Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zIER93VYlgdlXwhMvq3Ofu8hzPw.roa
File: zIER93VYlgdlXwhMvq3Ofu8hzPw.roa (raw, json)
Hash identifier: qmy5+c+SpyVQgyhvvSwn7BxMXOpmKIlfeQDN+Cxg7GQ=
Subject key identifier: CC:81:11:F7:75:58:96:07:65:5F:08:4C:BE:AD:CE:7E:EF:21:CC:FC
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746B559B05397E60741AD02294C0D6A
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zIER93VYlgdlXwhMvq3Ofu8hzPw.roa
Signing time: Thu 02 Jan 2025 13:48:52 +0000
ROA not before: Thu 02 Jan 2025 13:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211384
IP address blocks: 31.210.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:b5:59:b0:53:97:e6:07:41:ad:02:29:4c:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc8111f775589607655f084cbeadce7eef21ccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:46:88:1a:4f:39:ee:ea:4e:69:f5:3b:2b:
7c:df:1d:9f:bc:06:5f:a7:08:5e:65:11:a7:ae:79:
be:18:2a:4f:96:54:ef:1e:4d:01:13:36:78:bd:f9:
32:eb:db:09:2f:1a:bb:34:4c:21:02:8f:7c:41:94:
5a:4a:f3:7a:47:cc:2f:13:f9:20:6a:dc:aa:84:95:
92:fc:69:59:6b:38:c2:e8:11:d2:b4:2e:33:79:ea:
c9:85:2f:c3:3b:10:e2:b0:c7:1c:d3:91:a7:e8:30:
bf:cf:42:5c:9b:1d:52:9e:54:db:33:0a:c3:5f:9d:
a5:c5:0e:4e:0d:ca:d1:1a:a5:7b:67:c3:9c:9e:a1:
c7:08:bc:d5:2f:2e:e4:63:91:2e:f5:20:03:07:b9:
c4:bd:71:28:51:d2:4b:bf:cd:43:ed:e7:0c:14:be:
f6:3a:cd:11:8a:43:50:07:63:70:11:0c:f5:12:08:
15:71:26:1f:33:2b:75:e8:b4:fb:28:96:3e:a9:c8:
7c:12:b0:ea:a5:f6:ac:be:9b:5e:52:4f:10:6d:78:
64:1d:c1:f3:e3:de:39:d0:9b:84:9a:da:45:69:14:
67:34:cb:8d:b8:93:f1:5b:71:c9:1b:09:67:52:36:
1f:4e:01:f7:0f:2e:0c:bf:04:08:25:89:eb:65:8e:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:11:F7:75:58:96:07:65:5F:08:4C:BE:AD:CE:7E:EF:21:CC:FC
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zIER93VYlgdlXwhMvq3Ofu8hzPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.49.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d0:ff:db:03:b2:a2:4d:e6:2a:38:cb:91:d6:35:7b:7e:a5:
fc:f6:1d:51:36:4c:1f:df:8a:17:9f:57:0e:26:5c:ff:85:af:
88:53:b0:4e:1f:e8:3c:e4:e8:cb:c5:76:f0:a0:20:e1:0e:16:
40:cd:b3:df:34:43:e5:b3:8a:d4:9f:fe:a3:4b:51:82:54:6f:
dd:2a:16:6a:bd:e1:e7:bf:dd:8b:a0:c8:1b:5e:94:a3:e8:5c:
db:38:99:27:00:94:a4:cc:42:90:2f:fd:88:eb:79:b8:57:91:
29:52:5f:b2:46:63:a2:40:5a:ff:3e:d5:cd:e2:2f:11:31:5b:
e0:7a:04:c9:aa:46:5e:c7:5a:12:bf:0b:b4:bd:86:2f:98:f8:
af:b1:07:e4:aa:99:bc:ff:0f:4b:32:5b:e4:42:77:8a:ba:1a:
16:5a:25:15:09:3e:12:9a:f5:8b:ae:93:d5:5a:c9:f1:d6:23:
48:ee:11:10:5f:79:87:33:a4:90:36:80:5b:c0:03:9b:bb:d1:
6c:cb:5b:cb:1f:5b:39:75:fb:49:62:d9:7f:40:d0:dc:2e:00:
31:e2:f1:e1:d1:f4:c4:a3:04:0f:14:45:a1:ee:ea:0a:13:97:
5a:c9:d6:76:d9:61:9d:fa:0f:a7:31:f6:c8:fd:75:d2:e9:c8:
47:3a:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:37 2025 by rpki-client