Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pugFTT2kF5tyYxwuR41POC6LW4E.roa
File: pugFTT2kF5tyYxwuR41POC6LW4E.roa (raw, json)
Hash identifier: GN7Ckn/Z3oZCxEktI45WGeF+90OD0AF0Ef/ENFYsbJU=
Subject key identifier: A6:E8:05:4D:3D:A4:17:9B:72:63:1C:2E:47:8D:4F:38:2E:8B:5B:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01955D348D90EE24C571884956C7B0E9AFEB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pugFTT2kF5tyYxwuR41POC6LW4E.roa
Signing time: Mon 03 Mar 2025 18:11:20 +0000
ROA not before: Mon 03 Mar 2025 18:11:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 31.57.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:34:8d:90:ee:24:c5:71:88:49:56:c7:b0:e9:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 3 18:11:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6e8054d3da4179b72631c2e478d4f382e8b5b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:03:dd:61:5f:b5:f3:e2:bc:11:b6:9d:17:
b3:fe:f0:33:2a:22:87:db:e8:9c:1f:38:4e:ca:07:
88:53:92:6f:3c:d1:d4:4f:37:2d:43:5e:d2:cc:6e:
4e:c6:e8:03:32:99:9a:a8:c5:e5:bf:7b:f7:d9:46:
27:67:ef:68:cf:ae:2c:eb:63:e4:cf:ba:57:6c:57:
9d:5a:9d:d2:bd:e5:0b:4a:32:27:d7:c5:e6:09:19:
0b:d8:05:44:34:74:ed:14:92:e2:2c:e9:f4:12:7a:
b8:e0:1a:b0:dc:46:dd:87:98:fb:dd:b6:e9:0a:b6:
a6:13:92:fa:82:76:ed:fa:3f:23:20:f3:1a:5d:18:
a5:09:b8:bf:cb:0f:45:c9:9a:ea:b1:7f:f4:24:c9:
ee:87:89:f6:53:22:ea:93:a1:8b:18:73:92:f9:7c:
63:ba:2b:4a:e3:86:fd:98:64:24:9a:0d:a9:f9:28:
6f:39:fb:dc:0e:99:42:3b:d1:48:35:fe:6a:5b:70:
81:e8:01:5d:44:aa:93:2c:5d:27:66:a0:b7:9e:1d:
d8:43:6e:00:47:b6:14:57:e3:33:c3:32:44:0a:ac:
c0:06:75:bc:8b:49:17:ff:71:1e:eb:e9:97:ed:73:
6c:aa:bc:d1:15:c0:75:2c:ee:c9:02:32:5b:0d:a7:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:05:4D:3D:A4:17:9B:72:63:1C:2E:47:8D:4F:38:2E:8B:5B:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pugFTT2kF5tyYxwuR41POC6LW4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.32.0/24
Signature Algorithm: sha256WithRSAEncryption
af:af:75:34:76:0b:5e:bd:06:84:b1:37:9d:b0:34:4c:42:19:
97:b9:1c:fd:51:84:a4:b4:72:e6:70:8e:e3:0a:c4:de:0a:68:
04:53:e5:bc:31:ff:63:7d:ac:7b:30:86:3f:1e:55:37:05:1f:
65:bc:13:06:f5:c3:d2:62:fb:45:3f:06:19:a9:5a:3d:c1:9c:
3f:d3:2b:96:7b:e8:6f:17:ca:56:c1:fb:29:19:61:ae:ff:d4:
32:71:c1:c2:65:a2:29:d2:00:c1:c7:10:b2:d8:bd:aa:11:41:
3f:ca:04:bb:da:fb:ad:93:15:bf:a1:f0:b5:7e:42:a0:f7:66:
61:cd:f6:11:a3:41:e4:1d:a0:92:b9:6a:66:d7:78:3b:90:21:
06:db:27:6f:cf:25:0b:ed:4b:ab:0f:f1:30:dd:06:db:fd:7a:
24:65:e1:54:37:07:47:08:2d:68:16:8e:f4:28:98:a0:7d:b8:
2f:28:53:84:9f:fa:77:2c:50:43:94:05:f5:9b:63:00:86:63:
79:3f:9d:c0:0a:6d:c3:37:58:a3:b2:af:82:ee:12:a2:e1:4f:
89:7b:23:46:2d:98:81:46:bf:bf:44:2c:2b:de:df:c9:c8:c1:
47:f8:4c:b7:d5:7d:88:b9:ca:91:f5:bf:d4:ad:d2:49:ec:1a:
90:eb:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:52 2025 by rpki-client