Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SP6qxC3U2iK7jIvEKP1JaUrzw.roa
File: d_SP6qxC3U2iK7jIvEKP1JaUrzw.roa (raw, json)
Hash identifier: /3gMSJXvM/7I/ReGscjyTGKGjju/baPT0e/j26EGlTk=
Subject key identifier: 77:F4:8F:EA:AC:42:DD:4D:A2:2B:B8:C8:BC:42:8F:D4:96:94:AF:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195AD51BDAA53733D450075E172B0E048D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SP6qxC3U2iK7jIvEKP1JaUrzw.roa
Signing time: Wed 19 Mar 2025 07:32:50 +0000
ROA not before: Wed 19 Mar 2025 07:32:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 31.57.67.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ad:51:bd:aa:53:73:3d:45:00:75:e1:72:b0:e0:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 19 07:32:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f48feaac42dd4da22bb8c8bc428fd49694af3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:90:c1:0c:0c:32:45:e3:9b:6d:2f:5c:77:
3c:2e:39:07:27:6b:df:d5:58:3c:a6:73:38:c3:ff:
d3:ec:f2:6a:d2:d7:ce:0e:bf:09:5b:9a:ce:2f:71:
9f:7b:27:61:41:ce:e8:19:34:fe:10:b4:05:43:5e:
91:d4:eb:52:7d:16:2e:98:cb:61:b9:cc:fd:be:fe:
36:0f:1b:0d:b1:13:c2:20:5a:1d:f4:08:04:b7:72:
4a:9c:bb:73:b7:f6:49:2b:d2:8b:bd:80:57:12:75:
de:a7:7f:88:1b:81:3c:c5:7d:20:63:01:f9:f1:8d:
1a:10:2a:7f:13:49:e4:0c:78:68:d1:ad:c3:e4:17:
a1:3c:93:03:47:7c:70:8c:20:44:90:6b:95:74:c5:
37:7f:d9:6e:20:7d:c3:20:08:01:25:cc:c7:6c:f4:
5a:18:a4:d3:d6:8c:80:56:7d:a4:59:df:5d:93:06:
8a:c8:2d:bf:88:7f:c4:b9:ca:9a:a7:22:32:f5:c7:
22:12:1b:54:be:e6:49:d0:db:15:55:1a:ab:5f:9d:
68:34:f6:62:a7:e1:e3:f7:cb:45:01:6b:12:86:c0:
36:1e:0b:0c:6a:de:7e:3a:ff:a0:46:b0:3c:70:cf:
09:1d:c4:ee:26:1b:2a:0b:9b:0d:f5:43:be:19:17:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:8F:EA:AC:42:DD:4D:A2:2B:B8:C8:BC:42:8F:D4:96:94:AF:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SP6qxC3U2iK7jIvEKP1JaUrzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.67.0/24
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2f:01:87:05:d3:e6:bb:70:0c:6c:b1:0c:5f:e4:eb:2f:e6:
d1:4c:11:d3:c4:cb:6c:6a:49:ed:dd:87:7d:42:69:8a:a6:14:
c0:ef:8b:71:2f:7f:de:3b:86:1d:6d:d2:42:27:13:ea:07:4f:
44:8d:16:05:52:90:e1:46:98:54:85:b4:24:16:f7:ed:0a:9d:
61:ad:d9:df:28:61:07:e6:6e:73:d4:92:10:06:4a:ca:64:d3:
e1:9c:8e:a7:bb:91:96:75:74:bc:9a:be:71:31:6d:f4:9c:7c:
b9:a7:eb:82:7c:2f:c7:f9:20:75:22:ef:ea:61:cf:af:0b:76:
cf:f5:b7:8e:51:ad:99:a5:15:c2:80:16:2c:b2:70:bd:94:13:
97:5d:b4:d9:cf:62:fd:5d:b0:f6:09:dd:ab:a8:07:03:e7:4d:
15:9e:51:3e:76:9d:41:53:a2:6f:de:9f:1c:a3:bd:18:6c:12:
aa:95:36:b0:8e:d7:d2:5a:33:59:76:41:4b:4e:ca:32:01:19:
8e:a3:8b:f6:36:d8:92:85:5d:66:1b:f6:d4:13:02:3a:a2:c9:
b3:14:e6:ca:2f:24:c1:ef:33:e2:52:43:5f:b3:4d:2d:a8:db:
f8:28:69:f0:6d:39:07:58:7a:c3:2d:8e:ba:b0:a7:5b:8e:6d:
5f:f1:66:e6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZWtUb2qU3M9RQB14XKw4EjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE5MDczMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Y0OGZlYWFjNDJkZDRkYTIyYmI4YzhiYzQyOGZkNDk2OTRhZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3L2QwQwMMkXjm20vXHc8LjkHJ2vf
1Vg8pnM4w//T7PJq0tfODr8JW5rOL3GfeydhQc7oGTT+ELQFQ16R1OtSfRYumMth
ucz9vv42DxsNsRPCIFod9AgEt3JKnLtzt/ZJK9KLvYBXEnXep3+IG4E8xX0gYwH5
8Y0aECp/E0nkDHho0a3D5BehPJMDR3xwjCBEkGuVdMU3f9luIH3DIAgBJczHbPRa
GKTT1oyAVn2kWd9dkwaKyC2/iH/EucqapyIy9cciEhtUvuZJ0NsVVRqrX51oNPZi
p+Hj98tFAWsShsA2HgsMat5+Ov+gRrA8cM8JHcTuJhsqC5sN9UO+GRep5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHf0j+qsQt1Noiu4yLxCj9SWlK88MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZF9TUDZxeEMzVTJpSzdqSXZFS1AxSmFVcnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzlDAwQA
HzoxAwQAHzqpMA0GCSqGSIb3DQEBCwUAA4IBAQAGLwGHBdPmu3AMbLEMX+TrL+bR
TBHTxMtsaknt3Yd9QmmKphTA74txL3/eO4YdbdJCJxPqB09EjRYFUpDhRphUhbQk
FvftCp1hrdnfKGEH5m5z1JIQBkrKZNPhnI6nu5GWdXS8mr5xMW30nHy5p+uCfC/H
+SB1Iu/qYc+vC3bP9beOUa2ZpRXCgBYssnC9lBOXXbTZz2L9XbD2Cd2rqAcD500V
nlE+dp1BU6Jv3p8co70YbBKqlTawjtfSWjNZdkFLTsoyARmOo4v2NtiShV1mG/bU
EwI6osmzFObKLyTB7zPiUkNfs00tqNv4KGnwbTkHWHrDLY66sKdbjm1f8Wbm
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:46 2025 by rpki-client