Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VllzdEfvCV2D2yVQEH0b6pr47BM.roa
File: VllzdEfvCV2D2yVQEH0b6pr47BM.roa (raw, json)
Hash identifier: oUIY9Fq3r9qHV8lOn8KlvjNgsgYwemHG3srdFfdXjRE=
Subject key identifier: 56:59:73:74:47:EF:09:5D:83:DB:25:50:10:7D:1B:EA:9A:F8:EC:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195467BF3157C47B134D66762A3DE18B1E6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VllzdEfvCV2D2yVQEH0b6pr47BM.roa
Signing time: Thu 27 Feb 2025 08:18:03 +0000
ROA not before: Thu 27 Feb 2025 08:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 31.56.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:7b:f3:15:7c:47:b1:34:d6:67:62:a3:de:18:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 27 08:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5659737447ef095d83db2550107d1bea9af8ec13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:29:27:ea:91:80:e1:85:dd:87:6d:32:d9:
e7:70:4d:62:8a:13:f0:bb:bb:ac:22:e8:9e:b8:c3:
cd:40:7b:9b:22:16:86:c8:92:22:8c:df:99:77:ba:
f4:7a:6a:87:29:59:04:fd:42:0c:bf:a8:24:0b:82:
3c:2b:8c:15:61:b9:d8:03:8f:7f:4d:78:b4:b0:c9:
d9:b2:d9:3a:64:38:71:01:10:7e:e0:ac:b8:0e:63:
ef:27:18:24:c3:a0:a4:63:ea:21:28:31:ea:ec:3d:
ee:33:b4:41:f1:92:d4:10:5d:2b:28:59:d5:f8:73:
70:3a:2c:ae:5b:af:d7:67:f7:2b:c7:e2:17:b0:69:
2d:36:dc:73:7e:8e:f9:89:b1:e0:b7:93:56:59:49:
c2:c3:ac:c0:81:f6:32:48:f6:55:53:b4:62:29:6c:
1e:2e:6a:cb:44:e9:3e:17:70:2c:64:48:1f:23:67:
a4:f3:3a:1b:c3:07:6a:61:65:c4:19:be:ff:78:c4:
b6:34:c5:1f:00:50:6d:78:2f:eb:d3:af:b7:4e:13:
97:95:1f:48:24:b9:6d:ff:f1:ae:77:00:90:13:1a:
cf:7b:2f:63:8a:59:c4:d6:f4:a3:68:ef:ea:d6:c3:
b1:78:6a:b9:32:49:10:02:d1:ad:c3:d8:4c:95:5a:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:73:74:47:EF:09:5D:83:DB:25:50:10:7D:1B:EA:9A:F8:EC:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VllzdEfvCV2D2yVQEH0b6pr47BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.120.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cd:8e:e5:1a:57:f0:6a:89:2d:9e:5c:65:af:58:1e:35:32:
ee:bc:8e:3f:36:ec:65:83:07:b2:e7:db:d3:a9:16:e6:46:86:
b8:87:d9:44:2c:45:2f:f6:d9:3e:4f:a6:70:bf:52:cd:21:bb:
79:c5:a6:27:5f:0e:fc:be:1f:2f:dd:a4:4d:62:d3:5a:34:ef:
cd:53:9c:b4:a1:95:e3:5b:35:2b:6e:86:ef:47:b7:2d:8e:c0:
63:a8:49:d6:0c:e9:49:03:6d:17:f8:5f:cb:91:e6:ac:f2:93:
00:c4:d9:75:f6:86:72:6e:aa:0e:80:b1:e0:35:61:5e:44:8b:
57:55:a1:ed:ca:18:c7:39:ea:0b:2a:37:33:43:ff:72:9d:99:
89:4c:9e:29:ee:f1:1b:a1:f4:09:5b:8d:f8:22:3b:ce:50:f6:
97:78:7e:6a:30:4c:1a:23:85:34:69:e8:60:86:41:d5:bc:ea:
a3:e5:11:b3:eb:95:51:d5:57:0f:ad:99:7d:cc:e8:ba:dc:1e:
03:65:81:7f:a6:02:8f:0e:4c:76:05:17:6a:2c:e4:46:cd:be:
1a:a8:f9:86:6e:54:bd:0c:b4:1d:8b:fa:11:f6:ba:02:7b:0f:
53:f6:e1:19:9c:98:e6:d6:ab:c7:1e:c1:a3:e0:88:44:13:eb:
8e:38:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:56 2025 by rpki-client