Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa
File: w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa (raw, json)
Hash identifier: boP/ufWZtG0JrM7c1Odfmtj3ELDe2un6UZNS+6F8TmM=
Subject key identifier: C3:92:30:AB:AF:55:5C:4C:B6:CF:DD:07:09:A5:BB:A7:A5:65:E8:BF
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 0194228D3E8C1BBCE26481E54999C753B224
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 31.14.9.0/24 maxlen: 24
31.14.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3e:8c:1b:bc:e2:64:81:e5:49:99:c7:53:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c39230abaf555c4cb6cfdd0709a5bba7a565e8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:e9:a6:14:b7:de:fd:77:6c:35:a1:ca:5c:
19:01:ea:2a:c8:a7:5a:e7:34:81:9d:2d:6f:1f:c1:
2e:05:3e:76:20:48:de:4c:91:d3:c1:04:1a:af:e1:
f0:62:28:e0:7c:a9:64:2e:2f:5a:9c:5b:e2:dd:75:
7e:4f:30:c7:b5:ba:67:24:bd:b9:32:37:3a:c2:d6:
7c:37:12:7b:0f:f1:2f:cd:16:b8:85:af:51:08:2b:
df:68:e0:64:3f:5f:2a:88:d3:1a:bf:0d:14:ea:40:
26:0a:ce:1d:6f:5d:ff:5c:84:de:e6:e5:ba:0a:71:
c5:40:e1:23:9a:3a:01:7e:4d:d7:a0:2a:d5:1a:51:
f1:d5:d8:97:ad:5a:5f:ad:63:03:b9:77:35:72:90:
72:94:9d:1a:05:3b:cd:6e:31:1c:bf:66:3f:85:01:
23:db:74:e6:9a:5e:3b:45:cb:5b:3a:9f:05:59:29:
b8:aa:a7:06:ed:7e:49:60:df:13:29:c9:fc:f3:50:
7d:ea:8d:4e:67:11:b0:38:fb:a4:19:ac:dd:4f:5d:
48:a3:ad:47:cf:23:36:58:16:f4:82:bc:11:a4:69:
f7:db:b7:03:54:33:62:46:16:f4:e8:b5:90:d3:17:
13:90:96:3f:da:1e:9b:e5:66:43:73:4b:0e:2f:94:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:92:30:AB:AF:55:5C:4C:B6:CF:DD:07:09:A5:BB:A7:A5:65:E8:BF
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/w5Iwq69VXEy2z90HCaW7p6Vl6L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.9.0/24
31.14.162.0/24
Signature Algorithm: sha256WithRSAEncryption
00:76:26:12:d4:cb:4c:0c:76:b7:b2:45:d5:98:b6:88:5b:87:
dc:20:ee:78:31:12:f8:d8:29:74:c7:4c:78:2e:2c:ec:a9:a1:
c1:40:52:3d:e6:6b:a1:1d:75:56:4d:92:c1:0d:aa:0c:d1:70:
a3:a8:b0:23:af:53:c2:2d:29:d7:78:0d:75:62:9d:02:b0:16:
9b:90:99:93:f0:f6:22:84:7a:4f:1d:33:5c:cd:86:17:09:a4:
c7:0d:fc:a1:d0:4e:b7:bb:6a:f3:18:00:75:18:48:aa:2f:f3:
12:a2:cb:39:30:ab:df:f2:e7:09:ad:b7:c9:7e:30:89:f6:57:
d7:03:79:5f:e1:8e:ee:22:45:a8:57:83:d4:ee:08:bb:50:b7:
2e:43:ab:60:0c:a4:f5:b8:3d:32:b2:68:38:04:14:e7:17:dc:
0f:11:eb:18:ee:2b:91:ce:60:f2:9c:1a:88:71:09:00:5e:0d:
d1:08:9e:45:db:0b:40:9e:d2:ad:f6:a5:46:86:a1:b1:82:df:
69:7b:a4:51:f8:02:22:0d:60:df:a8:64:2d:a4:6d:46:07:5f:
d8:14:2d:6c:c3:28:78:8b:89:a3:df:a0:6c:35:5b:ce:d3:95:
2b:fe:4a:e3:75:59:1f:80:e7:88:34:01:fa:e6:16:d3:c5:69:
85:cf:93:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:33 2025 by rpki-client