Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yxUv7eeQbrpCf7XLNGC71L0Jp7o.roa
File: yxUv7eeQbrpCf7XLNGC71L0Jp7o.roa (raw, json)
Hash identifier: ry31ZD4vRXl3345hY+32qbNMotXucikvoYsUvsngBl8=
Subject key identifier: CB:15:2F:ED:E7:90:6E:BA:42:7F:B5:CB:34:60:BB:D4:BD:09:A7:BA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195A7CDFFFA1B3B508F16758758C3424455
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yxUv7eeQbrpCf7XLNGC71L0Jp7o.roa
Signing time: Tue 18 Mar 2025 05:50:50 +0000
ROA not before: Tue 18 Mar 2025 05:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 31.58.51.0/24 maxlen: 24
31.59.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a7:cd:ff:fa:1b:3b:50:8f:16:75:87:58:c3:42:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 18 05:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb152fede7906eba427fb5cb3460bbd4bd09a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:9c:f1:1f:75:b1:35:6e:f3:3d:12:45:2c:
ca:8d:09:d8:94:7d:76:fe:85:e7:55:b8:c4:61:87:
ac:fd:08:e5:67:15:65:93:93:58:7c:ea:72:7e:0c:
2d:00:e4:68:bc:5b:4b:f8:09:96:d1:1a:fb:d4:a4:
5e:5f:21:d9:3b:ce:0a:7d:b2:1f:83:85:5b:eb:83:
b6:7f:76:29:6c:75:41:f8:d6:82:db:27:57:82:36:
af:0e:2e:18:0d:14:d9:34:e6:5f:d7:7b:52:48:f9:
a1:c2:f7:fe:c0:b5:43:76:69:b8:54:94:60:f2:b1:
9c:a7:30:be:55:68:e1:bd:01:6b:51:00:b7:fa:e1:
e0:bc:1e:b6:5a:45:78:43:62:25:f7:51:0b:32:b4:
79:d7:11:f8:4e:d3:2c:be:a0:50:65:14:36:bb:d1:
b1:c2:81:72:87:d4:a9:25:7d:61:4b:86:69:dd:b6:
fb:8f:3f:26:ee:7d:50:37:3b:31:57:fd:85:e4:15:
a2:e1:9e:28:23:ec:fb:8c:ed:d8:fc:68:20:36:c3:
52:23:bd:57:e6:e2:45:3e:ca:77:a3:f8:d8:ab:fe:
0c:53:75:e8:d4:a0:4f:8b:0e:63:81:74:83:83:00:
d8:c5:7e:46:43:4f:00:93:66:8c:1b:ee:dc:a7:43:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:2F:ED:E7:90:6E:BA:42:7F:B5:CB:34:60:BB:D4:BD:09:A7:BA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yxUv7eeQbrpCf7XLNGC71L0Jp7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.51.0/24
31.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4d:9f:fa:e8:7c:e9:53:d1:a4:ea:6a:64:56:b9:a7:8d:cc:
78:76:1f:05:99:f0:94:1e:4d:b5:f1:a8:4a:d6:49:eb:79:0d:
5d:a2:30:03:12:b3:e3:c2:69:93:1f:6d:2f:04:47:30:c1:4b:
70:ce:84:35:1e:90:7a:33:10:c0:ac:9c:9c:28:95:66:d3:40:
f3:01:a4:91:96:33:72:d5:66:5f:76:cd:9a:5e:a2:5a:c3:91:
2d:02:50:23:66:71:60:9f:29:50:f0:b3:72:30:d7:b9:09:73:
c9:c8:a4:09:1b:0e:f1:78:01:62:ae:67:35:ae:62:b9:2e:1d:
16:b2:89:50:b2:fe:f2:f1:8a:48:d1:b1:6b:9c:17:a2:42:6e:
78:06:2a:8f:19:f7:ad:99:ee:89:80:3e:76:90:19:34:2f:3b:
60:a2:46:ef:a6:76:03:99:55:6f:36:51:b9:23:99:b8:87:4d:
5d:df:de:f6:88:61:b4:b6:35:8e:c6:1a:ab:b8:43:c3:1b:b1:
8e:51:66:f0:89:8a:72:b7:0b:7d:f1:c4:43:fb:80:6a:fa:85:
a2:7c:cc:e7:55:94:7d:e1:90:ec:f0:47:0c:c5:17:51:9c:b2:
a7:58:66:84:e9:18:aa:4e:67:12:b8:b9:c4:3a:e3:68:4c:07:
93:37:7d:cf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWnzf/6GztQjxZ1h1jDQkRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwMzE4MDU1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE1MmZlZGU3OTA2ZWJhNDI3ZmI1Y2IzNDYwYmJkNGJkMDlhN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g2c8R91sTVu8z0SRSzKjQnYlH12
/oXnVbjEYYes/QjlZxVlk5NYfOpyfgwtAORovFtL+AmW0Rr71KReXyHZO84KfbIf
g4Vb64O2f3YpbHVB+NaC2ydXgjavDi4YDRTZNOZf13tSSPmhwvf+wLVDdmm4VJRg
8rGcpzC+VWjhvQFrUQC3+uHgvB62WkV4Q2Il91ELMrR51xH4TtMsvqBQZRQ2u9Gx
woFyh9SpJX1hS4Zp3bb7jz8m7n1QNzsxV/2F5BWi4Z4oI+z7jO3Y/GggNsNSI71X
5uJFPsp3o/jYq/4MU3Xo1KBPiw5jgXSDgwDYxX5GQ08Ak2aMG+7cp0NofwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMsVL+3nkG66Qn+1yzRgu9S9Cae6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveXhVdjdlZVFicnBDZjdYTE5HQzcxTDBKcDdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzozAwQA
HzuBMA0GCSqGSIb3DQEBCwUAA4IBAQA2TZ/66HzpU9Gk6mpkVrmnjcx4dh8FmfCU
Hk218ahK1knreQ1dojADErPjwmmTH20vBEcwwUtwzoQ1HpB6MxDArJycKJVm00Dz
AaSRljNy1WZfds2aXqJaw5EtAlAjZnFgnylQ8LNyMNe5CXPJyKQJGw7xeAFirmc1
rmK5Lh0WsolQsv7y8YpI0bFrnBeiQm54BiqPGfetme6JgD52kBk0LztgokbvpnYD
mVVvNlG5I5m4h01d3972iGG0tjWOxhqruEPDG7GOUWbwiYpytwt98cRD+4Bq+oWi
fMznVZR94ZDs8EcMxRdRnLKnWGaE6RiqTmcSuLnEOuNoTAeTN33P
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:14 2025 by rpki-client