Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/rqVzBkurbeclUxkmuEpdeueSy_4.roa
File: rqVzBkurbeclUxkmuEpdeueSy_4.roa (raw, json)
Hash identifier: ms9twoNPeqe+tX7+SeNyn/AlVW+xDYsKdoNRj7wcmVA=
Subject key identifier: AE:A5:73:06:4B:AB:6D:E7:25:53:19:26:B8:4A:5D:7A:E7:92:CB:FE
Certificate issuer: /CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Certificate serial: 0187727A4589A3C20830DD92FE4154B03111
Authority key identifier: 3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/rqVzBkurbeclUxkmuEpdeueSy_4.roa
Signing time: Tue 11 Apr 2023 22:40:28 +0000
ROA not before: Tue 11 Apr 2023 22:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 31.24.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:7a:45:89:a3:c2:08:30:dd:92:fe:41:54:b0:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aed80118022ff10eeea5ecb38050035aee0eac7
Validity
Not Before: Apr 11 22:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea573064bab6de725531926b84a5d7ae792cbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:90:fc:fb:10:b0:b9:15:cc:0c:f9:fb:30:
8c:3a:8d:23:12:5b:3b:e9:7a:6a:fa:b0:da:95:9a:
48:3b:ed:14:bf:d5:3f:ad:2a:df:e5:77:54:41:6b:
03:e8:9a:87:5c:5b:25:75:77:02:79:2e:3d:22:14:
eb:d8:4b:2a:45:fc:3c:28:3e:24:bd:14:a3:c0:ef:
e3:f5:b3:34:fb:21:09:5a:e6:45:cb:c6:97:d0:a3:
54:f2:e0:d2:84:a5:a1:c0:74:52:79:89:82:e4:4e:
e7:1c:ce:87:51:c3:b0:be:62:3f:aa:c5:9b:17:20:
f1:be:3b:98:55:3b:39:3e:7e:4b:37:74:b7:8b:0e:
b9:3c:26:a9:4f:af:7e:02:93:45:41:6d:5b:53:5b:
6c:3c:a8:0c:79:0a:39:28:8b:06:d4:85:bb:d7:d1:
30:6a:84:69:79:72:a9:a1:7e:54:5c:db:93:8c:23:
ec:bd:f2:8a:e4:b2:99:08:ea:15:1e:ab:a0:74:2c:
86:70:d2:a5:cd:35:0e:fe:f6:9c:fb:0d:97:15:bc:
d2:53:d2:24:4c:50:1c:03:0a:cb:19:c4:0d:48:be:
91:b1:fd:65:14:64:20:94:58:f7:06:38:09:be:37:
93:d5:e5:fd:71:1f:48:02:df:b5:9a:e3:bd:1a:99:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:73:06:4B:AB:6D:E7:25:53:19:26:B8:4A:5D:7A:E7:92:CB:FE
X509v3 Authority Key Identifier:
keyid:3A:ED:80:11:80:22:FF:10:EE:EA:5E:CB:38:05:00:35:AE:E0:EA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou2AEYAi_xDu6l7LOAUANa7g6sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/rqVzBkurbeclUxkmuEpdeueSy_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9466cb-b326-4b17-bba4-3c7ec8228099/1/Ou2AEYAi_xDu6l7LOAUANa7g6sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.82.0/24
Signature Algorithm: sha256WithRSAEncryption
54:58:f9:39:ee:36:85:e1:f7:33:ef:14:66:5c:80:14:b0:bc:
ac:a8:eb:22:0a:55:27:61:c5:f5:af:24:67:13:8f:d3:d0:cd:
86:80:f2:cd:04:8d:c1:12:da:f7:c7:e1:30:7d:51:29:d8:13:
04:bf:23:55:db:5d:2f:76:2e:59:41:59:64:17:6a:c9:dd:64:
63:1d:a4:fb:af:fa:6a:0d:06:ab:01:e2:95:7a:c4:d2:21:cf:
1b:55:ed:62:7c:f1:cc:76:8c:18:25:9a:a5:fe:45:25:3c:ea:
0a:78:7b:0c:e9:53:e1:58:ff:f8:f3:05:e6:28:ed:70:c4:47:
49:ce:e0:c5:c9:0b:6e:05:fc:53:b2:b1:24:0f:7d:e5:d4:fa:
bd:8a:a4:65:58:e3:be:f3:d7:8d:b4:ff:3c:ab:00:ef:22:66:
19:16:4b:4c:d9:87:5d:74:d2:bd:a1:b0:b4:90:89:dc:46:d8:
50:e5:09:a7:12:d9:37:e0:13:55:57:90:32:00:d1:07:9b:db:
f0:bf:18:c2:43:4e:f0:f2:c8:fb:4e:84:2a:82:f6:60:cb:c2:
aa:d4:fa:81:3a:6c:8d:23:a6:bf:c0:ba:d7:bd:cd:a6:54:b1:
e3:85:7f:8c:ea:ea:32:d6:d2:ca:93:a9:8d:0a:63:e4:ea:92:
81:a2:47:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdyekWJo8IIMN2S/kFUsDERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWQ4MDExODAyMmZmMTBlZWVhNWVjYjM4MDUwMDM1YWVl
MGVhYzcwHhcNMjMwNDExMjI0MDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE1NzMwNjRiYWI2ZGU3MjU1MzE5MjZiODRhNWQ3YWU3OTJjYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZSQ/PsQsLkVzAz5+zCMOo0jEls7
6Xpq+rDalZpIO+0Uv9U/rSrf5XdUQWsD6JqHXFsldXcCeS49IhTr2EsqRfw8KD4k
vRSjwO/j9bM0+yEJWuZFy8aX0KNU8uDShKWhwHRSeYmC5E7nHM6HUcOwvmI/qsWb
FyDxvjuYVTs5Pn5LN3S3iw65PCapT69+ApNFQW1bU1tsPKgMeQo5KIsG1IW719Ew
aoRpeXKpoX5UXNuTjCPsvfKK5LKZCOoVHqugdCyGcNKlzTUO/vac+w2XFbzSU9Ik
TFAcAwrLGcQNSL6Rsf1lFGQglFj3BjgJvjeT1eX9cR9IAt+1muO9Gpnj1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6lcwZLq23nJVMZJrhKXXrnksv+MB8GA1UdIwQY
MBaAFDrtgBGAIv8Q7upeyzgFADWu4OrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3UyQUVZQWlfeER1Nmw3TE9BVUFOYTdnNnNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NDY2Y2ItYjMyNi00YjE3LWJiYTQt
M2M3ZWM4MjI4MDk5LzEvcnFWekJrdXJiZWNsVXhrbXVFcGRldWVTeV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85NDY2Y2ItYjMyNi00YjE3LWJiYTQtM2M3ZWM4MjI4MDk5
LzEvT3UyQUVZQWlfeER1Nmw3TE9BVUFOYTdnNnNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxhSMA0G
CSqGSIb3DQEBCwUAA4IBAQBUWPk57jaF4fcz7xRmXIAUsLysqOsiClUnYcX1ryRn
E4/T0M2GgPLNBI3BEtr3x+EwfVEp2BMEvyNV210vdi5ZQVlkF2rJ3WRjHaT7r/pq
DQarAeKVesTSIc8bVe1ifPHMdowYJZql/kUlPOoKeHsM6VPhWP/48wXmKO1wxEdJ
zuDFyQtuBfxTsrEkD33l1Pq9iqRlWOO+89eNtP88qwDvImYZFktM2YdddNK9obC0
kIncRthQ5QmnEtk34BNVV5AyANEHm9vwvxjCQ07w8sj7ToQqgvZgy8Kq1PqBOmyN
I6a/wLrXvc2mVLHjhX+M6uoy1tLKk6mNCmPk6pKBokei
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:48:58 2025 by rpki-client