Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HiUcT4H8sQpwXqQHWIr7KRCZuXg.roa
File: HiUcT4H8sQpwXqQHWIr7KRCZuXg.roa (raw, json)
Hash identifier: LexrWLDv3xRANU+bt/VKc4JeAGRtm6trOaMaNDdITfA=
Subject key identifier: 1E:25:1C:4F:81:FC:B1:0A:70:5E:A4:07:58:8A:FB:29:10:99:B9:78
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451127F51749BAC88CD29563E1DCE7
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HiUcT4H8sQpwXqQHWIr7KRCZuXg.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34047
IP address blocks: 31.222.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:11:27:f5:17:49:ba:c8:8c:d2:95:63:e1:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e251c4f81fcb10a705ea407588afb291099b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:da:5c:f8:e4:46:b3:fc:28:e6:cb:73:4b:
91:66:0e:e2:2f:53:2f:f8:2e:cb:27:3d:90:a0:69:
d1:26:b0:36:fa:60:c8:3d:ce:c5:6d:fe:a2:0b:01:
47:aa:e5:18:57:8d:aa:e8:f3:98:e2:d8:5e:90:a0:
8f:9f:10:db:2b:ec:ec:c1:c1:6a:b5:b6:56:b1:18:
fa:e0:f9:f6:27:d8:08:eb:ac:06:cb:4b:72:98:55:
ba:de:36:56:c3:83:f0:72:a6:b1:0a:93:48:df:52:
3c:08:a5:cb:13:48:23:8c:78:04:af:0f:d5:f4:c2:
d2:86:be:74:5c:3d:ae:56:44:a6:86:0f:9d:9f:e8:
c7:85:3b:ac:4a:bd:98:0a:46:0c:26:38:a0:96:8e:
82:dd:ac:b9:76:65:79:67:b8:7a:05:7f:f7:98:e9:
81:95:66:c7:50:8d:ce:4d:73:8b:1a:d3:53:44:ae:
ca:15:4b:38:d7:0b:14:5b:81:36:e5:d0:c1:ec:06:
3d:83:6f:62:be:0b:84:1d:59:e0:8e:91:0c:d9:d0:
18:8c:b0:cb:63:e1:dc:38:8d:51:2e:be:13:c3:26:
ce:e9:81:47:8d:4d:40:cd:af:50:4f:5b:01:3f:d7:
b0:4b:d0:88:01:c4:03:c0:2a:9a:d9:b8:f5:f5:7d:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:25:1C:4F:81:FC:B1:0A:70:5E:A4:07:58:8A:FB:29:10:99:B9:78
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/HiUcT4H8sQpwXqQHWIr7KRCZuXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.253.0/24
Signature Algorithm: sha256WithRSAEncryption
17:71:29:c3:3e:e0:3d:78:31:36:ef:a2:1e:38:81:3d:c4:cf:
2d:a5:fe:e2:c4:7f:a5:3d:c0:a2:35:a2:92:3d:b7:fb:4f:41:
a9:81:f0:57:22:82:af:ff:19:38:c3:49:b3:f3:0a:29:b5:b7:
a6:1e:11:a5:66:f1:6d:e3:83:97:93:49:4e:06:20:e6:a4:47:
dd:74:84:fb:c1:ad:4c:af:07:bf:28:ea:c7:99:a0:69:95:16:
b5:8a:6c:a2:56:ca:fb:93:9b:29:64:43:5b:a9:a9:d7:ef:d1:
fd:6f:cc:5a:46:5a:bf:29:00:87:e2:29:66:63:a6:26:af:a9:
04:f7:a1:8c:e7:f5:87:83:88:50:0b:49:7d:d2:d1:c4:b2:9e:
9d:bc:ef:59:1b:13:0a:cd:d0:74:5c:12:35:b5:eb:66:6f:31:
3e:50:92:87:8c:d5:f8:c5:6d:77:4d:36:e9:6a:ed:32:dc:e2:
51:a8:98:f0:0d:e8:c6:1e:2c:7a:8d:c3:46:80:2a:0f:bc:ad:
3c:90:35:82:38:7a:16:75:e2:fd:a5:37:09:2f:a0:73:b3:3b:
cb:e6:aa:2e:74:4a:1a:18:0c:69:dd:c1:8e:7f:c9:da:55:30:
11:9c:99:1b:68:5e:de:9b:fd:40:ad:53:98:79:1f:d0:2a:b4:
f6:e3:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:08:31 2025 by rpki-client