Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/OuhlLkG2RW0EQdfJol0a6cxFtLA.roa
File: OuhlLkG2RW0EQdfJol0a6cxFtLA.roa (raw, json)
Hash identifier: dMQSaubmPLEo7nj/OCwJK0Yv/vyeNOmJhvUcFAo9JLg=
Subject key identifier: 3A:E8:65:2E:41:B6:45:6D:04:41:D7:C9:A2:5D:1A:E9:CC:45:B4:B0
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA18FCB587A2D6550B85F7ECD9C8BF
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/OuhlLkG2RW0EQdfJol0a6cxFtLA.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206810
IP address blocks: 31.40.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:fc:b5:87:a2:d6:55:0b:85:f7:ec:d9:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae8652e41b6456d0441d7c9a25d1ae9cc45b4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:7d:8d:d8:c5:88:6b:99:d2:bc:ad:fc:5b:
8f:44:6e:11:12:4d:50:28:8f:b0:d9:3e:fc:12:60:
4b:99:dd:55:1c:c6:d4:e2:24:c7:59:aa:51:7f:aa:
48:cb:9d:8f:1a:46:e3:90:d9:e9:40:ae:ff:d9:d0:
5e:6d:27:ef:9c:c0:ed:67:0f:76:15:b2:f4:1d:b6:
3e:0b:58:55:9b:d6:e7:9e:10:83:83:1e:b5:b0:8f:
a8:91:c8:86:e5:68:6c:fd:90:5a:b6:8c:f7:44:31:
ac:9d:98:50:1f:de:02:5c:cb:f7:ed:16:93:e9:e5:
bc:4d:7e:dc:a3:58:22:1e:da:cc:9a:92:e8:af:20:
51:4d:bd:49:0d:ad:c5:d1:ba:f9:e5:36:77:52:63:
b3:97:2f:92:b5:b1:ba:4d:ed:c6:c8:5c:54:1e:44:
e6:3c:16:aa:c8:f8:24:f8:52:5b:0b:f1:ec:f0:e1:
54:b9:8c:d7:df:19:16:07:e3:1e:d3:73:e9:fe:fa:
9b:fb:17:dc:12:7d:cd:75:62:f1:9b:68:c6:d6:28:
37:5d:48:60:a4:98:e4:e1:b2:46:11:8c:e5:21:1e:
47:72:6f:25:52:3d:f3:68:7c:2e:6f:f7:e1:bd:91:
32:98:05:4e:81:39:24:13:67:18:7e:45:e5:6c:00:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:65:2E:41:B6:45:6D:04:41:D7:C9:A2:5D:1A:E9:CC:45:B4:B0
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/OuhlLkG2RW0EQdfJol0a6cxFtLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.157.0/24
Signature Algorithm: sha256WithRSAEncryption
49:28:75:14:44:51:a9:87:06:78:33:5a:2d:42:51:a3:4c:3f:
df:1b:23:4f:68:ad:4f:3e:4f:7d:0f:fb:89:6b:08:49:d4:28:
ed:99:2d:9e:1a:f0:50:86:25:bc:d6:0a:07:91:87:a7:68:2b:
5e:95:1f:9e:eb:ab:c0:62:4e:98:8d:5e:fe:4f:1f:f8:f6:36:
f3:59:1a:ad:e6:c5:01:13:f9:e1:70:08:84:9b:07:69:0f:2d:
d4:3f:74:2a:27:e4:5b:bc:83:ce:a5:43:ec:02:68:50:74:19:
47:78:8b:8b:44:92:a8:b0:56:e2:30:f3:55:18:cd:dc:38:04:
3c:1a:05:8d:f1:d1:10:0c:a0:fc:38:aa:54:66:30:99:fb:16:
47:78:c0:41:ef:45:5c:7c:e7:e9:b5:7e:dd:83:8b:c4:d1:57:
98:76:54:ea:eb:2b:a5:8b:39:be:7f:db:ca:83:8c:c3:76:21:
eb:bf:26:68:71:87:27:8e:45:67:2a:26:d3:d2:a7:e3:63:7e:
b4:64:e7:3b:d3:a2:81:c0:73:95:d4:1f:e6:8d:dd:30:7a:34:
86:a9:82:68:5f:0d:fc:a7:e8:0f:d7:c8:24:f9:6a:45:74:d2:
79:68:69:51:d9:b2:9f:c8:9e:fd:a7:14:92:51:be:1a:7c:90:
fb:63:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:00 2025 by rpki-client