Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2GxOMY5X2MkrLf8l1iH4rBuTtzY.roa
File: 2GxOMY5X2MkrLf8l1iH4rBuTtzY.roa (raw, json)
Hash identifier: 841QIkDWrVFgHL7cS4vMQ3yC/91pFi0ueX2G8TRmxrI=
Subject key identifier: D8:6C:4E:31:8E:57:D8:C9:2B:2D:FF:25:D6:21:F8:AC:1B:93:B7:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195892AACEB8D8978E5C5FC1F0711D569A8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2GxOMY5X2MkrLf8l1iH4rBuTtzY.roa
Signing time: Wed 12 Mar 2025 07:03:50 +0000
ROA not before: Wed 12 Mar 2025 07:03:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153607
IP address blocks: 31.58.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:2a:ac:eb:8d:89:78:e5:c5:fc:1f:07:11:d5:69:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 12 07:03:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d86c4e318e57d8c92b2dff25d621f8ac1b93b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:a9:4f:25:51:a5:24:6d:4d:09:e2:a8:79:
6e:75:63:79:29:07:06:02:24:f5:fb:72:5f:27:b6:
37:69:83:7f:ff:cf:4b:6a:c8:af:b0:b3:2c:c3:d5:
c3:d0:22:c4:0a:17:f8:2a:f2:9e:43:c1:30:da:15:
ad:7c:b3:eb:22:7c:33:49:23:64:97:9f:e4:55:4e:
4a:99:43:75:78:53:af:c7:1e:83:60:99:e2:f0:f1:
73:f9:1a:02:6e:33:dd:ac:b5:6b:fc:fa:8c:0d:78:
42:ee:fb:64:5b:b2:df:04:e0:be:40:ba:99:cf:e8:
01:a8:31:33:6f:86:4c:07:66:93:68:d5:07:c3:85:
0a:26:64:a4:68:2a:a7:72:f7:5d:1b:30:98:fb:cc:
11:10:a1:e4:cb:4f:1c:a4:42:55:98:3d:72:aa:e8:
fd:2a:47:83:e0:d5:0b:15:8c:81:08:82:ad:66:43:
97:b7:e0:18:60:17:31:63:5d:bb:1e:98:f8:6a:d7:
d5:99:56:4e:a7:95:63:af:c4:b9:e7:1a:d0:70:b0:
7a:b6:e1:39:2f:d4:f4:0a:89:49:0f:5f:c5:50:78:
58:2a:a2:11:8c:2c:49:22:bf:db:24:c6:73:0e:f0:
2c:40:b9:27:b8:bd:39:b1:08:4b:ee:d5:e9:0e:a0:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6C:4E:31:8E:57:D8:C9:2B:2D:FF:25:D6:21:F8:AC:1B:93:B7:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2GxOMY5X2MkrLf8l1iH4rBuTtzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.78.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bb:23:b3:2c:e2:5c:65:29:f4:ae:b0:d1:bc:c0:55:75:b7:
03:11:92:56:72:23:89:15:2a:2f:36:6f:d7:9c:07:bd:66:d2:
ef:83:7f:95:65:db:88:c0:7d:49:7c:fa:84:11:d2:33:96:ec:
14:89:1a:7d:27:6d:a1:b9:82:bd:0a:05:28:cf:8c:3a:82:3b:
75:5c:b7:73:30:ff:9d:96:d3:8e:4b:a7:17:27:8d:96:67:91:
a6:43:52:db:dd:57:a5:50:cf:64:80:e7:5b:b9:66:45:93:6a:
78:14:f6:4d:89:87:31:99:d2:ad:49:20:09:2b:1a:c7:08:83:
b1:fb:90:fd:fd:e0:e2:d5:9c:80:81:67:1d:ef:6c:61:0e:ff:
d0:93:81:31:06:38:00:5b:d2:15:13:ce:f5:0c:5f:cf:5a:a7:
3d:ff:e9:72:f6:21:ba:df:94:a1:f8:27:9a:03:60:53:4e:02:
bb:18:5f:5f:26:d7:2c:f5:10:49:97:d9:77:ab:90:28:2d:c6:
37:eb:cb:3b:e9:8b:67:8b:03:87:8f:fd:71:cf:0d:43:d9:1b:
ed:8f:ad:db:bc:c3:d1:19:b5:81:86:03:cf:33:f8:3e:e6:fc:
dd:60:d1:5d:f3:b8:8e:be:fb:9d:58:87:db:c1:47:54:59:35:
98:45:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:06 2025 by rpki-client