Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4b31tKy-lonM79PtHzIor42H5fs.roa
File: 4b31tKy-lonM79PtHzIor42H5fs.roa (raw, json)
Hash identifier: b9y7JATq7//JXiM4qaOf+lORUPVa4EhwOe3UjxHU504=
Subject key identifier: E1:BD:F5:B4:AC:BE:96:89:CC:EF:D3:ED:1F:32:28:AF:8D:87:E5:FB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BDF571BD99A0375568533DDCAA2BD
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4b31tKy-lonM79PtHzIor42H5fs.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197437
IP address blocks: 178.16.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:df:57:1b:d9:9a:03:75:56:85:33:dd:ca:a2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1bdf5b4acbe9689ccefd3ed1f3228af8d87e5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:32:0c:15:3c:13:17:70:28:f8:f3:4e:e8:
80:60:31:1b:fc:5c:ff:ba:4d:f9:52:35:d9:f4:73:
a3:e7:2f:b4:f2:e8:1f:20:0c:00:2a:3d:3f:3c:27:
a1:6c:38:f1:86:06:98:6a:28:0f:0b:a1:2b:bf:e0:
59:92:ba:65:be:2c:d1:dc:4c:d3:48:b4:59:45:58:
7c:2b:9f:46:7a:4e:e6:01:0c:68:e2:4f:18:82:3e:
e7:87:a9:e6:3a:78:5e:96:a9:8a:83:fc:1f:4a:2a:
6f:e8:2e:4a:52:20:4d:40:a9:11:2e:94:83:10:5e:
9e:0e:e6:93:a9:f5:e9:14:69:39:40:7f:26:7a:81:
51:40:32:b1:62:65:ef:14:4b:6e:35:d8:5f:f9:3e:
2e:f7:e4:5a:28:67:b2:92:b0:0b:ec:85:db:5d:6f:
c4:24:6a:6d:64:cd:24:6c:18:de:88:0c:89:50:e0:
61:0e:29:fe:9b:36:6e:5e:df:6c:26:be:71:64:33:
76:09:e9:fe:ce:9d:5e:f1:73:66:a3:d6:52:51:d3:
4e:dd:c9:21:0b:4d:80:e6:36:11:36:26:8d:fd:90:
85:13:22:b5:2f:55:19:aa:55:3b:2d:cd:64:ca:a7:
7f:8a:84:85:65:38:2c:40:27:65:80:80:ca:29:2f:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:F5:B4:AC:BE:96:89:CC:EF:D3:ED:1F:32:28:AF:8D:87:E5:FB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/4b31tKy-lonM79PtHzIor42H5fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.114.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:c6:ac:4e:7a:92:06:be:61:18:70:45:29:6f:31:6d:71:
30:22:c7:ca:db:2c:1c:ad:d0:a4:df:43:c9:30:ec:49:2d:91:
22:3b:84:3e:9f:df:5d:0f:d2:16:32:8a:50:c7:ac:5d:33:28:
ab:ef:99:52:36:7f:12:f2:c7:d0:3c:ff:43:74:90:4c:27:c2:
ac:29:6e:f3:d6:be:fe:d2:35:de:d5:d5:a6:4a:8e:55:f5:c9:
29:46:2a:e0:24:85:39:4d:55:30:d3:55:ab:53:10:5b:84:ce:
85:36:71:3a:9e:fb:89:cf:ad:5d:8d:37:b7:e1:1f:1f:2d:06:
4c:a9:6e:69:14:9c:75:ff:d8:50:10:a1:a6:27:ae:c7:8a:8f:
c2:7b:8d:60:cc:8a:a3:df:71:e3:e0:78:53:4b:2e:97:8b:f3:
8c:6e:34:d7:e4:d3:67:1d:86:b3:72:19:7a:ec:56:ee:06:d1:
39:99:a1:40:50:cf:01:78:ba:29:68:74:48:af:cf:ae:e9:1e:
e9:1d:b9:e1:b5:41:a5:98:3e:3c:a2:4c:18:4e:b8:98:d4:77:
e2:f7:1e:14:53:38:ce:16:cb:8c:a8:8e:1d:43:ce:91:c5:6e:
8f:68:36:83:b8:25:b9:a0:3a:0c:81:f0:5c:e4:a9:6c:8c:f8:
bb:a2:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:12 2025 by rpki-client