Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/31TmdYfDPTtcyx3EDGyr4yX5xfo.roa
File: 31TmdYfDPTtcyx3EDGyr4yX5xfo.roa (raw, json)
Hash identifier: HGhb4tT7TLItxt7a3UTwloJcSL/Aa1Kwf5jM4JUQn1Q=
Subject key identifier: DF:54:E6:75:87:C3:3D:3B:5C:CB:1D:C4:0C:6C:AB:E3:25:F9:C5:FA
Certificate issuer: /CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Certificate serial: 012B0A50
Authority key identifier: 0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/31TmdYfDPTtcyx3EDGyr4yX5xfo.roa
Signing time: Wed 02 Feb 2022 09:46:38 +0000
ROA not before: Wed 02 Feb 2022 09:46:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39458
IP address blocks: 194.26.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19597904 (0x12b0a50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcae0947aea18a91dc2604e72f81a34d954ccb
Validity
Not Before: Feb 2 09:46:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df54e67587c33d3b5ccb1dc40c6cabe325f9c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3c:ad:59:b5:57:02:67:c8:03:45:e0:f5:c0:
38:45:85:4f:ee:f3:cb:fd:10:d5:8b:e7:e1:d6:99:
dd:f5:a2:f5:60:fd:d8:81:bc:c0:c9:8d:a2:a5:fb:
25:15:6e:24:fe:7d:f2:d1:94:55:81:76:1f:2e:2a:
d0:28:58:af:32:a3:d7:43:0b:83:f4:71:08:da:bf:
18:e2:b0:af:0c:7e:33:fb:6f:a2:bc:74:60:b9:01:
be:79:df:30:bf:4c:58:cd:51:4a:ff:64:5e:4d:1d:
4c:b1:ba:c5:ed:1a:b9:2f:26:26:8b:fa:ee:38:bb:
aa:04:12:ac:d4:5c:54:8e:88:e8:fd:47:a0:59:36:
d1:ca:e3:5e:46:76:f2:3e:4b:89:d6:4d:94:fb:b9:
c7:9f:46:d4:57:5f:d8:b9:33:96:c5:a5:38:c4:e3:
2a:da:bf:f7:71:8a:c5:29:2e:94:1e:7c:60:01:66:
50:12:ee:7d:87:29:a5:40:98:5b:c6:e9:e0:8f:2e:
9f:4b:1f:18:67:dc:84:f1:f1:f8:6d:80:6b:a7:75:
91:18:9c:7b:94:d5:1c:0a:5c:9b:77:29:1b:fa:f4:
56:fd:8b:66:e0:2c:78:25:4b:8e:b4:93:31:4c:7b:
57:e2:cc:38:90:37:14:9f:55:84:73:d0:80:ab:b6:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:E6:75:87:C3:3D:3B:5C:CB:1D:C4:0C:6C:AB:E3:25:F9:C5:FA
X509v3 Authority Key Identifier:
keyid:0B:FC:AE:09:47:AE:A1:8A:91:DC:26:04:E7:2F:81:A3:4D:95:4C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_yuCUeuoYqR3CYE5y-Bo02VTMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/31TmdYfDPTtcyx3EDGyr4yX5xfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/bb8df1-cfdc-40be-aab2-d9f63c593edd/1/C_yuCUeuoYqR3CYE5y-Bo02VTMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.234.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e1:52:45:88:f2:c4:ff:75:00:31:b8:26:d6:e7:94:da:d3:
3f:64:7b:8f:52:dc:1b:b3:55:4c:32:0a:5f:96:92:15:51:11:
ec:41:f2:e7:2e:9d:78:25:2c:28:a4:92:89:8d:09:88:60:4c:
1e:65:0b:31:83:41:b6:06:c4:45:52:5a:98:40:5a:e6:32:99:
f0:6a:a6:d6:d4:2c:90:2d:6c:5e:45:7e:d4:0c:de:4a:d8:aa:
0e:9b:72:96:e6:44:e9:da:95:e2:83:1e:83:af:db:64:00:9a:
f3:77:fd:65:43:82:71:6e:f3:36:4a:f1:9c:f8:fb:ba:a6:ea:
0a:ad:67:a5:10:07:a1:02:f0:eb:38:f4:9b:31:03:81:57:a8:
1d:e2:f3:56:f5:c3:ae:ee:5a:ba:23:27:48:9e:13:ae:f3:66:
1e:8a:70:8d:7b:2d:20:1d:c1:ab:ca:b4:f6:91:eb:8b:b6:8e:
fe:72:db:2b:0f:2a:98:7a:7a:09:6d:18:bb:52:0d:9f:68:28:
88:33:7d:df:c9:63:e2:05:49:24:62:93:ba:62:38:c0:0e:33:
0f:ee:cf:8c:42:dc:ae:ca:e4:cd:98:e5:6b:64:8b:4c:79:b5:
4f:6c:8c:6d:29:bf:15:6c:fc:e1:0f:44:06:15:9a:12:6f:3e:
3e:07:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:51:09 2025 by rpki-client