Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1K40XsU811dmgJyTixRtFiVxSLE.roa
File: 1K40XsU811dmgJyTixRtFiVxSLE.roa (raw, json)
Hash identifier: xRaaSSqRHrMgxAVmb2kSlUq8+Dg79h4BxOAje/3UtSs=
Subject key identifier: D4:AE:34:5E:C5:3C:D7:57:66:80:9C:93:8B:14:6D:16:25:71:48:B1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019500E85C3C3E74E1D16512867D6915B219
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1K40XsU811dmgJyTixRtFiVxSLE.roa
Signing time: Thu 13 Feb 2025 20:03:02 +0000
ROA not before: Thu 13 Feb 2025 20:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 31.56.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:e8:5c:3c:3e:74:e1:d1:65:12:86:7d:69:15:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 20:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4ae345ec53cd75766809c938b146d16257148b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:49:ab:92:93:9b:33:64:b6:7e:35:34:59:
c1:7c:1c:eb:f1:38:4f:45:b7:57:03:0b:d9:a5:4b:
20:40:59:f5:b7:0a:d2:be:3b:9d:69:28:23:32:63:
23:67:a5:18:55:8c:3b:b8:d5:c9:10:49:0b:bc:e7:
98:ee:22:36:8e:4b:cd:1c:f8:bc:36:65:82:18:68:
3c:0c:cc:9a:1f:fd:6d:da:6c:4c:11:42:8c:89:c5:
5d:df:e4:b5:36:02:d3:c1:77:bf:f4:b7:d3:13:d5:
60:b6:29:15:50:60:d2:d9:51:a4:a8:6a:bb:87:1d:
de:a9:8a:36:32:0e:93:6c:25:ad:85:0e:72:98:61:
9d:d3:d3:00:05:fe:4a:80:68:e8:74:fd:ae:75:f7:
b5:b9:ce:77:96:85:1d:51:87:2d:72:a0:af:54:87:
a4:d0:c7:9c:d9:02:22:e9:c4:fd:d8:88:71:64:4c:
27:f7:7d:4b:41:ee:41:be:6e:bd:4e:2e:a3:13:01:
c3:b8:48:b6:b8:e7:3f:2f:7a:71:eb:64:42:d8:63:
60:e8:21:53:7f:69:a8:79:d8:3d:e4:27:ec:fa:00:
49:7a:0b:3f:72:9c:5c:31:fe:31:72:40:14:39:a8:
df:58:04:b9:c9:08:34:2f:ff:40:dd:63:19:99:3e:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AE:34:5E:C5:3C:D7:57:66:80:9C:93:8B:14:6D:16:25:71:48:B1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1K40XsU811dmgJyTixRtFiVxSLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b2:60:3e:a8:a3:c9:26:29:f4:6d:69:87:a6:cd:fd:bb:fb:
06:12:6c:97:27:4b:d0:4d:5c:55:7d:b2:7e:a5:ed:71:9c:6a:
b4:c8:89:94:b8:d8:99:cf:4a:e7:10:b1:4c:40:a5:75:dd:c2:
16:1c:b5:64:63:6a:24:14:17:56:eb:13:5d:f3:23:ed:0b:02:
75:ce:5b:85:63:fc:92:dc:04:d3:7e:f7:1d:49:1c:7a:e7:58:
5a:c2:0d:d5:97:aa:fc:27:e3:6b:d4:f4:4c:bb:0d:7a:98:b1:
ae:7e:b9:a6:cd:f8:eb:2c:9a:b7:94:b4:23:38:23:cf:25:87:
65:21:5c:01:35:16:a0:38:f3:78:a7:c0:5a:3a:14:77:ec:e2:
b7:31:6d:1f:26:69:86:78:40:64:10:1e:41:74:e7:21:f4:57:
5f:9f:6f:71:92:49:36:31:22:c7:f3:7a:1c:48:e2:3a:12:12:
e4:8f:d1:f7:ad:96:ff:0b:da:7a:da:b3:35:4c:4c:72:ad:6e:
f7:aa:2e:bb:9c:1c:c3:7a:69:6c:56:53:5f:b9:46:42:e5:29:
76:3f:ac:68:2c:e5:6b:bc:d0:86:dd:e4:94:70:00:de:cd:2f:
0f:e0:ab:77:79:62:5e:6f:80:bf:2b:f9:39:db:9e:86:d1:da:
a2:b2:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:39 2025 by rpki-client