Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LrhN4oYSKiTh8G0upF9-sbL8vNw.roa
File: LrhN4oYSKiTh8G0upF9-sbL8vNw.roa (raw, json)
Hash identifier: ZHZWzvwh1ced3ccwuBDiUqK6cHiuqcXgScCLZ6103I4=
Subject key identifier: 2E:B8:4D:E2:86:12:2A:24:E1:F0:6D:2E:A4:5F:7E:B1:B2:FC:BC:DC
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195DC1C7EE92AC4DF35E2A2C72A24B2A690
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LrhN4oYSKiTh8G0upF9-sbL8vNw.roa
Signing time: Fri 28 Mar 2025 09:36:49 +0000
ROA not before: Fri 28 Mar 2025 09:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 31.42.121.0/24 maxlen: 24
31.42.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:1c:7e:e9:2a:c4:df:35:e2:a2:c7:2a:24:b2:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 28 09:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb84de286122a24e1f06d2ea45f7eb1b2fcbcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:e8:47:01:7b:de:05:be:97:04:9c:34:fd:
0a:16:61:e9:dc:b0:77:59:77:0d:1c:5a:71:27:35:
29:8b:90:3d:6b:e6:a9:fc:bb:53:80:cd:35:44:01:
88:f1:e0:a3:21:fd:bf:65:8e:b9:72:9a:7e:d6:9f:
6e:e4:95:47:0d:20:e9:09:4e:75:fa:21:4e:a8:19:
dc:f2:bb:8f:5a:23:61:db:00:e0:ce:51:f0:3a:9d:
58:57:6b:6f:90:b1:96:81:ad:0e:08:2d:e6:12:22:
07:42:a3:07:11:83:7e:96:a3:53:72:fe:73:58:6c:
f8:31:59:e8:11:34:c6:17:b9:ed:a3:d5:db:fc:7d:
d5:d2:07:7a:84:e4:8f:f7:94:2b:17:42:a5:7f:3a:
be:5a:00:fd:6a:4d:b5:0d:8d:ec:d5:ae:1c:ce:f6:
e3:1c:a5:ed:81:f3:f1:66:64:dc:d6:a8:ef:52:a5:
c7:99:1a:89:aa:f6:c1:9e:c0:44:30:51:4a:0b:60:
c6:68:32:13:52:c4:48:34:6c:54:48:96:b7:78:2b:
2f:49:6b:3d:2a:3b:6d:65:5d:0b:e1:6d:c3:b8:cd:
8b:29:4c:fb:eb:82:07:8c:4e:3c:b0:ab:fc:65:b7:
6f:e7:4d:bb:39:09:d2:d3:0b:65:52:de:7c:a9:7b:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B8:4D:E2:86:12:2A:24:E1:F0:6D:2E:A4:5F:7E:B1:B2:FC:BC:DC
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/LrhN4oYSKiTh8G0upF9-sbL8vNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.121.0/24
31.42.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:42:e7:b0:29:76:77:3d:7c:c0:1d:a5:22:4a:a4:4b:89:8a:
8c:df:cd:14:ff:5b:2d:f2:cd:7a:8c:02:f4:31:ce:a1:38:2f:
af:6c:d8:4a:29:f0:71:b9:d4:bd:06:31:c7:29:6f:9c:67:7c:
71:2b:0d:28:96:3e:bd:ae:78:dd:be:94:f9:c7:ec:ca:71:ec:
f7:49:70:64:a6:cf:38:63:49:99:72:bc:94:9a:01:4d:4c:cb:
04:7e:93:cc:c6:c2:be:6b:b1:b8:60:f4:6e:f5:98:e5:4e:89:
9d:6b:a2:3d:da:61:32:ad:94:28:93:91:ab:f7:a6:c0:4f:8f:
e0:4f:83:ed:80:50:45:9b:20:58:b7:c9:f2:17:c1:8f:1b:b9:
6f:4b:d5:c3:bb:53:b3:55:a1:3e:3d:70:cd:36:e6:f3:ed:47:
6c:c7:ab:f8:05:0f:e2:aa:5e:e5:50:e5:3a:d2:42:c6:23:cd:
f8:11:9a:d2:c6:de:f5:59:9f:d2:8e:4d:6c:2e:37:df:07:1d:
e2:aa:d1:67:78:a5:8a:68:a3:05:10:03:01:8e:57:c2:ac:5d:
be:8c:ea:9f:cd:3e:6a:7a:ab:c6:1e:f5:f2:c3:a4:3f:8a:36:
8e:73:ca:24:7d:7e:43:91:1e:a3:af:45:99:70:30:3b:27:a1:
7b:bf:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:22:02 2025 by rpki-client