Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/KQrJVFxp_miWrVFWhfilwJLOQWM.roa
File: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (raw, json)
Hash identifier: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=
Subject key identifier: 29:0A:C9:54:5C:69:FE:68:96:AD:51:56:85:F8:A5:C0:92:CE:41:63
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0194221F840B4F8A47F2CF67A8A88572EDEC
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/KQrJVFxp_miWrVFWhfilwJLOQWM.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39650
IP address blocks: 31.130.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:0b:4f:8a:47:f2:cf:67:a8:a8:85:72:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=290ac9545c69fe6896ad515685f8a5c092ce4163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:f1:84:a7:da:6b:f5:0e:b8:af:50:2e:05:
cd:df:52:f2:a9:93:17:d4:26:e1:a9:38:39:73:93:
04:51:ad:38:1d:06:02:b6:2a:56:fb:89:34:36:5f:
0b:84:6f:f5:20:d4:d0:da:5c:7c:60:38:1b:92:56:
34:a9:16:8c:f2:66:20:e2:df:e7:27:21:ee:f9:70:
07:82:41:dd:8b:14:80:ad:e7:a4:77:60:17:1f:2d:
f1:dc:4e:ff:92:c6:d7:46:e7:88:46:7e:67:59:7f:
b4:2c:c8:e3:88:22:f4:f3:e6:cd:d6:8a:d5:5f:47:
ec:82:92:92:d3:ea:22:d1:59:5d:26:d1:54:7e:aa:
f4:9e:b6:da:da:2a:e1:f1:0f:c4:6f:01:6f:33:3c:
d4:01:c4:20:e0:a5:46:b4:aa:47:6e:04:f5:ff:ae:
36:9e:45:57:89:96:ca:65:83:6d:ab:81:fa:75:d4:
ec:50:10:3c:b4:78:79:17:77:e6:20:fe:7f:8d:3d:
4b:8a:2e:13:83:62:3d:4a:23:a5:82:19:db:f4:28:
8e:0a:45:f2:0b:7b:3d:cd:75:64:3b:93:87:9f:ad:
3f:7e:9a:f9:5c:00:cb:14:07:1f:b4:59:61:cd:85:
cf:d4:05:1b:c9:13:ed:51:4b:20:3d:9c:2d:32:93:
ae:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0A:C9:54:5C:69:FE:68:96:AD:51:56:85:F8:A5:C0:92:CE:41:63
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/KQrJVFxp_miWrVFWhfilwJLOQWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.181.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2e:89:d4:28:59:4c:92:8b:51:e4:e1:af:26:c6:9d:ca:c5:
61:b8:db:fe:f4:01:68:bd:8d:09:66:64:66:ba:69:d6:f3:d4:
f9:38:4b:96:42:7a:25:ba:80:03:f8:ce:9e:5e:cd:58:14:bc:
19:89:72:31:bd:91:e7:04:fe:68:95:32:64:c3:10:e8:6c:d5:
fc:1a:a4:f5:07:f7:b0:09:5f:38:26:88:8a:e4:e1:41:7f:36:
d1:d4:cb:75:33:2f:13:81:7e:d1:d3:b1:59:78:a0:dd:96:14:
e8:57:29:86:32:1a:14:cd:b9:58:ff:ed:06:d0:93:8d:0d:b2:
fe:af:53:66:99:71:bb:aa:36:b9:3e:3d:33:d3:cc:95:ef:8b:
45:b7:de:da:e1:7f:45:b0:50:b4:03:b5:18:52:03:d2:2a:cf:
85:7a:c3:ba:3f:a7:42:7a:13:b9:8a:63:95:91:71:aa:e1:d9:
ee:54:5a:d1:82:c0:e2:2d:68:5f:f2:f6:dc:8b:16:b5:d5:9f:
29:d4:cc:98:29:73:81:e7:ad:a4:be:85:3c:c8:f9:0f:2b:22:
f5:b4:67:ee:00:4a:f0:4a:e5:c3:4b:e4:15:2f:6d:21:75:b3:
45:c0:0e:a1:94:0f:0e:e5:04:ce:e8:a0:ee:df:79:62:fd:91:
ba:45:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:45:20 2025 by rpki-client