Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LooUWKU4AXlI4A8WlxtGXJWyaig.roa
File: LooUWKU4AXlI4A8WlxtGXJWyaig.roa (raw, json)
Hash identifier: ekxCnBJunG9c4i6FbU6lKI/dUrgCuvczfoFV6oazfLY=
Subject key identifier: 2E:8A:14:58:A5:38:01:79:48:E0:0F:16:97:1B:46:5C:95:B2:6A:28
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A9C75EDDB391A2FEEB2832435B013EBB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LooUWKU4AXlI4A8WlxtGXJWyaig.roa
Signing time: Tue 18 Mar 2025 15:02:50 +0000
ROA not before: Tue 18 Mar 2025 15:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200131
IP address blocks: 31.56.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:c7:5e:dd:b3:91:a2:fe:eb:28:32:43:5b:01:3e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 18 15:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e8a1458a538017948e00f16971b465c95b26a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:48:16:f8:de:5a:ca:9d:88:59:34:ab:ac:
1c:7c:14:dd:57:f4:c9:1a:a1:9d:d0:b3:8c:de:ae:
ae:fc:a1:10:99:e9:a0:fd:b8:41:2f:b7:14:a2:75:
8b:71:30:31:9d:7b:3a:6b:3b:81:fe:a3:2f:9b:b1:
a0:e2:32:46:35:32:ee:1a:7d:dd:d7:85:58:e5:ad:
73:f2:e0:cc:d2:83:99:a4:02:cd:30:c3:1d:82:04:
ab:9b:41:7e:dc:f8:5e:50:f1:fb:b7:2c:fa:40:c4:
e1:50:68:e4:fe:3c:ee:63:cd:2a:15:62:6c:f9:5e:
79:cc:b2:1f:1a:98:e3:86:35:3a:f6:01:6c:7c:69:
83:40:62:17:35:07:02:2f:07:ed:e3:8b:92:8d:68:
dc:cc:c4:df:4c:af:dc:a5:5e:ff:ae:25:de:45:fa:
ea:cc:dd:27:75:9f:8c:34:1b:29:cf:bb:88:4d:88:
0e:27:20:ef:84:27:4c:2d:ae:50:ef:d8:90:98:59:
3d:9b:0e:07:97:c8:04:93:c6:01:1c:bb:d7:1d:c3:
22:dd:33:55:c8:0f:12:0c:bc:a8:99:4e:f6:24:6e:
c1:39:2f:05:cf:48:18:50:f7:af:9e:ce:8c:cd:7c:
7b:84:89:c7:6e:e9:78:89:a3:ac:d6:71:4e:c1:0e:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:14:58:A5:38:01:79:48:E0:0F:16:97:1B:46:5C:95:B2:6A:28
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LooUWKU4AXlI4A8WlxtGXJWyaig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.144.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0c:02:e5:d0:81:d8:9e:fd:d2:e0:dc:0f:63:61:4d:93:35:
4d:72:60:39:75:7c:8b:e7:12:64:d3:59:4a:19:d6:0a:0b:a5:
de:95:e5:6d:0d:fc:05:85:f3:3c:c7:38:79:32:d0:bc:4a:ab:
84:97:63:f0:bc:fc:6e:da:c6:df:a7:99:5e:99:e5:5e:18:c8:
c6:d1:e8:7d:b9:42:1d:5e:7e:1b:3b:fe:92:74:2f:8b:f5:1b:
42:e3:dd:d6:02:01:22:9e:a0:f3:16:89:b1:18:ce:1e:6a:e5:
d4:1b:d5:09:18:0c:a4:a3:7a:29:fd:88:d1:46:6c:39:99:67:
82:a4:88:29:bf:07:f7:60:d0:84:79:9e:d1:bb:2a:fd:13:ea:
8e:22:c0:ce:c5:a7:b9:69:3a:8e:9f:67:24:72:c5:3c:7f:7f:
d2:e1:f2:10:e7:fd:be:1c:4d:a4:53:23:8b:a2:02:b7:7f:67:
5e:ca:16:33:36:3b:83:59:83:04:c5:c1:42:a1:a6:02:fb:01:
f4:ed:16:a9:18:8c:fa:59:e0:2e:af:31:e8:0e:04:be:49:06:
72:ff:25:f5:a3:6c:fd:64:9f:7a:35:c1:e1:d9:68:f2:f4:bd:
95:fb:e4:21:b8:77:e8:23:b4:5a:14:12:30:c3:fd:8f:70:16:
07:8e:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:16 2025 by rpki-client