Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLtrqU7H3EeVUTMZ56geeqNotp8.roa
File: nLtrqU7H3EeVUTMZ56geeqNotp8.roa (raw, json)
Hash identifier: IOFD2sRQxuFXFogK+mC0K4mce2GFGTjjWuPg35psl6I=
Subject key identifier: 9C:BB:6B:A9:4E:C7:DC:47:95:51:33:19:E7:A8:1E:7A:A3:68:B6:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195D834BEDDEC301A931CAB6586C321336E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLtrqU7H3EeVUTMZ56geeqNotp8.roa
Signing time: Thu 27 Mar 2025 15:24:50 +0000
ROA not before: Thu 27 Mar 2025 15:24:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135542
IP address blocks: 31.57.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:34:be:dd:ec:30:1a:93:1c:ab:65:86:c3:21:33:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 27 15:24:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cbb6ba94ec7dc4795513319e7a81e7aa368b69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:3a:bb:75:36:18:8b:5e:3d:a4:f8:14:08:
9f:c5:ce:83:97:b7:bf:ba:4a:85:9b:b8:89:90:72:
ea:f2:d9:31:7c:13:46:c1:2d:3c:5c:60:95:95:46:
9f:32:e9:b3:0d:d8:e7:87:9c:81:58:1e:76:c7:66:
00:00:57:6c:1a:17:8c:12:ff:2f:20:64:58:1d:c4:
10:1f:e6:0e:a6:c1:c0:16:f1:8e:6f:4b:24:50:c0:
ee:1b:23:ca:90:75:f9:f0:64:41:7b:16:13:57:94:
8f:75:a9:66:a7:58:c1:76:92:08:af:71:3e:3d:55:
70:98:2a:ce:18:2c:3a:d7:fe:2e:70:63:a8:28:03:
75:3b:95:d1:18:d3:42:a7:e1:f0:bc:68:5e:ac:50:
a3:32:62:31:d3:17:6d:c9:09:e6:44:59:0a:20:24:
cd:26:22:8e:57:a8:08:4d:42:66:dc:f2:3e:72:0e:
3c:77:67:ac:08:75:1b:e5:57:bc:e7:bc:cd:4c:eb:
89:a4:ee:23:d7:b6:ec:63:c9:57:12:ac:38:31:97:
51:4a:1c:68:b2:00:ed:40:fe:81:50:1f:99:0b:c7:
d6:46:b5:98:85:e5:5d:7e:ed:42:dc:c0:b2:8c:ab:
90:22:46:f6:ae:dc:1c:d3:a2:c4:c3:47:5e:a2:7c:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:6B:A9:4E:C7:DC:47:95:51:33:19:E7:A8:1E:7A:A3:68:B6:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nLtrqU7H3EeVUTMZ56geeqNotp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.65.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:ff:d4:ea:fc:f3:be:60:c3:24:6f:f3:40:c6:88:b5:13:
a1:71:e3:cc:7f:0b:d9:72:64:7a:b5:58:63:37:30:85:62:c7:
fd:ac:9f:2b:ab:97:20:29:58:38:a3:58:12:8f:d2:6a:0d:b5:
6b:e1:a4:57:3f:16:a2:95:70:08:fb:11:fc:88:c5:31:f6:54:
85:e9:16:a2:15:f7:02:64:e8:07:c2:8a:f0:90:3f:e6:7f:8d:
d3:4d:64:41:d7:1c:dd:a6:e3:b3:bf:7e:e7:c8:e1:3d:3f:95:
b0:d3:39:4a:72:b8:38:34:46:b7:dc:2d:51:76:8f:b5:b2:25:
2b:0b:22:d5:3f:df:e4:91:99:3e:b3:d7:7b:19:1f:40:fc:ae:
d4:bc:8e:d1:bd:75:fb:5b:b1:a9:1f:72:d4:64:c0:3f:71:16:
1e:86:60:62:58:d6:fa:a7:91:a0:9f:fd:4f:1a:2a:2b:1c:1d:
77:13:77:ce:e6:f2:e0:5f:3b:c8:26:91:e5:fb:4b:c8:da:f2:
2a:ea:00:ef:86:aa:f3:72:cd:43:d0:c0:ae:d3:5d:4d:87:f8:
2e:13:50:5a:cd:5f:d8:70:9d:b3:fc:69:75:2c:ab:51:65:37:
34:9f:de:bd:34:f3:b9:42:34:40:c2:17:01:cf:8e:6a:e8:d5:
2b:06:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:36 2025 by rpki-client