Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/4LSDpWlsgJw9Otx93_mKw6B9grg.roa
File: 4LSDpWlsgJw9Otx93_mKw6B9grg.roa (raw, json)
Hash identifier: c67VMb5sCTD5NQ5KlZtleOn3Nkqt4gilHv8oqn6VVoY=
Subject key identifier: E0:B4:83:A5:69:6C:80:9C:3D:3A:DC:7D:DF:F9:8A:C3:A0:7D:82:B8
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 019427488BE8F3AB4D5B4D14EF2B50BC4A1A
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/4LSDpWlsgJw9Otx93_mKw6B9grg.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 31.15.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8b:e8:f3:ab:4d:5b:4d:14:ef:2b:50:bc:4a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0b483a5696c809c3d3adc7ddff98ac3a07d82b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:1a:d6:7a:b0:b6:be:e6:4e:78:61:dc:d1:
6c:56:59:0c:ec:05:f5:35:fa:d9:19:df:8b:2a:26:
79:79:e5:6f:36:eb:0c:90:e9:28:c0:8a:ea:b1:6d:
78:8d:5d:54:43:6a:b7:a8:76:86:b6:a9:9d:5e:88:
2c:db:59:e8:7f:6a:24:6d:11:d9:32:3b:04:11:1a:
02:20:68:0a:67:75:05:e8:8c:b0:45:82:37:bc:84:
8d:e2:9c:57:43:cd:bf:e9:b6:f2:0e:d6:aa:da:06:
f4:5b:7a:de:33:39:9f:31:80:9a:6a:2b:73:2d:a9:
da:b6:72:df:31:63:55:47:d7:b3:7d:6a:1d:6a:68:
95:90:cf:15:85:10:e2:16:71:c6:1d:4d:2b:80:10:
a8:0e:2a:69:48:37:6f:f5:9e:ff:62:6d:10:0e:6e:
e4:d9:10:9d:22:6e:22:a2:27:57:7a:61:69:b4:18:
85:2d:56:9b:d0:f8:0f:5f:09:06:31:1c:47:ed:f0:
98:d0:02:e8:50:f4:4c:2a:da:a2:24:03:e2:da:85:
d4:a5:6c:8c:ec:22:0c:99:33:c0:08:8b:71:a5:56:
2a:81:ef:71:a2:f3:bf:b8:63:df:44:c7:7f:77:ee:
f5:e3:78:80:84:e8:6f:99:82:eb:a1:37:01:16:e3:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:83:A5:69:6C:80:9C:3D:3A:DC:7D:DF:F9:8A:C3:A0:7D:82:B8
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/4LSDpWlsgJw9Otx93_mKw6B9grg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8a:c5:d7:89:59:72:73:a9:0e:08:42:d2:2b:4f:3f:2e:6d:
ce:bf:ee:a8:ba:18:97:30:e7:8e:82:32:5d:a0:fb:0e:6b:e8:
03:c0:fb:6d:27:51:b6:bb:7d:03:38:62:22:e4:ff:6c:66:00:
ce:b6:3c:4c:d9:42:63:fa:05:65:ac:0e:0a:c7:81:78:8e:16:
75:ed:18:25:d9:ae:51:34:29:ae:fb:3d:fb:f7:38:a8:86:75:
45:43:57:22:0d:f2:ab:6d:cb:71:2b:87:5b:9f:be:b1:0e:1c:
c3:14:65:99:b4:ce:9c:b5:97:13:a6:8f:a6:34:c0:e4:50:59:
ad:9a:6f:a8:60:53:30:54:12:f1:0d:39:3e:d8:1d:af:06:d4:
2f:f4:66:76:0d:c6:2f:cc:16:08:02:1f:1e:d0:1c:d3:f1:d2:
fb:b3:ac:3c:2c:0a:9c:1e:99:38:9c:36:48:1b:3b:12:0a:a9:
db:49:d3:9b:0d:02:c0:9c:cf:e2:c9:c8:02:60:08:64:90:58:
72:9a:32:c8:76:6c:26:63:9f:3b:41:88:e8:fb:03:42:1c:21:
f2:3c:a3:69:ee:52:d7:7d:4a:3a:e2:07:14:41:2d:ce:70:03:
19:1b:7d:eb:7c:4d:1f:36:73:fb:f4:77:ab:1d:09:85:34:d1:
c2:c1:73:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:58:10 2025 by rpki-client