Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/B22vH35p6H8ZGkBUHOKgmJBgLjg.roa
File: B22vH35p6H8ZGkBUHOKgmJBgLjg.roa (raw, json)
Hash identifier: lh1jF4X2jGz00IJoF7g4bIhQ/AlCu5SuKqXXLVHhzkA=
Subject key identifier: 07:6D:AF:1F:7E:69:E8:7F:19:1A:40:54:1C:E2:A0:98:90:60:2E:38
Certificate issuer: /CN=c74d33ac39f7c1540c5cb614ff93aaa6ba6249ef
Certificate serial: 02E7593E
Authority key identifier: C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x00zrDn3wVQMXLYU_5OqprpiSe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/B22vH35p6H8ZGkBUHOKgmJBgLjg.roa
Signing time: Sat 01 Jan 2022 08:59:27 +0000
ROA not before: Sat 01 Jan 2022 08:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212667
IP address blocks: 31.40.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48716094 (0x2e7593e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74d33ac39f7c1540c5cb614ff93aaa6ba6249ef
Validity
Not Before: Jan 1 08:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=076daf1f7e69e87f191a40541ce2a09890602e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:ec:ac:30:2a:cd:d5:30:09:f1:0f:4a:c7:
50:77:b3:34:2e:cc:b8:9f:6b:69:3e:33:f9:dd:8b:
9a:76:bf:e4:dc:8f:eb:27:23:ff:78:2b:ef:a2:16:
89:b1:43:9a:0f:d0:13:2e:5b:d4:08:45:77:15:e2:
aa:02:2b:02:b0:6b:e3:f8:6c:11:a1:b7:1f:6a:84:
28:f7:9e:53:b0:0e:8c:dc:37:bd:77:84:71:7d:74:
f3:1b:24:6a:db:b5:5f:9d:7b:d9:f1:8e:f1:30:50:
3a:db:82:46:8f:b7:2d:a9:89:d2:9d:47:d0:97:5e:
e6:b4:03:bb:9a:05:1c:e0:73:e3:6b:5c:af:e3:6e:
f7:47:0a:b2:bd:8e:a1:24:5a:8a:ad:ea:60:7b:d1:
91:17:54:0a:c9:f0:e7:79:21:c6:88:2a:da:28:b4:
fa:13:40:5d:fd:4e:1f:d1:68:e5:29:ca:bb:02:ed:
31:a9:09:aa:52:81:ce:12:6b:32:64:bf:3f:84:81:
24:15:a4:9f:2e:a4:22:4e:ae:cf:1f:c5:76:36:70:
e3:e6:c8:73:ee:c1:84:2c:cf:4b:50:12:79:8f:96:
15:7c:44:7e:45:cc:f3:4e:18:fb:9b:c8:c4:c0:76:
0b:22:6e:1d:0d:4f:c3:02:66:6c:fc:9f:2c:e1:c4:
f6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:AF:1F:7E:69:E8:7F:19:1A:40:54:1C:E2:A0:98:90:60:2E:38
X509v3 Authority Key Identifier:
keyid:C7:4D:33:AC:39:F7:C1:54:0C:5C:B6:14:FF:93:AA:A6:BA:62:49:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x00zrDn3wVQMXLYU_5OqprpiSe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/B22vH35p6H8ZGkBUHOKgmJBgLjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/01b4f3-3f37-4931-a6fb-15f7b9e56e79/1/x00zrDn3wVQMXLYU_5OqprpiSe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.250.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1e:28:11:31:7e:e4:2d:78:32:35:6e:41:a3:43:04:44:03:
60:50:cb:fe:2e:76:97:97:57:6d:7b:96:63:e7:20:b2:44:88:
15:6d:21:d0:9a:32:29:08:29:7e:d5:f1:27:71:42:b4:0d:de:
35:39:58:01:69:96:5d:f2:e1:47:9e:29:03:2a:0d:22:e0:77:
a5:8a:7a:91:e1:d4:d2:e3:98:eb:1b:7b:fc:ec:6f:46:48:af:
3e:fd:2a:80:6c:d0:45:f1:36:cc:5a:5c:e2:9a:11:ab:5d:6c:
6d:4d:b1:0f:1c:6e:3b:90:7e:ea:49:80:37:54:99:8d:27:0f:
94:08:08:f9:4a:70:87:0a:51:5d:26:b0:3b:dd:52:1d:4a:c1:
cb:b1:3a:12:cb:82:94:16:29:6c:90:e2:4f:6d:de:00:3e:4d:
8a:e5:ea:28:a3:9c:08:69:eb:61:13:9f:d6:41:e2:c4:fe:dc:
d6:6b:cf:19:47:7b:11:a7:92:73:e9:8f:dc:4e:c7:cb:33:99:
cd:96:80:06:b7:9e:c6:8e:d5:b6:5e:db:d0:8e:56:2c:7e:8f:
2e:2d:9d:a1:4d:96:14:d5:b5:8a:9f:10:0a:b5:59:46:e3:5b:
d7:70:a9:9b:26:e4:8f:42:af:81:aa:38:04:8f:f4:db:fa:3a:
0d:a5:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:23 2025 by rpki-client