Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q98Wgjt99zWgSyT_7WH9q5f8UOo.roa
File: q98Wgjt99zWgSyT_7WH9q5f8UOo.roa (raw, json)
Hash identifier: b1wmV8aZLQlVVBzilztGby5pijLgL0D2Zn29tCy+YfM=
Subject key identifier: AB:DF:16:82:3B:7D:F7:35:A0:4B:24:FF:ED:61:FD:AB:97:FC:50:EA
Certificate issuer: /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial: 01C2EFD0
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q98Wgjt99zWgSyT_7WH9q5f8UOo.roa
Signing time: Sat 01 Jan 2022 12:57:04 +0000
ROA not before: Sat 01 Jan 2022 12:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 31.6.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29552592 (0x1c2efd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Validity
Not Before: Jan 1 12:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abdf16823b7df735a04b24ffed61fdab97fc50ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a8:cd:76:44:38:c7:b5:33:a3:62:cd:63:16:
5b:83:a4:11:5e:a2:fb:be:e6:9e:84:c2:b8:3c:73:
f0:60:fd:ee:a3:a1:de:7b:25:23:99:7a:08:9d:15:
5e:21:d4:da:fa:9c:58:47:28:96:54:80:ab:ca:62:
99:62:8f:c9:1b:3d:12:1b:1e:be:cd:95:bc:8b:4e:
ea:69:a7:19:60:c2:2a:be:00:1b:90:c1:76:6d:24:
13:c2:d4:56:b8:22:cc:f1:ef:a2:e4:d1:7e:ee:d4:
6c:07:5c:2d:7e:34:b6:4e:99:93:07:2e:c3:34:23:
e1:1c:13:c2:de:b2:7e:21:3c:29:3c:6f:a8:94:cb:
27:47:34:cb:8a:4a:ce:00:a3:fc:af:d5:f3:d9:ec:
a5:f9:91:12:83:d7:d1:da:0c:54:7a:bc:95:27:63:
c8:6e:33:5d:66:63:04:2c:ed:b3:b6:c7:88:1d:01:
e3:e6:8a:c7:0e:3c:6d:5c:03:8a:81:18:28:27:d8:
d1:e2:b7:a0:11:d8:8c:a5:d6:67:6f:16:b7:eb:1e:
61:0c:05:86:cf:42:7d:07:27:8c:d3:86:d6:8e:9d:
4b:bb:80:da:e2:f9:55:a1:91:8c:9c:f3:e0:cb:d8:
95:4e:cf:76:56:dc:2c:f2:f1:a5:7c:bf:d1:f3:04:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DF:16:82:3B:7D:F7:35:A0:4B:24:FF:ED:61:FD:AB:97:FC:50:EA
X509v3 Authority Key Identifier:
keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/q98Wgjt99zWgSyT_7WH9q5f8UOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1c:7b:c3:58:fe:83:97:3d:7e:99:62:01:0a:e0:92:c2:60:
04:d8:6f:81:ce:f7:58:5c:f9:b8:1f:f3:33:ab:e0:df:50:a4:
b3:dc:96:d4:cb:fb:ba:fc:a4:c1:58:b1:4b:a9:77:85:40:ac:
7a:75:03:b9:ca:2a:0e:61:79:9a:a8:75:ed:e0:f5:7d:f2:74:
98:8d:af:a5:d2:4c:be:a4:5d:99:a9:f4:f5:63:42:63:7b:3b:
bc:c9:18:9c:3d:03:f0:aa:51:24:da:26:33:25:b8:1e:3d:a5:
43:7b:2e:5c:01:21:28:56:40:e7:3a:a7:6a:da:e3:e3:0d:bb:
a6:ae:0c:4f:23:f1:ae:39:69:1b:90:82:81:13:f4:e4:02:f5:
61:52:e5:d0:93:9a:ae:a0:75:f2:8b:25:0f:77:4b:46:df:73:
23:ec:e8:0d:09:d8:f6:23:28:53:dd:48:91:bc:86:24:4d:cc:
49:8b:ab:ea:c2:ea:e5:cd:06:54:ec:1b:48:27:47:47:79:0f:
f4:b6:ab:bf:cd:fb:79:1f:35:f7:b6:9c:5d:49:64:75:12:7e:
44:b5:6b:34:0d:dc:8d:e8:d1:1d:7e:e0:30:a7:e1:93:2d:c5:
26:b1:a7:3b:85:cb:91:19:7e:25:2d:ea:2b:d6:b9:28:d7:90:
38:0a:d5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:07 2025 by rpki-client