Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MXaN9ynuTzCz5I3XeArng1Txuxc.roa
File: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (raw, json)
Hash identifier: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=
Subject key identifier: 31:76:8D:F7:29:EE:4F:30:B3:E4:8D:D7:78:0A:E7:83:54:F1:BB:17
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01941F8C7B4AF9A30FB1F1CE843D24DE8287
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MXaN9ynuTzCz5I3XeArng1Txuxc.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.133.92.0/22 maxlen: 22
176.103.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7b:4a:f9:a3:0f:b1:f1:ce:84:3d:24:de:82:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31768df729ee4f30b3e48dd7780ae78354f1bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:01:03:ea:7d:3f:a8:88:10:36:2f:b5:9c:4f:
73:d3:e5:8c:53:c0:82:29:ed:60:c0:23:10:1b:ad:
30:e6:a4:ef:27:04:34:c9:5b:8e:4f:3d:a5:2c:0a:
10:50:a3:28:38:f2:41:92:e9:26:ce:ed:5b:7b:b9:
56:9e:a5:be:d0:21:c1:d1:c7:a5:02:c7:2c:03:74:
14:6e:71:07:2e:75:a0:20:88:05:f9:e2:59:93:9b:
37:d0:f9:37:76:18:b8:e9:8d:f3:fc:f1:18:5b:c1:
ad:4a:21:49:7e:5c:fe:ec:cf:47:1b:d0:f7:a4:3b:
d3:01:c5:d8:b0:60:a5:a1:e0:51:d5:f9:e9:97:78:
e7:a8:03:31:b4:3b:a6:32:25:05:c1:c7:0b:15:17:
be:c9:6c:fc:96:17:3f:fb:09:2d:69:e1:a0:c9:42:
bb:aa:dd:d7:86:9d:76:de:a3:d7:1d:4b:92:2d:09:
c6:a8:18:4d:fc:b8:b4:5a:3b:21:7e:e1:6d:3b:64:
1d:b6:70:d0:72:87:12:43:af:7e:98:18:13:34:2a:
9c:f7:73:56:0e:e4:12:c6:ef:54:41:f6:dd:fe:3b:
5b:29:4e:70:e5:95:23:14:e1:8e:50:1f:c3:f1:ff:
2e:fb:36:6a:bc:a6:2a:fc:c7:6a:a2:0e:8e:7e:42:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:76:8D:F7:29:EE:4F:30:B3:E4:8D:D7:78:0A:E7:83:54:F1:BB:17
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/MXaN9ynuTzCz5I3XeArng1Txuxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.92.0/22
176.103.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:8e:5e:bf:58:91:52:6c:06:4f:5e:81:06:29:e5:f3:e9:60:
6f:13:20:73:dd:33:d5:18:a9:86:96:88:46:d1:98:3a:7a:cf:
d9:55:49:ab:41:8a:d5:ca:73:02:5f:21:b6:52:5d:28:e6:0c:
52:15:a6:26:8a:b1:a8:63:63:f0:fa:43:30:31:79:cd:0c:3a:
33:6c:e4:6f:ce:e5:34:8d:c4:ad:db:b8:54:8c:8d:f2:a3:9f:
73:b8:69:52:6d:83:ad:7e:52:8f:71:41:3c:23:5e:bd:b0:e5:
94:d8:e2:3e:b4:26:d1:90:63:b1:1c:ee:45:ba:d5:8f:84:06:
73:67:b7:36:d6:18:14:13:8a:3b:c4:57:5e:4e:cf:12:dc:7a:
a6:3f:84:7a:96:29:e3:b0:16:d6:25:94:21:9c:86:4f:2b:86:
3a:84:e2:95:df:d1:3d:f8:8d:76:dc:52:1c:68:d7:cf:1c:c4:
8c:4d:3d:71:46:26:25:79:a2:a2:1f:67:58:c8:20:7b:53:a1:
25:46:64:a4:60:f9:fd:90:39:c6:46:92:e9:3f:a3:8c:38:43:
01:3f:73:c9:4d:76:3d:a3:a9:f9:f2:85:18:e2:2c:d1:d2:a3:
aa:9b:41:48:97:0a:21:c7:16:f6:f7:30:70:65:aa:28:29:43:
1e:cd:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:18:57 2025 by rpki-client