Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d3L7IKAJzOLwDAxCN7n42ifhSmI.roa
File: d3L7IKAJzOLwDAxCN7n42ifhSmI.roa (raw, json)
Hash identifier: klEp5JX2AeXcim+lx3J6BXUSwLHUDqN8ITvkXrAD02Q=
Subject key identifier: 77:72:FB:20:A0:09:CC:E2:F0:0C:0C:42:37:B9:F8:DA:27:E1:4A:62
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019531D5B1336C794D98A20164E32E4FE8B0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d3L7IKAJzOLwDAxCN7n42ifhSmI.roa
Signing time: Sun 23 Feb 2025 08:04:02 +0000
ROA not before: Sun 23 Feb 2025 08:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 31.56.4.0/24 maxlen: 24
31.56.63.0/24 maxlen: 24
31.57.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:31:d5:b1:33:6c:79:4d:98:a2:01:64:e3:2e:4f:e8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 08:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7772fb20a009cce2f00c0c4237b9f8da27e14a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:06:3f:12:2f:78:b2:ee:d8:61:58:d0:4e:
36:63:e4:91:d1:7d:aa:45:fb:0b:b7:db:c9:d2:42:
13:4c:a5:29:23:53:7d:3e:cb:bb:bb:a6:9e:7f:7a:
54:e3:7c:e0:27:fd:a6:b5:96:4e:20:f5:7d:19:b5:
53:db:83:39:c7:3e:79:77:1f:8a:79:3e:88:6f:a8:
05:18:f9:d1:ed:83:6a:39:fd:96:fb:de:a8:6b:6e:
5b:51:2d:13:53:3b:c6:61:47:23:3c:46:1b:a7:b1:
44:30:70:97:f1:09:08:6b:e5:98:14:9a:86:c7:e5:
18:33:1e:69:92:2c:84:92:9d:bc:c6:5e:24:0a:1f:
87:8c:06:39:35:97:67:06:c4:b1:a0:57:15:c7:df:
32:c7:4d:ff:e7:f3:19:07:c7:dc:1a:69:fc:99:11:
09:3d:43:c0:a1:f0:3c:ed:93:93:0b:74:76:17:e8:
04:3f:52:1e:31:1a:f8:61:91:6f:4d:66:46:82:92:
43:2e:64:6e:93:e4:6e:22:77:fc:80:07:34:d0:30:
b0:4a:0e:91:f0:cd:c8:f4:66:18:66:26:97:d5:68:
00:cc:cb:0b:da:c4:b6:30:a6:34:83:a8:d3:ba:27:
e0:58:2a:9c:ac:7b:7d:e9:03:95:1b:a9:75:ff:47:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:72:FB:20:A0:09:CC:E2:F0:0C:0C:42:37:B9:F8:DA:27:E1:4A:62
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d3L7IKAJzOLwDAxCN7n42ifhSmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.4.0/24
31.56.63.0/24
31.57.147.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8b:10:76:54:20:f8:51:29:26:c8:5a:a3:68:cd:e2:5a:4f:
57:39:56:9a:e2:ce:82:b3:e7:c9:a1:e2:29:85:42:3d:81:fb:
b6:79:eb:d0:a3:88:89:64:00:00:0c:66:50:c6:16:98:61:00:
7e:8f:4a:fc:63:0d:92:3e:02:54:5c:d7:01:97:42:4c:e0:9c:
8b:87:7f:c5:71:5e:11:9a:a3:49:cb:07:14:1b:49:a2:17:92:
80:11:70:2e:94:58:7b:d5:75:e8:d0:a9:8b:27:b3:3d:3f:d6:
4d:2d:08:63:9c:65:f0:46:d3:b4:f6:ac:30:9c:25:a0:b0:08:
e8:df:22:51:ef:c9:57:b7:f0:8c:a5:34:27:42:0b:a8:70:8c:
f7:fe:68:f6:ac:8b:32:7c:74:39:41:1a:17:bf:c4:d5:9a:a6:
b5:38:17:f7:b2:01:b5:68:62:21:2b:80:0e:20:a0:eb:f1:26:
46:6c:0e:b3:ad:1b:3c:79:94:17:14:7e:2b:ba:45:ff:c3:93:
ec:c6:59:53:32:1f:40:55:1f:a2:57:81:66:8a:bc:7a:f6:07:
23:b2:d1:7e:ef:7d:99:4b:8d:6b:7a:bb:08:d7:e1:f4:8e:bd:
bd:09:4f:a0:83:a8:a9:03:82:0b:0d:60:9d:94:8b:67:6c:fe:
56:75:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:57 2025 by rpki-client