Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Jum2LObwkQGXSAGe0Bhp24xxifk.roa
File: Jum2LObwkQGXSAGe0Bhp24xxifk.roa (raw, json)
Hash identifier: i6JO+szqd2rN4UR9UnF4hqy4JNlckwmqsLSffip4MY8=
Subject key identifier: 26:E9:B6:2C:E6:F0:91:01:97:48:01:9E:D0:18:69:DB:8C:71:89:F9
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA17C08B69BBEFE586B3C37982CCE3
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Jum2LObwkQGXSAGe0Bhp24xxifk.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.132.0/24 maxlen: 24
31.40.134.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:17:c0:8b:69:bb:ef:e5:86:b3:c3:79:82:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26e9b62ce6f091019748019ed01869db8c7189f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:c1:12:84:8f:73:39:92:ca:ae:24:25:9d:
29:37:be:21:cf:38:e9:44:be:a1:44:b0:96:ac:15:
5a:47:98:80:38:5e:95:9d:a6:a1:d0:d1:70:59:a3:
28:d7:57:69:3c:50:da:c1:92:9e:6b:a0:19:2b:32:
2d:a9:0f:ea:9b:0e:c9:d0:23:ac:7c:da:ee:42:a0:
89:89:5a:01:6e:fb:e3:87:e0:b7:c8:4d:a6:aa:f7:
27:b2:6a:bd:b6:55:6a:7f:05:b4:ff:9d:80:47:3d:
01:ef:24:09:4f:ca:1a:97:39:42:59:59:a0:b4:7f:
7b:13:3d:76:e6:c2:46:59:cf:32:df:8c:01:31:56:
0d:26:fd:98:c4:47:84:ce:f4:a0:71:ac:79:6e:92:
eb:97:00:be:cf:b1:5b:87:56:96:f3:29:99:f7:ec:
55:dc:42:db:d6:e7:9e:63:20:0b:b3:6e:ea:86:e1:
f6:1f:b5:69:85:cc:45:08:81:0b:1f:1c:8e:97:0b:
48:bb:f6:ba:01:5a:b1:85:e2:9c:8a:79:88:62:85:
d5:fc:b7:b0:69:ea:a9:bf:f8:89:66:a4:b8:bc:19:
52:0f:44:32:27:e4:07:16:33:88:e0:39:0f:15:20:
fb:9b:1b:a2:a8:be:e4:46:63:93:3b:a5:a0:3e:ef:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:B6:2C:E6:F0:91:01:97:48:01:9E:D0:18:69:DB:8C:71:89:F9
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Jum2LObwkQGXSAGe0Bhp24xxifk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.134.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0/24
31.40.172.0/23
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
08:e1:ab:78:d1:7c:34:d7:fb:79:6f:cc:13:56:6a:d9:01:6b:
87:eb:02:6a:61:d7:b3:4c:c2:ef:b9:4a:36:32:a9:28:5e:4b:
d9:bc:b7:c5:31:fb:b3:c3:3e:cc:15:7e:92:de:68:22:33:29:
38:3b:f3:c5:d4:27:5d:21:0c:e5:0c:ad:fe:e0:b1:71:c7:68:
e2:2d:94:bb:97:21:8c:38:31:f8:e4:df:39:ea:dd:29:8e:be:
27:25:09:89:b1:34:70:db:bf:c4:39:72:24:88:f3:fc:8d:af:
62:82:a9:a8:71:18:1a:90:1e:f9:ea:d0:39:3e:44:4b:38:7f:
eb:c5:ab:b8:15:cb:fe:9e:15:a2:e0:68:49:e3:54:f1:c8:b6:
3b:e1:20:e0:f4:13:b6:9d:46:4a:ae:75:bb:0c:af:7f:2c:70:
a0:67:29:82:a4:52:db:66:66:e9:fb:ba:63:67:22:27:1c:5f:
5a:f5:f1:55:61:dd:b9:72:84:97:99:95:bf:f9:ca:79:46:6e:
02:3b:9f:95:52:c4:2d:08:a7:a4:bc:4c:f2:94:a7:b2:80:a0:
44:dc:7a:35:94:57:eb:e9:dd:97:00:33:27:2d:d4:f2:e0:3a:
3a:07:43:a6:33:ee:07:32:ec:7c:af:a1:6e:dd:bf:e9:03:2b:
4d:93:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:15:28 2025 by rpki-client