Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPQAymAl61sEV2sNskeBolaraRo.roa
File: yPQAymAl61sEV2sNskeBolaraRo.roa (raw, json)
Hash identifier: Vv2J4YUjkgEYtVcAmtC0NjPqwfRFKx376DiVR2+Hxjo=
Subject key identifier: C8:F4:00:CA:60:25:EB:5B:04:57:6B:0D:B2:47:81:A2:56:AB:69:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01953E33960D37F796CC0D08322D0C38A74B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPQAymAl61sEV2sNskeBolaraRo.roa
Signing time: Tue 25 Feb 2025 17:42:02 +0000
ROA not before: Tue 25 Feb 2025 17:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29208
IP address blocks: 31.57.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:33:96:0d:37:f7:96:cc:0d:08:32:2d:0c:38:a7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 25 17:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8f400ca6025eb5b04576b0db24781a256ab691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:a4:6d:c4:99:9b:b2:89:8f:ff:b0:cb:82:
89:09:22:16:dc:b1:1f:ea:9b:ce:04:3c:ab:59:1c:
5b:dd:06:6a:bc:66:c6:09:00:45:59:86:41:93:39:
d5:88:72:b9:87:bd:db:fd:72:bb:33:94:d4:3f:6f:
46:38:e5:2f:ee:cb:c6:f2:96:e6:7d:85:8e:30:f6:
84:01:96:f6:d2:49:85:e8:af:83:a3:c3:25:96:71:
78:cf:22:4d:6c:03:1b:33:74:2a:a9:13:ac:98:27:
f0:eb:92:58:eb:87:19:87:3f:14:61:40:76:0b:2e:
b2:37:b7:c4:c1:a3:5f:e5:c8:7b:b0:cd:c1:75:1f:
d8:cf:ae:fa:23:16:c1:5f:de:ba:4d:ec:c8:c3:0d:
a0:96:60:8d:02:51:cf:b8:51:1c:c2:9f:7f:fd:3c:
15:eb:2d:30:26:0d:2f:7d:68:2b:28:35:46:40:28:
fd:73:8e:d4:c3:70:39:5c:47:ac:ee:8e:28:4d:27:
4c:7f:8a:fd:41:cc:1c:84:1d:68:9c:cf:21:ff:d7:
8f:ba:99:df:9d:c0:76:d1:8d:ca:d6:98:0d:42:3f:
fa:e6:0e:cd:4a:78:b2:78:e5:8b:dc:7d:d5:d5:65:
cf:52:8c:98:98:a6:f1:1e:de:fb:19:d9:ad:56:df:
5b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F4:00:CA:60:25:EB:5B:04:57:6B:0D:B2:47:81:A2:56:AB:69:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yPQAymAl61sEV2sNskeBolaraRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:76:79:f0:13:b6:87:cf:cf:72:cc:37:78:78:8b:89:c3:1e:
7d:d9:03:87:01:5b:1d:10:b1:fd:a0:f8:16:48:ff:02:7b:12:
0f:dd:ad:f0:7e:f4:11:e2:33:bd:03:69:bd:18:d5:7f:23:27:
47:0d:4e:bb:43:07:fa:e5:f8:29:51:47:8b:47:dc:05:35:0b:
d5:bb:94:aa:24:f7:26:32:ea:a2:45:6c:69:d2:0e:63:32:57:
77:ed:28:d5:45:e6:ce:2d:9c:01:8f:d3:34:39:82:70:1e:ac:
de:49:f6:f0:85:6f:a3:75:86:17:f8:21:2b:93:7c:31:19:33:
43:27:09:89:6f:8e:cd:5f:88:04:d1:45:04:b0:2e:36:6e:b5:
d3:0f:27:d9:1a:4e:72:7b:0f:0d:f0:7b:e1:0e:41:69:b9:fa:
78:9e:45:fa:15:2b:5a:5b:b7:61:22:b3:6f:f0:dc:a4:99:45:
c2:24:1b:79:80:88:30:74:28:75:f4:fd:f8:2e:ad:29:9a:e7:
51:2b:f2:57:51:43:3c:d9:8c:57:73:3e:6e:21:9b:6a:7e:68:
4d:72:3a:73:15:8c:86:27:b4:c8:10:d8:70:3d:d0:e6:71:6f:
31:57:f7:8d:14:53:2b:c1:39:5f:ce:16:40:09:10:dd:6c:ba:
ca:85:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:03 2025 by rpki-client