Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/W4bkJ6IHGpMDnc-eERRMgLecaRY.roa
File: W4bkJ6IHGpMDnc-eERRMgLecaRY.roa (raw, json)
Hash identifier: f8DGWIOVKEtO1y7kX/yc0GrbmCyQ2M3bGkc6cPKnJfo=
Subject key identifier: 5B:86:E4:27:A2:07:1A:93:03:9D:CF:9E:11:14:4C:80:B7:9C:69:16
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 0194228D3ADFFBFA4D13562E0187358F2FA7
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/W4bkJ6IHGpMDnc-eERRMgLecaRY.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42041
IP address blocks: 31.128.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3a:df:fb:fa:4d:13:56:2e:01:87:35:8f:2f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b86e427a2071a93039dcf9e11144c80b79c6916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:e8:43:02:66:ea:d6:38:04:b4:1e:91:b0:
fe:2e:71:97:ab:1f:ba:a6:b3:73:c7:c0:8f:b9:a3:
3d:2e:63:91:c3:bd:f5:a9:3d:ed:11:d2:05:f6:f6:
c9:77:cb:52:9c:40:1c:61:6b:2c:f3:ba:51:6a:94:
30:98:7b:eb:ae:8f:35:70:16:83:f5:af:b3:d0:4a:
6b:47:4a:96:e1:1a:b2:13:aa:d7:66:7a:be:36:05:
eb:0d:9a:5d:a1:3e:cd:09:2b:a5:28:3b:e6:3a:1f:
53:dc:22:f0:4b:18:5f:c0:06:36:08:5a:55:c5:05:
49:79:a5:7c:29:5f:dc:7e:ca:63:0b:2c:15:63:37:
56:b1:a2:10:bc:e8:6c:b5:c8:46:75:5b:68:03:21:
a0:e2:ea:b7:2a:e5:8f:0f:d7:e3:18:25:ac:59:0b:
1c:22:86:a1:8d:5a:13:fc:2b:69:f7:cf:85:49:e7:
64:3c:a9:d7:8b:cc:d3:f4:05:55:5a:cc:74:d4:ab:
fa:2f:f7:b8:45:97:7d:9b:f8:41:46:ad:20:0c:3e:
78:6a:a4:1f:75:74:a1:70:e3:cc:92:32:52:ab:e0:
2a:27:34:0c:92:1e:e1:a3:b1:fa:1c:da:65:e1:42:
8f:35:9c:4c:58:47:7d:71:d0:10:dc:3d:ab:a0:17:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:86:E4:27:A2:07:1A:93:03:9D:CF:9E:11:14:4C:80:B7:9C:69:16
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/W4bkJ6IHGpMDnc-eERRMgLecaRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.64.0/24
Signature Algorithm: sha256WithRSAEncryption
40:be:a4:7a:bc:3d:75:5e:64:8b:49:0a:78:f7:c6:b9:d3:9f:
79:d1:62:a8:2f:9d:fd:af:0e:af:5c:58:23:25:85:5c:22:7f:
ce:f5:35:e3:5b:d1:5d:50:80:1c:0f:e8:f4:b0:b5:a9:92:cc:
71:90:a2:34:53:32:97:de:21:aa:99:55:44:f2:d5:cc:ee:17:
78:5d:3b:9f:b7:a9:35:95:6d:37:ae:d3:bf:83:78:31:2b:2b:
a1:19:1e:b5:8f:62:94:ea:17:82:10:42:dc:58:2f:b5:06:a8:
a6:32:3b:fd:f0:ff:cc:7d:4f:fc:cc:bf:d3:f6:d1:47:cd:6c:
49:4d:c5:f3:79:75:b3:02:50:c8:f2:09:67:f1:f8:6e:9e:fa:
4e:5d:48:83:10:87:bf:bb:24:18:3c:42:8b:b5:94:17:1c:ea:
b1:07:29:e1:e0:d6:b6:17:83:1c:e8:7b:4e:b5:3d:78:6f:03:
21:14:5d:b8:8c:20:0c:9a:62:31:f6:a3:05:cb:e6:6e:d4:90:
2d:dc:88:ba:23:71:9c:fc:f1:6e:1e:86:91:65:8c:35:35:18:
4b:37:17:a1:b2:58:91:4f:1c:13:89:37:47:be:06:48:c4:75:
c0:a5:88:d4:3a:91:0e:2c:2d:12:23:51:8f:e7:ab:1e:bd:8a:
b2:d9:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:26 2025 by rpki-client