Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/gKwuz84JqfXVd9t-9wMc3TNayS8.roa
File: gKwuz84JqfXVd9t-9wMc3TNayS8.roa (raw, json)
Hash identifier: LZYvjlHHoyK3zXtyxiowPJdeZotF/mJqVEEs+1kxVxM=
Subject key identifier: 80:AC:2E:CF:CE:09:A9:F5:D5:77:DB:7E:F7:03:1C:DD:33:5A:C9:2F
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019434779215BA73D95E5ADD14429EB9FDC3
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/gKwuz84JqfXVd9t-9wMc3TNayS8.roa
Signing time: Sun 05 Jan 2025 03:17:18 +0000
ROA not before: Sun 05 Jan 2025 03:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 31.222.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:34:77:92:15:ba:73:d9:5e:5a:dd:14:42:9e:b9:fd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 5 03:17:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ac2ecfce09a9f5d577db7ef7031cdd335ac92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:29:52:ee:05:92:26:b3:bc:1c:a9:6a:99:
d6:50:bd:f0:41:2f:3a:09:05:a1:38:cb:0e:ea:65:
01:65:1e:ad:ec:8d:bd:ee:c9:9b:12:72:e7:5b:36:
1b:cb:6a:53:56:d8:c7:5b:17:5d:de:14:cb:c9:5c:
43:ed:72:ad:fa:8a:ca:66:81:d8:61:1b:d6:fa:00:
2e:a0:66:f9:a2:20:ca:6b:77:d0:87:9f:2a:b9:b8:
63:b1:a3:9f:43:81:9a:46:81:c7:ec:30:ee:78:c0:
fe:ae:24:d2:9c:5f:f4:93:ac:77:a7:4d:f4:74:fa:
04:b5:42:bc:90:9c:f3:d5:73:be:f2:3d:10:f3:b4:
65:4e:0f:bd:30:ce:97:02:aa:05:1b:a5:d8:bd:89:
00:6e:dc:2e:f1:84:e4:07:43:65:1a:35:a1:e0:44:
c3:9f:2e:fa:44:df:87:06:25:8c:bd:a0:42:6e:dd:
f9:17:4a:ab:37:4d:bb:42:50:5e:c2:83:e8:4b:c1:
dd:6c:51:8d:de:a7:65:e5:a9:d7:21:80:ed:fd:de:
ee:db:6a:75:c0:42:38:18:09:9a:e0:3d:81:a9:ad:
9c:13:ca:3c:b0:a2:ee:ad:41:76:4f:78:61:8c:49:
dc:0f:d8:37:60:6f:3b:a8:25:08:3e:44:19:60:c6:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:2E:CF:CE:09:A9:F5:D5:77:DB:7E:F7:03:1C:DD:33:5A:C9:2F
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/gKwuz84JqfXVd9t-9wMc3TNayS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.200.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:ea:01:dd:1c:a5:6f:11:b9:ce:91:66:da:a5:d1:77:b7:1d:
0a:c0:a6:03:48:08:6f:4e:bf:a6:98:07:e6:fa:0d:f8:ea:56:
9e:ee:25:6f:b8:01:e4:8f:2e:51:8c:d2:5c:dc:43:b3:9a:87:
21:ae:ee:7f:bc:0e:75:ab:85:17:fe:33:10:c3:5a:b3:29:41:
03:46:0b:83:d6:0a:f3:b1:6f:96:75:2b:51:3f:8c:92:d0:be:
ea:93:c5:10:9f:26:fb:0f:e7:5c:56:32:01:6b:34:13:03:d0:
ac:71:44:80:1c:31:7e:54:e7:bd:a9:5c:ef:88:c3:21:4f:71:
4a:3a:3f:ca:34:c8:5c:1d:4f:26:51:c9:af:f4:86:20:68:eb:
f0:b5:65:35:ce:ce:2b:0a:20:5a:a8:b0:af:4f:7a:16:a3:ca:
5b:a8:d9:6b:2a:1e:59:73:46:05:6c:ea:18:52:d0:c1:09:e6:
36:d0:b8:5f:62:01:6d:45:b1:40:6f:da:9d:4a:70:38:fc:91:
00:38:c3:c0:7e:76:0c:78:da:bd:57:21:7e:44:b5:44:dd:f1:
23:2c:24:8e:96:8e:33:07:c0:4a:a6:a2:51:64:3e:3e:f3:ca:
3a:42:38:67:78:4a:aa:98:b9:eb:9a:7b:0f:72:5d:14:fb:a2:
23:73:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:02 2025 by rpki-client