Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khlVfX1ZueQiKIYW_JBAK6MlEQQ.roa
File: khlVfX1ZueQiKIYW_JBAK6MlEQQ.roa (raw, json)
Hash identifier: Fm84kYmbkLk8XPFKMpOhD7UZh5Jf/bZOwxG31xwSrDU=
Subject key identifier: 92:19:55:7D:7D:59:B9:E4:22:28:86:16:FC:90:40:2B:A3:25:11:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0194A34D78832415150BD97ED3A65441F215
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khlVfX1ZueQiKIYW_JBAK6MlEQQ.roa
Signing time: Sun 26 Jan 2025 15:49:10 +0000
ROA not before: Sun 26 Jan 2025 15:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 31.56.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:4d:78:83:24:15:15:0b:d9:7e:d3:a6:54:41:f2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 26 15:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9219557d7d59b9e422288616fc90402ba3251104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:cf:35:90:1f:51:91:dd:de:fd:94:c3:35:
13:c5:85:40:50:81:ef:d9:ea:33:4d:9d:77:9f:53:
66:db:64:95:27:6d:3f:62:97:5b:36:3f:e3:d2:e6:
03:b7:ff:79:a4:61:73:99:31:a0:cf:f8:3d:a4:0b:
85:01:dd:64:8b:02:6a:81:e0:18:a8:18:d5:62:50:
80:e8:22:cc:98:e6:92:54:19:96:4c:4e:9f:96:0b:
38:cd:1d:84:82:47:d3:fd:45:96:1e:c7:f8:0d:65:
89:cb:f0:1f:18:ea:7c:4b:4e:66:1f:47:03:9e:d3:
ac:05:06:d3:bd:91:3f:d9:3b:ab:2c:1f:78:21:78:
25:0b:a2:e5:a7:86:0a:52:6f:64:b0:8f:5b:11:d4:
05:0a:4e:fa:05:3f:23:72:d2:6c:8e:01:7a:d5:01:
7e:51:2a:bf:01:82:68:03:eb:f8:83:82:c1:b5:f3:
9b:d4:f2:23:24:17:b8:e4:df:b1:ab:ff:61:7f:f6:
67:63:a0:17:02:45:5a:da:d2:5b:80:2c:3f:d0:97:
6b:60:0a:d4:ac:ca:23:67:47:ce:4e:7c:7f:24:ed:
d2:8f:57:8c:6b:94:d0:2a:b1:4e:08:11:63:03:81:
67:51:4f:e5:b9:6c:b4:90:e3:42:d7:98:fa:4d:59:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:55:7D:7D:59:B9:E4:22:28:86:16:FC:90:40:2B:A3:25:11:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/khlVfX1ZueQiKIYW_JBAK6MlEQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e7:cc:37:09:a6:1d:76:e4:6b:dc:d2:e0:e3:7e:e7:3d:93:
92:5b:88:db:69:9b:37:cf:3c:5b:54:77:11:fb:75:6c:a0:29:
83:b2:3a:09:f3:4d:89:6a:cd:31:fa:54:38:12:08:38:f1:a5:
eb:f4:24:ed:7b:0d:84:d4:39:dd:1e:b1:48:b6:2e:66:1a:3b:
a7:84:06:7f:56:16:d9:60:a1:05:20:fb:a1:2a:54:ba:a1:77:
20:7b:1d:d2:7a:12:a8:e6:27:47:20:a8:0f:cf:68:65:36:97:
2f:af:c5:59:33:78:ad:12:fc:2d:d5:e2:bb:af:eb:b8:95:ff:
ed:26:23:a9:3a:43:e4:8b:e8:8b:69:d3:c7:32:d0:02:12:7c:
fe:0b:94:d0:76:29:c8:69:74:7b:e7:84:84:cb:74:6b:eb:52:
97:6b:45:bf:54:59:da:bf:34:bc:46:2b:75:a3:b0:8e:64:1d:
1b:84:c0:b3:26:fb:ee:c3:4e:77:e7:4a:c7:ac:24:e4:b8:9b:
ac:46:ba:81:b2:3e:f8:d2:cd:d1:2d:b8:54:22:f5:50:9f:55:
60:b3:c8:8f:63:61:ba:9d:bf:5d:97:72:ac:4e:3c:ab:d5:26:
41:0f:e0:50:f7:c2:53:ab:3b:6c:8b:2e:1d:8d:1f:86:6a:1f:
a7:25:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:29 2025 by rpki-client