Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/a8dfbuD_49og8AJXwHhNJcwaxsI.roa
File: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (raw, json)
Hash identifier: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=
Subject key identifier: 6B:C7:5F:6E:E0:FF:E3:DA:20:F0:02:57:C0:78:4D:25:CC:1A:C6:C2
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019427B3773C092B6A19A65C60D9BF843105
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/a8dfbuD_49og8AJXwHhNJcwaxsI.roa
Signing time: Thu 02 Jan 2025 15:47:40 +0000
ROA not before: Thu 02 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 31.130.244.0/24 maxlen: 24
31.130.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:77:3c:09:2b:6a:19:a6:5c:60:d9:bf:84:31:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jan 2 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc75f6ee0ffe3da20f00257c0784d25cc1ac6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:69:f1:bc:29:98:94:70:9b:6b:a0:05:1e:
5c:c6:34:19:d8:a5:ca:4e:63:10:2b:51:bb:32:1f:
80:e9:08:aa:c2:43:75:de:f1:f6:a2:15:be:55:19:
0c:65:53:b4:5c:1c:97:76:a5:ed:35:5a:a6:63:b6:
17:6b:e7:b5:16:e5:e0:9e:51:63:c3:b3:c9:cb:40:
9d:cd:5b:af:0e:b8:f8:ad:ca:e5:9f:a9:af:85:9a:
42:2e:59:85:16:39:c2:47:34:af:1d:6c:ac:1a:24:
28:19:bf:9d:f1:62:35:91:36:f4:c5:c1:4a:13:03:
8b:ab:80:cf:a6:c9:2a:46:0f:a6:0f:a2:83:59:6d:
0c:6c:82:d9:d0:58:8e:a6:ac:17:9c:8d:da:79:c9:
52:0e:fe:18:9f:6e:b7:65:86:ef:27:db:c3:55:6e:
3a:4c:b4:5d:63:53:bd:a3:e5:50:72:02:47:ee:24:
38:51:21:2a:70:cf:64:3e:a7:25:7b:81:7a:34:f9:
ee:66:63:9b:ac:20:37:46:8d:83:72:12:4e:fb:b7:
98:d2:10:1e:2a:77:8a:43:c3:e8:ac:1c:a4:0e:d4:
26:29:41:64:1a:63:23:5d:36:50:7c:32:f2:41:7a:
b1:c8:e3:15:fa:cf:a0:98:e4:41:dd:31:10:8c:fa:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:5F:6E:E0:FF:E3:DA:20:F0:02:57:C0:78:4D:25:CC:1A:C6:C2
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/a8dfbuD_49og8AJXwHhNJcwaxsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.244.0/23
Signature Algorithm: sha256WithRSAEncryption
49:5b:48:13:f4:4f:84:f8:1f:2f:7b:21:64:db:4d:38:2c:d0:
28:68:5b:30:bd:09:dd:e8:4d:bd:5f:d2:d0:4a:df:22:47:6e:
6e:4d:6b:f4:af:56:70:5c:d4:48:1d:6b:1f:fa:ae:6a:f5:56:
65:65:21:39:a4:45:99:32:26:c5:d6:79:c5:90:15:e5:1d:65:
26:88:ac:d5:f2:ec:16:24:86:12:72:bf:e0:6e:a5:ef:f2:cf:
a2:b5:87:24:77:83:2e:b7:dc:45:f9:27:2e:73:65:5a:90:4b:
6c:15:32:c9:89:f3:23:6c:86:e0:f0:c3:d1:20:9a:dd:6c:0d:
bb:77:1c:07:33:05:17:b6:6d:af:12:aa:9e:da:56:1b:23:e7:
85:ce:75:0d:5a:98:bb:e7:43:78:d0:92:b9:05:18:89:8b:29:
e4:7c:22:9a:c4:4e:a9:72:72:fb:f1:3e:6a:f0:68:9b:75:bc:
6f:cc:38:79:3a:e8:f1:c3:62:8f:70:73:37:49:d3:c1:fe:13:
e7:c2:dd:e1:60:c2:1d:7a:d0:9b:62:e3:5c:78:3b:1b:d5:0d:
3f:38:80:d3:ed:36:d2:33:5e:f2:00:8e:6a:4d:3c:e1:d6:9d:
b7:3d:c1:5a:d9:b1:3d:fe:da:12:26:8a:1a:7d:9a:10:97:e1:
3e:44:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:08 2025 by rpki-client