Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/P5TexXncHadhtH8RhjdAiG-FQcU.roa
File: P5TexXncHadhtH8RhjdAiG-FQcU.roa (raw, json)
Hash identifier: NN+Hkad2AdlmZpTlpL23906qXUtKIV/vdmzy7v2ekzo=
Subject key identifier: 3F:94:DE:C5:79:DC:1D:A7:61:B4:7F:11:86:37:40:88:6F:85:41:C5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469EE2B3C87AD203B67BF58B67CC42
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/P5TexXncHadhtH8RhjdAiG-FQcU.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9e:e2:b3:c8:7a:d2:03:b6:7b:f5:8b:67:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f94dec579dc1da761b47f11863740886f8541c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:6f:6a:9f:91:4d:2e:01:19:30:cf:ef:0d:
f4:e7:86:7f:3d:26:93:49:8b:8a:e3:5b:2b:d0:ea:
1d:dc:fe:f8:32:a8:75:c1:a8:d7:4e:89:9b:d8:91:
f6:7c:dd:c0:9a:e2:d1:4d:03:9d:26:c2:e9:e8:77:
64:b1:d9:9d:26:58:a4:0e:c0:17:c2:55:0c:64:7e:
30:41:b7:1c:60:c2:d0:81:95:9b:70:cb:33:b0:cb:
c5:b8:31:e9:81:ba:2f:aa:16:93:4c:e6:42:0f:6c:
3c:e4:5f:81:63:9b:d8:93:c6:a8:03:a4:6f:bb:fd:
34:09:6b:d0:5a:58:8f:3a:d9:80:e8:b7:3f:94:6d:
75:28:5a:7e:c0:f0:04:e0:70:8a:4e:51:41:3c:8b:
0c:b5:a9:e9:cb:99:25:3a:77:85:89:b9:d2:63:b2:
b5:09:d7:69:06:9f:0b:bd:01:94:c9:81:ff:b8:b9:
1e:fb:ed:be:32:5c:16:07:c1:ff:df:80:93:00:df:
da:9e:75:0d:4b:a9:73:28:7a:59:c2:0b:1a:9a:fe:
b2:d6:e4:1f:b4:a8:81:13:66:5c:8f:e5:d1:0c:e0:
f5:c6:6a:53:4b:d1:cb:9a:f8:5b:25:4a:be:f0:fa:
7e:ab:db:5b:ed:e5:6e:d5:84:68:d2:34:56:8a:b7:
b9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:DE:C5:79:DC:1D:A7:61:B4:7F:11:86:37:40:88:6F:85:41:C5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/P5TexXncHadhtH8RhjdAiG-FQcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
37:92:a4:65:a9:fb:35:50:11:99:44:3c:52:bf:65:9f:27:8c:
72:b7:f8:21:f3:c8:e8:93:67:9f:e1:49:11:cc:6c:7a:3b:86:
5f:08:c0:bf:e7:34:5b:6d:fc:63:4e:4b:10:44:75:30:6b:b3:
08:88:50:38:c6:07:89:69:87:ed:e4:30:ab:eb:d3:35:78:b3:
2f:84:d9:af:1d:06:b6:74:72:73:28:e0:69:b8:6c:30:47:db:
13:35:00:2e:4f:cf:c5:fc:17:e4:2d:8b:e4:66:fe:e7:81:fc:
3a:ae:30:fd:51:1a:13:9c:3f:78:21:69:c2:c6:b8:60:33:bb:
d0:80:b3:a2:f8:31:f3:bc:4f:64:a8:16:c8:35:36:40:0d:af:
bb:58:a8:b4:b4:cc:8a:5a:ae:6a:3d:7a:bc:5b:b1:2f:44:f8:
23:06:8b:4b:fb:11:6a:37:67:0e:ea:7f:2f:5c:26:0f:ba:b3:
ee:4f:79:84:de:d7:c4:b8:57:2a:3d:c8:6c:eb:b2:e1:8f:a9:
32:d2:b6:f0:f8:c0:79:de:0d:3b:1d:76:05:b0:34:66:cb:36:
e4:5a:7d:f0:1d:ba:29:3f:b6:bc:96:71:22:80:70:5e:88:d4:
04:9d:27:32:3e:81:09:26:4c:3b:44:57:14:54:46:9a:a7:30:
f0:03:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:57:09 2025 by rpki-client