Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FrCcvT5fxGWDGO0zPvEuXVHT3ss.roa
File: FrCcvT5fxGWDGO0zPvEuXVHT3ss.roa (raw, json)
Hash identifier: kY2zDk9aYz+cWsOxDd/oXQQix3YOib/BkiZDe/Ttl7A=
Subject key identifier: 16:B0:9C:BD:3E:5F:C4:65:83:18:ED:33:3E:F1:2E:5D:51:D3:DE:CB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A54A617FF50C85803E72E40DE6F8EBE1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FrCcvT5fxGWDGO0zPvEuXVHT3ss.roa
Signing time: Mon 17 Mar 2025 18:07:50 +0000
ROA not before: Mon 17 Mar 2025 18:07:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39600
IP address blocks: 31.56.89.0/24 maxlen: 24
31.59.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:4a:61:7f:f5:0c:85:80:3e:72:e4:0d:e6:f8:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 17 18:07:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b09cbd3e5fc4658318ed333ef12e5d51d3decb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:9e:48:65:15:10:cd:6d:22:c5:95:e9:b5:
87:46:2a:08:5e:2d:ce:fa:e8:5d:27:2d:06:b5:4e:
a1:95:dc:48:f7:f8:e8:a7:24:b7:40:be:4c:f1:87:
14:44:58:3d:7c:8a:28:ac:6e:8e:dc:70:e1:af:0c:
07:ac:c1:2e:d1:97:30:0c:b1:f5:1b:02:92:7b:06:
a2:6c:7f:06:7a:16:27:38:ad:a5:6c:63:da:c4:c4:
13:7d:09:85:db:7f:92:27:5c:f5:0d:ec:ef:75:69:
0d:48:da:ad:ba:72:42:7f:41:82:ed:10:74:fe:03:
c9:55:6e:6b:ca:9f:9a:d7:68:5b:2b:b1:0d:ea:db:
53:ed:b7:f7:56:0b:b6:b0:1e:2e:38:b2:93:7d:47:
ff:7f:42:53:48:ff:a8:8d:0a:7e:49:ea:24:bf:f8:
59:a9:e1:d8:01:9b:2e:7f:18:53:91:4d:31:49:1b:
6e:7a:fc:ec:97:38:1b:30:39:fa:e5:5c:db:01:45:
9f:4a:64:16:48:34:ce:96:ba:57:ce:be:56:92:ea:
65:bc:5c:95:0d:78:0b:69:f6:7a:68:a3:3f:d6:06:
cf:bf:cc:b8:35:01:11:55:73:7b:66:70:89:fc:c3:
29:8c:ce:42:6b:9d:10:50:57:90:55:3d:e5:8b:ae:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:9C:BD:3E:5F:C4:65:83:18:ED:33:3E:F1:2E:5D:51:D3:DE:CB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FrCcvT5fxGWDGO0zPvEuXVHT3ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a0:19:ce:3a:61:5f:6e:8e:6f:3e:28:95:1b:94:5a:17:c9:
ce:65:a6:62:d5:ac:f7:a3:9e:79:96:bc:3f:6b:20:b6:25:0e:
f4:d4:17:35:ad:fa:aa:98:d6:b6:87:17:5d:a0:0b:1c:37:ab:
76:4b:63:b9:ac:3b:c1:05:d8:14:fa:bc:88:33:b3:7f:45:05:
54:1b:03:d7:38:45:2f:9f:89:18:cb:13:73:2f:da:aa:b0:af:
1b:a4:78:10:28:cb:d6:be:96:ec:14:c1:d7:1d:a2:45:82:cc:
58:72:f2:63:3d:50:d0:7a:c6:86:24:6d:15:82:c1:59:48:01:
be:61:66:df:83:60:5f:36:f4:4c:1f:56:60:3e:08:e2:d4:61:
92:73:b8:03:88:4f:e6:28:14:05:a2:26:79:44:4f:52:e4:b9:
41:35:20:44:bc:fc:f2:d6:56:33:83:6f:22:ff:a9:41:68:3d:
fb:93:7a:33:bb:65:bd:b5:c2:3d:e7:bc:e4:9f:e7:05:0b:8b:
fb:28:59:73:5a:58:7c:b8:2f:08:65:f0:91:e1:04:e2:d7:e6:
7a:39:c2:47:36:ff:cf:0d:07:55:5a:f1:41:f0:0e:ae:1a:5b:
57:63:f7:e0:4f:66:57:d4:f1:19:02:15:96:88:a8:fc:53:12:
00:2e:59:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWlSmF/9QyFgD5y5A3m+OvhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE3MTgwNzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmIwOWNiZDNlNWZjNDY1ODMxOGVkMzMzZWYxMmU1ZDUxZDNkZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp2eSGUVEM1tIsWV6bWHRioIXi3O
+uhdJy0GtU6hldxI9/jopyS3QL5M8YcURFg9fIoorG6O3HDhrwwHrMEu0ZcwDLH1
GwKSewaibH8GehYnOK2lbGPaxMQTfQmF23+SJ1z1DezvdWkNSNqtunJCf0GC7RB0
/gPJVW5ryp+a12hbK7EN6ttT7bf3Vgu2sB4uOLKTfUf/f0JTSP+ojQp+Seokv/hZ
qeHYAZsufxhTkU0xSRtuevzslzgbMDn65VzbAUWfSmQWSDTOlrpXzr5WkuplvFyV
DXgLafZ6aKM/1gbPv8y4NQERVXN7ZnCJ/MMpjM5Ca50QUFeQVT3li67qcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBawnL0+X8RlgxjtMz7xLl1R097LMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRnJDY3ZUNWZ4R1dER08welB2RXVYVkhUM3NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhZAwQA
Hzu6MA0GCSqGSIb3DQEBCwUAA4IBAQA1oBnOOmFfbo5vPiiVG5RaF8nOZaZi1az3
o555lrw/ayC2JQ701Bc1rfqqmNa2hxddoAscN6t2S2O5rDvBBdgU+ryIM7N/RQVU
GwPXOEUvn4kYyxNzL9qqsK8bpHgQKMvWvpbsFMHXHaJFgsxYcvJjPVDQesaGJG0V
gsFZSAG+YWbfg2BfNvRMH1ZgPgji1GGSc7gDiE/mKBQFoiZ5RE9S5LlBNSBEvPzy
1lYzg28i/6lBaD37k3ozu2W9tcI957zkn+cFC4v7KFlzWlh8uC8IZfCR4QTi1+Z6
OcJHNv/PDQdVWvFB8A6uGltXY/fgT2ZX1PEZAhWWiKj8UxIALllO
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:04 2025 by rpki-client