Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/7idUuv0EXo6JR_OGSzIShJ9UoSA.roa
File: 7idUuv0EXo6JR_OGSzIShJ9UoSA.roa (raw, json)
Hash identifier: aZlW8lszwRkMGG5gCDnCD/32X330P7BpES+2uAiCzK8=
Subject key identifier: EE:27:54:BA:FD:04:5E:8E:89:47:F3:86:4B:32:12:84:9F:54:A1:20
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA1717878D29F11DA72585BBE66E5C
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/7idUuv0EXo6JR_OGSzIShJ9UoSA.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59823
IP address blocks: 31.40.128.0/24 maxlen: 24
31.40.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:17:17:87:8d:29:f1:1d:a7:25:85:bb:e6:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee2754bafd045e8e8947f3864b3212849f54a120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:f6:ff:7c:8b:95:00:95:79:d4:e5:94:e6:
81:b4:a6:c2:5e:25:86:f7:f5:95:9c:5a:c8:e1:76:
02:4f:ad:bf:76:bc:c5:b7:13:41:95:38:ea:67:ef:
b8:60:f8:ad:19:9a:5a:39:fb:b6:75:9f:72:52:92:
5a:4a:ff:08:27:94:ca:18:28:e7:85:f0:77:c8:32:
bd:23:2c:ae:5b:58:44:d7:f7:30:fa:ac:a6:f6:0d:
73:37:ed:b4:79:61:ea:40:dd:f5:73:26:a0:62:3b:
a3:2a:d1:2e:da:95:7f:7f:f6:37:90:a1:cb:a8:0c:
a3:4c:0d:ae:4a:1d:9d:07:a0:9c:43:01:28:e1:37:
26:77:14:fd:48:db:cd:88:af:70:17:e0:0a:03:c3:
44:58:bf:88:f2:29:90:bd:5e:18:ea:95:23:fe:7c:
f7:f8:83:75:7a:78:b1:c6:f8:d7:07:ef:62:7b:8c:
25:72:a1:f1:e8:b6:c4:76:ed:82:fd:3a:39:15:06:
2c:51:09:3f:1c:77:72:88:cd:b0:f8:f2:bb:76:ea:
71:02:c5:cb:ab:11:5d:1d:07:3d:e8:ff:fc:8a:07:
ba:47:d6:38:4b:b9:d2:b3:8f:35:37:48:bc:c2:72:
97:c9:c8:54:d3:72:bf:a6:66:8b:7c:8e:ab:0e:27:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:27:54:BA:FD:04:5E:8E:89:47:F3:86:4B:32:12:84:9F:54:A1:20
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/7idUuv0EXo6JR_OGSzIShJ9UoSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.128.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:fa:26:a6:ab:fd:09:bd:79:78:90:57:6a:d1:d9:a2:2a:f7:
ef:1a:53:47:0d:13:1b:94:3b:30:eb:1c:d6:85:cd:61:30:d0:
b9:2f:d7:2f:89:95:89:a8:dc:5d:24:d3:b2:bc:ac:5d:d9:74:
c3:5f:d5:d8:9a:66:f7:54:e9:03:a0:c7:a9:c8:ca:32:dc:19:
9c:be:77:9e:38:bc:30:b4:69:ad:97:d6:a1:29:0f:9e:98:67:
aa:ea:f0:2c:fe:76:e6:24:4d:e9:dc:cb:0a:2b:0e:0a:f4:ed:
de:60:82:bf:d4:a8:39:a8:d0:07:ef:b7:5e:32:fd:f2:4b:53:
9f:79:0e:49:19:f8:81:f0:1f:84:62:b2:dc:8d:9d:9b:b0:a9:
5d:9f:03:aa:e0:27:6a:a9:b8:40:28:ef:d2:74:65:19:ad:59:
84:27:15:e0:50:f6:ad:82:a4:6a:89:50:87:a4:9a:7e:c9:c0:
7b:9f:b0:82:d6:47:2c:65:9f:19:bd:05:40:30:71:9d:06:23:
8d:29:35:d6:3a:b3:4d:a8:98:4d:e8:19:34:4b:c9:1c:29:50:
ca:0c:63:c9:ad:8d:2b:1d:ce:68:53:31:56:5e:76:76:e3:5f:
48:43:86:31:98:e1:f1:17:9f:2a:34:1a:58:c6:68:45:37:f4:
ff:e5:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:04 2025 by rpki-client