:08:da:d6:a0:d3:e6:e3:37:
8a:3e:4c:84:66:0a:50:47:aa:b6:d8:54:19:ed:30:
7c:85:82:c6:b0:ea:8c:ec:56:f5:f4:f4:69:25:6d:
42:53:16:1a:52:5d:44:b4:9b:6c:70:f0:00:c6:4e:
52:c3:0f:ed:97:a8:76:ff:5f:0e:92:5f:26:d9:59:
a1:87:56:8f:6f:4f:93:e6:5c:c8:85:60:ed:36:89:
ec:c5:28:e1:bb:97:4e:e1:46:f4:60:68:08:c8:a9:
a1:3c:d0:fa:3a:60:04:11:c3:44:ea:db:b1:81:33:
a6:b5:78:43:de:b4:a5:d1:d0:81:34:1b:75:af:b8:
f4:76:e6:35:39:09:62:92:e7:a8:32:44:83:a5:84:
83:f6:e2:40:37:4c:3b:66:e6:77:56:06:d7:01:b7:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:FB:46:80:B6:45:36:5C:8A:69:24:62:8D:26:B9:49:C2:EC:AA
X509v3 Authority Key Identifier:
keyid:FE:5D:69:8E:CF:66:AE:46:ED:E1:FC:82:30:BF:BE:20:96:D5:24:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1pjs9mrkbt4fyCML--IJbVJFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/r9D7RoC2RTZcimkkYo0muUnC7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/381b58-7c96-4360-9965-ecf233f8ce82/1/_l1pjs9mrkbt4fyCML--IJbVJFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.6.0/24
31.134.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:6b:45:c3:5a:90:af:5b:a3:3b:b9:64:42:cd:8b:17:5c:13:
2e:f3:e3:0e:cb:82:e4:f4:b5:90:7a:63:ec:f3:e6:30:9c:0a:
92:17:74:1b:be:40:98:ac:9c:12:54:16:b3:de:aa:08:07:5c:
d9:71:79:e9:7c:7d:89:ee:7e:80:d8:48:2a:26:8f:65:e2:ac:
ef:10:66:c2:00:1f:63:03:fe:cd:a9:d9:c6:51:86:2b:8d:a2:
6f:71:8f:b9:d2:ae:73:9f:02:ab:8c:e2:95:a3:df:6a:be:11:
15:8c:0c:de:0e:3f:7a:2b:77:a5:b6:d2:09:87:d7:f7:1f:8b:
5b:8d:a6:79:b1:3d:01:0a:f2:4f:8a:df:c7:53:f1:c2:92:c7:
b0:42:fc:72:6d:98:e6:1e:84:4d:81:53:3f:83:68:66:ab:ea:
94:d5:66:7e:3f:3e:9e:25:5c:ae:66:e8:ed:2e:02:41:14:d6:
89:18:a1:bb:09:3c:25:e2:02:ec:7b:75:35:37:8b:0e:58:b0:
69:a8:2b:b0:c2:f7:3f:cd:49:71:07:30:fb:3a:c2:67:d1:8b:
09:f2:6e:97:dc:aa:d0:4b:d3:64:ce:b8:40:44:65:5c:16:36:
27:71:5f:28:ca:8a:8a:88:a1:79:29:13:b9:2a:b3:92:f4:8b:
53:52:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:45:09 2025 by rpki-client