Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/9daFy4ycHpLHixMJ58Jv9Mkn38s.roa
File: 9daFy4ycHpLHixMJ58Jv9Mkn38s.roa (raw, json)
Hash identifier: OvltHgXCMbI42VwzzAwlJz6b+0BZqitij458IanSoJI=
Subject key identifier: F5:D6:85:CB:8C:9C:1E:92:C7:8B:13:09:E7:C2:6F:F4:C9:27:DF:CB
Certificate issuer: /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial: 01941FFAA4DCD9737979927C8382C3506BF9
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/9daFy4ycHpLHixMJ58Jv9Mkn38s.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 81.31.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a4:dc:d9:73:79:79:92:7c:83:82:c3:50:6b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d685cb8c9c1e92c78b1309e7c26ff4c927dfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:4c:55:b0:56:6d:77:52:33:16:b3:1b:d3:
7d:99:d2:22:16:cf:f8:6c:0f:d3:75:69:f5:27:b1:
a8:51:89:07:f8:6e:97:f2:ae:40:34:f4:ac:0e:81:
f5:1e:5b:90:e9:d0:b3:a3:f0:f3:a1:67:50:82:1d:
86:5b:8d:7d:f9:c7:d0:c8:2f:39:da:fb:58:fe:21:
34:ea:c0:ed:51:67:a0:ab:5e:00:ed:2e:c0:c1:15:
a0:9e:83:90:fc:09:2a:0d:ab:7f:e7:81:28:06:bc:
2c:47:8b:bd:dd:56:f5:9b:68:4e:93:5b:e8:14:21:
2b:fc:43:33:72:7a:ec:dc:2b:3b:61:61:89:e1:53:
de:4b:e0:76:09:bf:ac:98:50:3a:a5:f2:16:9e:db:
09:87:0c:06:25:7b:a3:d8:14:ad:70:11:d1:81:a3:
fc:c2:95:bd:a8:76:5c:26:3a:e6:c3:f6:fb:84:83:
01:ef:06:c9:a3:00:9b:24:07:0c:8d:fe:d4:16:18:
23:86:6c:13:9b:54:49:65:66:d4:37:31:c5:f2:06:
2c:a8:10:c6:04:e0:21:70:93:24:bf:bc:15:a9:a8:
89:53:fe:04:22:34:e3:ef:b8:e4:12:36:53:10:4d:
7b:56:c0:10:b2:eb:b6:01:b1:8a:a8:72:06:02:cb:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:85:CB:8C:9C:1E:92:C7:8B:13:09:E7:C2:6F:F4:C9:27:DF:CB
X509v3 Authority Key Identifier:
keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/9daFy4ycHpLHixMJ58Jv9Mkn38s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
10:28:d7:c9:16:3a:ae:d5:d6:3a:c8:8b:bb:b5:ff:d1:86:e1:
56:8e:79:8d:9f:cd:6c:b1:7d:fe:81:f6:3e:af:65:19:c7:f8:
f7:c0:06:9c:58:81:81:63:4d:38:1b:fb:b8:01:a9:a0:8c:9a:
4e:43:5e:b0:cf:28:a5:07:e4:7f:39:f4:62:4e:9b:7b:75:2b:
e3:40:9d:45:0c:70:43:8e:db:e3:a7:6f:d1:05:b9:7e:9c:cd:
40:27:e3:86:f9:33:a8:6f:93:1a:99:be:1d:7b:2e:38:f8:ce:
39:15:23:c5:be:5b:4d:62:68:36:17:0e:7c:44:aa:05:87:a5:
c1:01:f3:c9:24:29:a8:93:9b:5e:2d:37:bd:9b:a1:ad:a2:73:
81:d3:71:39:95:2b:2a:db:82:3d:cc:a6:70:51:38:e0:53:3a:
99:61:37:0b:72:c9:68:50:9d:10:8a:16:68:92:1b:2c:5f:ef:
b7:bc:e5:07:11:eb:b3:d2:04:52:30:7a:ee:3e:a4:6d:9c:09:
1b:08:52:8c:76:a0:c5:2e:22:a8:11:fd:78:9e:e4:02:f1:c0:
c2:d6:37:13:25:20:1b:94:3a:33:19:c3:bb:06:d3:31:65:45:
47:a3:2c:91:d6:e7:2f:6e:4d:af:4a:72:15:23:41:71:36:f2:
77:32:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:37 2025 by rpki-client