Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/sji6IRKMxoDbfzOHSYIJXQ44kMU.roa
File: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (raw, json)
Hash identifier: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=
Subject key identifier: B2:38:BA:21:12:8C:C6:80:DB:7F:33:87:49:82:09:5D:0E:38:90:C5
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 0194228D16A49578CEEF3587D405B4BD3C43
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/sji6IRKMxoDbfzOHSYIJXQ44kMU.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212389
IP address blocks: 31.24.249.0/24 maxlen: 32
2a12:4942:4009::/48 maxlen: 48
2a12:4946:8030::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:16:a4:95:78:ce:ef:35:87:d4:05:b4:bd:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b238ba21128cc680db7f33874982095d0e3890c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:f6:06:fb:17:1a:8d:67:dd:1e:bf:6a:06:
62:6f:d2:8e:13:7b:71:11:c9:ae:fb:4e:03:89:dd:
88:aa:37:d9:e4:75:48:1a:95:bc:d9:ac:d4:4d:62:
20:2c:b1:7e:2c:ed:77:e2:51:2e:7e:85:73:92:94:
57:2f:d1:9a:80:de:12:d9:11:bf:e6:22:d8:7d:01:
b5:5a:63:88:32:0e:4e:69:b2:09:51:9e:b3:20:44:
08:78:a7:4a:7d:08:81:f4:1e:b2:3d:7c:49:7b:67:
1e:03:9e:d1:42:c2:99:ab:98:d2:c0:9a:3b:d5:53:
e1:03:b1:81:d4:dd:42:97:46:96:32:91:1b:80:e7:
ee:58:a5:28:cb:e9:96:3b:2e:9a:ff:d1:c0:bd:28:
be:e8:fd:76:72:2b:21:e8:b2:d4:f3:17:97:52:e3:
0d:25:45:4b:ce:fa:4e:ac:2d:57:17:6a:32:46:b8:
44:8f:5a:8c:46:0c:95:71:b3:31:dc:cf:03:84:73:
c9:d8:01:32:6f:57:b9:a9:5a:01:1c:f7:ef:2c:97:
82:a0:b9:71:4d:74:bd:a0:e9:65:a4:a5:65:2b:68:
c4:72:29:56:c3:54:69:80:00:74:49:c2:c5:14:b8:
bf:cd:c3:9a:90:7b:eb:4e:34:61:f4:4f:89:a2:16:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:BA:21:12:8C:C6:80:DB:7F:33:87:49:82:09:5D:0E:38:90:C5
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/sji6IRKMxoDbfzOHSYIJXQ44kMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.249.0/24
IPv6:
2a12:4942:4009::/48
2a12:4946:8030::/48
Signature Algorithm: sha256WithRSAEncryption
92:96:94:0f:63:b9:40:09:86:19:e9:0b:88:79:1e:24:79:4f:
95:8a:30:9f:37:cf:fe:a4:7e:ba:96:9c:75:5c:43:13:db:f4:
6e:a4:b7:2e:ce:f6:a9:0c:6f:60:6a:b5:ad:93:0d:3a:d4:7e:
39:f3:bd:3a:8f:fa:12:69:3c:d5:7c:ae:39:04:17:bb:ac:7b:
a9:65:06:13:74:21:1f:dc:43:bb:2b:bd:1e:e1:e6:d8:39:a6:
d5:e3:f9:24:7d:0e:2e:50:e5:e9:39:9f:5a:ba:d2:ed:5e:ba:
f6:33:a6:ae:e9:78:99:ea:03:5f:bc:99:c9:9a:80:eb:03:f4:
81:fb:e6:e9:17:f1:ee:2d:81:c1:34:56:bf:d3:26:7c:e5:7d:
1d:d0:98:48:0f:3d:78:1d:b5:75:90:af:c0:90:f1:93:73:a9:
a9:d6:6b:2f:8d:c6:4b:57:ed:00:a1:a9:dd:07:41:31:6a:e2:
51:3b:59:f4:67:35:98:6b:e0:f8:b4:a3:dd:15:5a:c3:35:de:
df:9a:8f:ec:48:82:3b:ce:b1:d8:8d:30:d2:e4:c2:68:91:99:
14:6d:c0:dc:e4:4b:e7:6c:e4:54:dc:eb:93:e9:43:bb:f5:a2:
a5:b9:a7:37:a8:51:06:65:a0:9a:66:5c:1d:e6:31:23:f3:31:
2f:ce:34:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:00 2025 by rpki-client