Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa
File: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (raw, json)
Hash identifier: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=
Subject key identifier: 9D:F0:FB:2D:3F:46:3D:BF:01:DC:85:97:AC:D8:29:F7:23:51:28:53
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 019424454DF7332987A82036D0D910273345
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 31.214.244.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4d:f7:33:29:87:a8:20:36:d0:d9:10:27:33:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9df0fb2d3f463dbf01dc8597acd829f723512853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:ac:2e:29:77:35:4b:3e:3c:38:43:65:2f:
0d:79:49:16:69:c8:53:3c:22:f3:2c:db:08:f4:43:
2d:9d:7e:9d:24:7d:a8:c8:d0:04:63:03:d2:f2:47:
e2:75:ea:06:d8:3b:af:5c:20:5d:bd:01:68:6c:cd:
9d:a2:92:95:78:fb:b4:7f:a1:61:ab:fe:0b:75:09:
a5:c6:4c:4d:2d:b3:3c:a5:6b:87:f3:f9:80:75:23:
82:05:aa:1b:bf:46:3a:47:06:ad:86:f4:26:a2:e1:
c5:c1:1f:28:fa:5d:9c:88:35:e5:af:82:29:fd:c1:
20:b0:86:31:9e:fc:59:b8:42:12:64:96:ed:7d:c1:
e4:54:cd:ed:ed:d0:45:5e:41:68:b2:45:fb:a6:35:
00:59:29:ba:63:18:18:91:c2:35:44:b2:87:a8:a2:
8d:78:42:48:25:fb:24:1a:bf:ae:f0:71:d9:6f:01:
51:13:ff:8b:13:d0:f8:a2:ee:92:ce:dd:fa:ec:14:
3e:02:f2:92:ab:2c:48:7b:74:19:9f:67:98:bf:5d:
43:da:e0:d3:c6:8c:aa:99:3a:e0:2c:8a:56:ef:70:
69:56:12:2b:9c:f6:27:91:d7:64:81:89:b5:90:07:
79:16:1a:8d:3c:74:08:7c:64:2b:b3:6c:c1:29:0a:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:FB:2D:3F:46:3D:BF:01:DC:85:97:AC:D8:29:F7:23:51:28:53
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.244.0/24
Signature Algorithm: sha256WithRSAEncryption
00:13:73:ac:31:78:c7:f9:d8:a4:0d:f4:f3:09:d1:6e:31:77:
84:66:bc:d1:97:55:33:53:a3:7e:d4:91:e4:31:dd:c2:a4:bd:
d7:b8:92:4d:8c:13:db:0c:37:9c:06:b9:16:fe:cc:b2:68:98:
c3:4b:9c:9c:d7:4d:f2:c0:4c:d4:e8:b8:09:8e:ab:78:80:43:
9c:26:a2:b1:1b:5d:15:8e:82:dc:ea:f9:3d:40:29:8f:00:1e:
3d:90:5b:9f:ab:9c:9e:0f:5c:8e:8e:40:ca:9a:3b:db:83:d7:
91:67:40:2f:4a:26:b5:45:0e:33:38:1a:48:87:31:7c:42:1b:
4c:89:a8:01:b8:63:7d:4c:7a:79:ae:36:b1:e3:af:83:b1:f9:
b3:6b:dd:d6:c4:cc:63:29:a9:36:9a:b0:b3:fa:0b:23:91:af:
64:03:3a:5d:55:c8:d0:12:5a:fa:e8:56:c9:03:eb:e2:d8:20:
7f:e6:c1:83:5e:b0:43:e3:0a:fa:c7:92:88:e3:ca:33:3e:44:
c5:b3:99:80:e2:12:cf:de:42:f3:d2:a0:c1:10:40:09:c7:04:
61:29:d3:a7:78:50:3a:ce:84:99:57:14:37:e0:8c:44:09:3d:
81:f3:8b:19:4b:ec:f6:49:42:2b:36:ed:6d:f4:84:e9:1f:b6:
e2:e5:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:30:28 2025 by rpki-client