Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1CzlueJ_CYpLn5-_sNFevUWZ6Rw.roa
File: 1CzlueJ_CYpLn5-_sNFevUWZ6Rw.roa (raw, json)
Hash identifier: GGblf1Ehv9YUxzdxboDqh6EjxdqO4XdzbcRaYWFkFUM=
Subject key identifier: D4:2C:E5:B9:E2:7F:09:8A:4B:9F:9F:BF:B0:D1:5E:BD:45:99:E9:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D34E7A5C4085CFDB4A58F0A9E591FB77
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1CzlueJ_CYpLn5-_sNFevUWZ6Rw.roa
Signing time: Wed 26 Mar 2025 16:34:50 +0000
ROA not before: Wed 26 Mar 2025 16:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.62.0/24 maxlen: 24
31.56.122.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:4e:7a:5c:40:85:cf:db:4a:58:f0:a9:e5:91:fb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 26 16:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42ce5b9e27f098a4b9f9fbfb0d15ebd4599e91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:f4:5d:6e:05:d0:57:1c:75:bb:8c:8c:45:
6e:9d:7d:3c:ea:b0:bc:38:77:78:0a:ec:3c:b2:29:
57:98:0a:da:00:1c:02:1f:d8:41:5b:70:dd:f1:a2:
08:5f:7e:82:11:66:62:b1:5e:6b:ad:9b:50:2b:90:
9b:51:90:d8:86:4b:20:71:99:de:2d:ba:00:cc:09:
46:5a:54:c0:11:d0:8e:79:1e:70:75:11:37:6d:bf:
24:7e:4f:04:10:47:8f:eb:7b:04:d2:c2:00:57:ee:
5c:c1:fd:fa:0a:e5:f8:37:12:12:fc:a7:02:a0:58:
e9:cd:c3:89:d1:a2:3f:c5:c3:2c:19:1f:11:79:47:
f0:c8:f1:b3:c3:c5:b7:03:4b:4d:7a:ff:48:7f:7b:
21:7e:6c:34:9b:c9:1a:09:48:9c:5d:3f:03:7a:95:
61:dd:f6:27:b9:3e:9f:a0:92:a1:fc:3b:30:0e:0a:
21:f5:f5:27:9d:9e:2d:84:28:55:46:19:cf:2b:86:
6f:7a:1a:85:fe:2b:9b:2e:6e:9a:66:fb:53:c9:39:
06:43:2b:fa:41:c8:46:ad:c2:73:12:e8:db:26:27:
41:d0:5d:cb:4d:dc:ac:16:ba:6f:d7:bf:a6:41:5d:
aa:6e:e0:42:b7:94:9f:86:ae:de:f5:fa:3b:73:2c:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:E5:B9:E2:7F:09:8A:4B:9F:9F:BF:B0:D1:5E:BD:45:99:E9:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1CzlueJ_CYpLn5-_sNFevUWZ6Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.62.0/24
31.56.122.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:86:d4:7b:b3:f0:ee:76:b6:8e:be:35:a5:d7:b3:00:8d:0e:
49:b7:e4:12:0e:86:7c:83:09:f9:50:65:27:e7:26:5d:2e:27:
87:d3:a4:85:02:63:30:ef:64:5b:3d:91:49:08:0c:6e:45:07:
7f:0b:72:a0:42:2d:18:c0:47:6d:2c:c0:49:21:cc:ac:21:60:
20:e3:b0:69:98:10:3b:07:80:56:30:6c:de:33:d7:42:dc:90:
ce:21:9f:a3:72:80:14:42:82:fb:52:ae:d5:1d:e7:9a:c9:ec:
b6:80:e5:23:64:11:4a:c7:b1:c3:cd:53:15:ae:ba:e9:60:7e:
62:18:d5:59:28:d6:56:ac:52:72:7b:ca:50:cc:4e:c4:cd:c3:
27:93:32:d1:39:6f:3f:1e:2f:b9:92:a1:76:55:f9:0c:c4:a8:
02:f7:9e:e2:b6:25:ae:46:ba:42:f8:67:bf:e0:79:87:9b:f1:
e2:00:6d:db:f5:f4:e2:f1:66:ea:64:1e:e1:3d:1a:1b:6b:0e:
37:d4:ba:12:83:aa:21:73:05:37:78:c4:18:4f:1f:17:2f:a9:
9e:df:44:e2:17:04:95:00:a2:c2:a6:7d:9a:f5:c0:3d:f4:9b:
82:a9:7c:af:6a:cd:3a:af:58:bb:3f:c0:4f:28:28:22:88:d0:
c8:1e:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:25 2025 by rpki-client