Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VsIT4UDowfgziNkyxsazrF8Nprc.roa
File: VsIT4UDowfgziNkyxsazrF8Nprc.roa (raw, json)
Hash identifier: tHTpfllxRsrXksjYSWkw6dzxaBfPW5bcWlbLhLkaOsI=
Subject key identifier: 56:C2:13:E1:40:E8:C1:F8:33:88:D9:32:C6:C6:B3:AC:5F:0D:A6:B7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BFFA2D94E99713E75A0A7539AFD0
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VsIT4UDowfgziNkyxsazrF8Nprc.roa
Signing time: Thu 02 Jan 2025 13:48:55 +0000
ROA not before: Thu 02 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216146
IP address blocks: 31.210.41.0/24 maxlen: 24
188.132.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bf:fa:2d:94:e9:97:13:e7:5a:0a:75:39:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56c213e140e8c1f83388d932c6c6b3ac5f0da6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:9e:ae:1f:c3:ea:5a:ec:92:b8:29:e0:18:
e6:45:3b:cf:0f:09:89:00:27:63:47:dd:5b:d3:9b:
0e:af:30:ce:bb:97:ea:0c:3c:74:af:f4:68:cf:14:
80:9d:69:8c:9e:c6:92:e5:a2:9b:e2:99:11:71:51:
a0:4f:f1:f2:c1:3b:3b:85:b6:ec:b7:5e:c5:2c:c6:
20:5f:a8:19:47:37:36:ee:ce:e6:4b:5a:45:97:ba:
06:5d:f3:7a:e8:eb:5b:43:8d:81:fd:79:fd:96:0f:
28:71:b3:ee:b4:ee:80:e9:d7:14:2b:7e:61:ee:fd:
bd:db:17:39:a1:2c:66:b1:c0:06:e5:ff:9d:ae:4c:
9a:7d:0c:b5:f9:2a:cf:49:68:c1:07:17:47:65:45:
73:2a:79:ce:00:c8:a9:31:b7:64:73:a3:6f:25:44:
5e:fa:d2:f6:dd:79:72:07:76:47:99:77:46:dc:87:
10:e5:15:16:17:cc:75:e1:3f:cc:8e:7b:08:47:50:
f2:78:49:e1:c6:48:fa:2f:31:39:7e:1e:6a:14:2b:
9c:13:cd:c7:35:43:cd:94:3e:73:83:d8:01:e0:a4:
27:c5:1c:d9:4a:48:31:1e:df:79:78:79:f3:af:9c:
b5:b0:b2:9f:2d:a2:a7:65:0c:fa:a5:f7:b2:e9:34:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C2:13:E1:40:E8:C1:F8:33:88:D9:32:C6:C6:B3:AC:5F:0D:A6:B7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VsIT4UDowfgziNkyxsazrF8Nprc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.41.0/24
188.132.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:12:76:74:51:1c:0d:39:ac:a3:7a:c2:35:12:d0:93:bb:58:
e6:3f:9a:28:75:64:58:a9:9b:47:b6:0a:bb:11:85:ff:12:d2:
0a:b0:99:81:53:c2:de:55:5a:19:5c:b6:10:4f:e2:bd:ba:be:
d8:18:5b:0b:1e:16:ba:37:aa:dd:c8:86:72:63:fb:11:aa:e2:
73:13:c0:9f:7e:cb:d8:fc:5e:74:f0:85:13:ba:c2:d2:8a:0b:
4a:1b:fd:dc:f2:f7:12:ea:a5:f8:7e:46:2f:7b:14:6d:57:03:
89:69:99:36:fc:83:f8:eb:a4:8c:6a:d4:d6:73:db:ba:c0:a2:
7f:70:eb:8d:3f:22:12:95:c1:64:53:69:40:7e:87:57:7b:d7:
cf:90:4a:2d:3f:32:d9:ed:29:fd:e2:67:b2:eb:1a:6f:7d:88:
8c:48:96:81:82:eb:2a:00:47:96:81:e2:40:f1:3e:34:6d:cc:
23:6e:c6:ba:d1:01:6e:03:08:99:13:2c:cc:e8:d2:31:76:a1:
b3:72:a4:4d:05:eb:7a:9e:99:81:6c:d5:02:6b:7e:bd:1b:16:
81:e8:8d:f4:d7:e8:87:73:99:d0:a1:2e:06:4a:a4:37:25:49:
90:92:28:ce:8d:15:c4:33:76:78:5d:dc:55:08:8f:bb:fb:30:
65:cd:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:05 2025 by rpki-client