Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i_rrSeZPVtugiJJvEliUK8J1RzA.roa
File: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (raw, json)
Hash identifier: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=
Subject key identifier: 8B:FA:EB:49:E6:4F:56:DB:A0:88:92:6F:12:58:94:2B:C2:75:47:30
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 019424B3FBB5EA5F8B6C113B53A6A60D0ECD
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i_rrSeZPVtugiJJvEliUK8J1RzA.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39507
IP address blocks: 31.130.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fb:b5:ea:5f:8b:6c:11:3b:53:a6:a6:0d:0e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bfaeb49e64f56dba088926f1258942bc2754730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:cd:f6:56:49:7e:12:6e:ca:e4:f0:d2:c7:
1b:b4:3a:87:be:19:9d:51:02:18:3a:16:29:e3:19:
ec:1c:e5:ef:02:58:b8:01:66:fc:6b:81:93:a9:b9:
79:3e:d1:e0:10:c1:2f:b5:3c:68:af:6b:23:c4:32:
f1:2c:90:b1:6d:94:28:c9:36:a7:dc:2e:24:82:4f:
41:bc:49:2c:07:01:e8:d3:fe:03:8f:b6:8a:98:5c:
7d:1a:c5:36:83:1a:a7:9e:9b:b2:a0:f3:c6:50:46:
a0:97:c4:32:87:53:f4:e3:11:d0:74:8a:b9:2e:47:
0a:89:d1:19:7a:5a:a4:eb:15:1b:c6:cf:00:74:ca:
ae:f6:5e:00:9c:e5:13:59:aa:ce:99:07:bf:6c:55:
81:03:c2:12:0b:c8:67:85:1b:85:87:9f:31:89:ff:
c3:e4:c6:6c:6c:27:61:6f:9c:7a:04:de:82:53:27:
2c:49:04:61:5c:b0:4b:fa:37:38:90:cf:ca:19:ad:
69:21:6e:51:97:c8:37:f2:b7:8b:aa:f7:de:9f:cd:
2d:f7:5c:14:22:70:c6:6c:74:b3:66:32:dc:6c:35:
dd:9f:ba:1f:05:68:a3:a0:3f:82:df:64:ba:75:d6:
77:bd:73:02:71:3a:5c:20:1f:12:c0:61:31:6f:03:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FA:EB:49:E6:4F:56:DB:A0:88:92:6F:12:58:94:2B:C2:75:47:30
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i_rrSeZPVtugiJJvEliUK8J1RzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.216.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:bf:8b:0c:a3:54:34:2c:ef:c8:9d:08:f6:94:a9:4b:f6:97:
34:a4:35:9c:75:dc:96:bc:95:3f:8d:bf:52:13:89:39:6a:98:
06:19:6d:d4:d8:30:bc:da:20:95:db:d9:2d:c3:a3:91:f9:56:
f1:e6:1a:53:7d:27:8e:4a:0c:01:43:01:37:6a:44:7c:b3:54:
a1:e0:d4:29:b1:42:d5:43:67:6d:47:8c:c4:d2:fd:42:59:64:
9b:89:1a:f2:d3:31:a0:13:76:c1:4f:79:83:06:53:0f:fb:c8:
af:ae:5e:e7:44:60:91:75:38:00:a7:08:22:4e:6c:53:2b:05:
26:4d:bf:09:15:c9:d1:a7:5d:da:3e:66:07:91:05:b2:2e:72:
30:d0:e0:07:76:43:4d:13:2d:88:b0:1d:49:26:7c:05:ff:ef:
4d:28:15:12:4e:78:c1:a0:0f:b5:db:55:39:3c:97:5e:bd:0c:
9c:00:a7:c8:78:ec:4e:e3:55:fe:18:0c:61:63:cb:da:84:ae:
43:70:2e:54:1f:13:fd:14:2a:97:43:16:9d:b4:8b:fc:8b:6c:
3b:5d:42:3d:26:e2:33:38:e3:16:b3:10:6a:39:cc:9e:37:20:
8f:b6:29:10:e1:8f:4b:18:6b:ac:1a:b9:c3:cb:83:6b:fd:38:
84:80:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:02 2025 by rpki-client