Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/f3uE1VDv54J39oNndZpR1jGOB3k.roa
File: f3uE1VDv54J39oNndZpR1jGOB3k.roa (raw, json)
Hash identifier: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=
Subject key identifier: 7F:7B:84:D5:50:EF:E7:82:77:F6:83:67:75:9A:51:D6:31:8E:07:79
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 01941F8C0526B3009C5B90192EDAFC4B7F20
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/f3uE1VDv54J39oNndZpR1jGOB3k.roa
Signing time: Wed 01 Jan 2025 01:47:37 +0000
ROA not before: Wed 01 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56635
IP address blocks: 31.7.192.0/19 maxlen: 19
45.147.136.0/22 maxlen: 22
2a03:a100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:05:26:b3:00:9c:5b:90:19:2e:da:fc:4b:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jan 1 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7b84d550efe78277f68367759a51d6318e0779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:2c:54:73:e5:62:ed:60:b8:9b:f9:36:c4:
a2:38:f9:43:82:6e:41:bd:a8:fc:aa:55:d4:53:69:
dd:81:9f:b7:de:7c:40:df:78:f0:9c:66:f8:9b:0f:
76:d1:15:58:9a:9d:c1:ec:d7:5b:a2:4c:4f:20:14:
ea:bf:66:bd:e4:af:c3:bc:ce:eb:eb:a6:05:4b:1e:
c4:35:c0:50:a3:30:e0:63:81:72:44:be:b3:52:82:
a0:18:f3:94:40:b0:ff:be:b0:d4:c0:b8:6a:b2:6a:
47:f3:d9:c6:85:1b:d1:2c:8d:d0:2d:31:da:ee:d2:
89:6b:fe:10:1b:06:80:e7:30:98:0a:8c:f4:90:bd:
6e:ce:4e:16:77:17:3e:09:db:d6:da:b7:6f:f1:d4:
ed:23:c9:2c:13:e0:ff:97:66:e3:5f:73:00:74:98:
dc:d5:9c:31:4b:b6:55:a1:d9:e6:a7:90:18:ba:8f:
be:a8:6e:9c:b1:f8:65:db:a0:f2:74:9a:34:f9:5d:
15:bd:84:43:d8:15:1a:cf:ff:9d:68:d3:d6:f0:04:
1e:0e:53:03:21:a6:fa:a4:dc:c4:31:bc:cc:f3:74:
3e:9d:01:b5:9c:f7:d4:cc:b2:2a:12:ac:c6:43:ad:
40:2b:84:6e:dc:1a:bf:8a:13:bf:63:31:b1:a2:1a:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:84:D5:50:EF:E7:82:77:F6:83:67:75:9A:51:D6:31:8E:07:79
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/f3uE1VDv54J39oNndZpR1jGOB3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.192.0/19
45.147.136.0/22
IPv6:
2a03:a100::/32
Signature Algorithm: sha256WithRSAEncryption
98:de:2f:41:7e:b9:b8:67:06:2e:63:cb:5e:27:fd:22:1a:d6:
c8:96:76:96:a7:1a:91:40:d6:8c:40:8e:b9:87:49:5b:b3:1a:
b6:b9:67:8d:77:e6:b3:0f:23:32:a5:c3:7e:05:35:c2:df:48:
18:6d:51:ef:83:3f:42:e5:93:82:71:86:74:d5:bf:83:e9:37:
46:e0:c1:47:7b:e5:c6:49:51:05:c7:b0:a7:0e:40:84:2d:aa:
93:9f:a2:80:62:8e:bc:46:50:bc:ed:83:22:76:83:37:e9:01:
b8:03:be:5a:b9:5a:da:ef:1b:38:df:c3:ce:52:29:94:2a:44:
a4:f0:af:34:62:d6:ca:64:1e:76:4f:74:d7:1c:06:9a:9b:e5:
e9:d4:93:24:db:7b:d8:8d:1f:05:40:25:0a:f8:0c:a0:57:a4:
66:60:2a:6c:d8:7c:5a:5d:2a:9c:1c:1c:5a:40:5f:68:65:b7:
49:5b:4f:74:3e:de:19:74:ff:09:d9:65:11:6b:7e:4b:25:f4:
55:2f:99:c4:6e:e4:13:8a:29:bd:a8:47:78:d3:0a:e3:21:51:
c0:37:01:22:74:53:eb:69:fb:76:5c:96:ad:f6:66:f6:df:a1:
3b:fc:a0:83:94:81:b2:0b:f2:4b:3e:74:ea:81:a7:41:0f:4c:
61:74:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:04 2025 by rpki-client