Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xb3vyIEtuTHF1sdQebrEb3z28Q4.roa
File: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (raw, json)
Hash identifier: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=
Subject key identifier: C5:BD:EF:C8:81:2D:B9:31:C5:D6:C7:50:79:BA:C4:6F:7C:F6:F1:0E
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AB0C03633E8F0B82011B4D9897C3
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xb3vyIEtuTHF1sdQebrEb3z28Q4.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44660
IP address blocks: 31.133.44.0/24 maxlen: 24
31.133.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ab:0c:03:63:3e:8f:0b:82:01:1b:4d:98:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5bdefc8812db931c5d6c75079bac46f7cf6f10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:2e:11:7f:bf:d7:c6:00:c4:0b:e7:e3:58:
be:44:e5:78:89:98:9c:17:2d:a8:1a:19:89:87:a9:
de:bc:a5:0c:aa:b5:ee:a4:13:42:09:0d:3a:4d:e0:
bf:54:59:76:1f:cb:0c:3e:6e:3d:19:4a:64:c2:5d:
ba:48:b5:01:4c:36:24:0b:b4:a0:db:c4:a5:a6:2b:
f6:85:f0:23:31:34:ba:d8:d4:50:3c:a2:1a:84:1b:
ec:8e:d8:a1:fa:8b:16:be:b7:d8:04:f9:e2:5e:4d:
9a:30:13:0b:ec:88:06:a0:40:3a:94:1f:e1:b0:8c:
db:e5:db:4d:ba:30:12:00:ff:2a:d4:7b:6d:e9:e3:
34:4d:b6:4a:c9:cc:68:2a:cf:fd:ae:6f:5c:26:ed:
d3:6f:8d:28:4f:06:e7:75:3c:7c:55:08:06:cb:f2:
f1:d9:54:45:96:59:17:76:9d:84:c7:44:32:69:48:
d8:97:24:bf:d5:a0:93:79:57:39:56:5e:09:fe:17:
6c:36:d3:6a:ac:c0:d2:e8:49:f0:6d:30:a0:70:0d:
5b:f8:88:a3:63:5e:86:eb:08:f5:54:93:20:3d:31:
28:c7:90:fa:4e:24:ea:76:23:84:94:dc:67:50:1b:
d4:90:5a:22:e5:08:90:3d:cb:d2:03:6a:e9:16:8d:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BD:EF:C8:81:2D:B9:31:C5:D6:C7:50:79:BA:C4:6F:7C:F6:F1:0E
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/xb3vyIEtuTHF1sdQebrEb3z28Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.44.0/23
Signature Algorithm: sha256WithRSAEncryption
87:05:7b:b9:95:92:b2:b2:6e:ef:7d:46:65:fa:2c:b6:6f:4d:
7b:25:b4:c7:b3:21:7f:e2:15:fc:f3:38:3f:89:f8:4a:ae:dd:
30:8e:28:55:20:39:28:e7:84:d1:9f:43:b9:35:fb:d8:92:04:
2f:55:df:67:0e:98:4d:a0:80:9d:f8:09:05:3e:12:08:2c:a2:
94:af:ee:fb:90:f1:d5:22:f2:44:1a:65:b1:c0:b7:3b:8f:42:
86:44:32:4d:42:31:b0:cd:48:2d:74:ed:06:ff:31:19:0c:9e:
53:ab:6a:0d:ab:e3:b1:f4:3b:be:6a:a3:9f:b7:20:24:57:7d:
67:14:0d:ef:d2:91:a8:ad:6d:44:20:27:b9:5f:0d:0f:ad:a9:
c6:46:b5:8a:11:a5:e4:4d:17:0b:ad:4a:70:e9:40:23:70:b2:
84:ea:50:3e:a4:60:34:fe:55:89:00:1f:00:6f:82:f7:c1:c4:
bf:f1:69:07:56:9d:ae:05:8b:1e:90:2f:b6:63:a1:5c:ec:c0:
4d:f1:23:88:c8:7b:36:d2:ac:da:6f:71:47:62:67:b8:f6:5c:
42:a1:f0:ab:10:2b:7c:79:db:c6:b3:8f:dc:c1:ce:c7:4c:0d:
80:f9:8d:22:53:49:f3:50:64:6f:15:23:1e:04:d8:c9:78:6e:
c9:ae:a9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:06 2025 by rpki-client