Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/qfkric2QUPKYkBB8bRDsZGyi6XE.roa
File: qfkric2QUPKYkBB8bRDsZGyi6XE.roa (raw, json)
Hash identifier: daBShC7pqFoAAMzOkHKm3B5xOXs3TKHpZ+IiJ/7BGOg=
Subject key identifier: A9:F9:2B:89:CD:90:50:F2:98:90:10:7C:6D:10:EC:64:6C:A2:E9:71
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01944BC6FAC07F0F447DE74D9A7CADF5FB27
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/qfkric2QUPKYkBB8bRDsZGyi6XE.roa
Signing time: Thu 09 Jan 2025 15:55:19 +0000
ROA not before: Thu 09 Jan 2025 15:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206446
IP address blocks: 31.222.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4b:c6:fa:c0:7f:0f:44:7d:e7:4d:9a:7c:ad:f5:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 9 15:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f92b89cd9050f29890107c6d10ec646ca2e971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:c7:bb:d2:e5:a7:c8:73:f5:97:ec:2f:45:
7f:d4:d0:07:e3:90:ed:ba:30:0f:21:fc:c5:5e:2f:
63:6f:e9:53:d0:de:a0:9b:1f:bd:d3:9a:80:53:3b:
f8:96:8e:de:75:11:5e:e6:83:e7:21:22:45:4f:3d:
40:6d:93:0a:1c:f0:a4:39:00:10:69:f8:ad:3b:5e:
d3:c9:98:e0:b5:ac:cb:24:ce:70:f4:01:9d:81:93:
ff:4f:36:47:98:f7:66:79:e5:1f:81:35:c4:44:3a:
4d:90:51:cf:25:ee:3b:07:43:ea:d7:c7:b2:fb:c7:
c3:bb:7b:33:71:8c:e5:63:72:fa:b6:23:4c:34:b1:
b1:0f:e5:20:93:66:cf:fa:f4:cb:f5:83:a0:63:d5:
5c:22:ca:37:97:b5:ac:0e:8a:88:97:e2:d4:09:18:
95:19:5a:81:e5:7a:0e:c1:90:c7:a4:5a:c5:88:b9:
5e:29:ff:a6:e0:96:76:a2:50:f3:cc:3a:94:25:7b:
23:6d:f5:67:88:1d:37:70:f1:e4:18:1d:97:91:10:
94:c0:07:f0:1b:32:7c:e1:d1:ec:1d:fa:72:a9:fa:
ca:f8:d5:c3:6c:48:60:43:d5:33:22:60:ee:ba:bb:
7f:52:5d:7d:47:26:4e:42:2b:36:d8:ae:94:0b:10:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:2B:89:CD:90:50:F2:98:90:10:7C:6D:10:EC:64:6C:A2:E9:71
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/qfkric2QUPKYkBB8bRDsZGyi6XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.204.0/22
Signature Algorithm: sha256WithRSAEncryption
af:9f:3a:70:da:79:9d:fe:69:db:9b:8e:8f:02:ce:58:f4:9a:
26:9e:88:a8:e5:93:09:73:eb:40:dd:cd:d1:04:15:b2:10:fa:
81:33:0e:84:06:0a:7b:bc:f0:a9:a3:fe:81:0d:eb:db:d7:ab:
21:da:57:ff:d2:24:82:48:14:74:1b:22:a2:79:06:33:76:35:
de:ca:f4:b2:e3:20:48:7d:d1:95:bf:5a:e8:c2:b0:79:7e:ce:
1c:96:a6:e1:f3:0b:7e:3a:7e:da:bc:de:27:1d:8c:6e:a6:7c:
54:c9:d9:fc:2c:f7:9a:aa:63:6f:08:d4:b7:8e:6e:50:f6:5d:
3e:26:60:0e:79:a9:7d:40:b7:59:70:3f:ac:79:10:ac:10:87:
d5:ec:e3:e1:de:89:a0:e4:88:94:98:dc:b7:73:74:e3:dc:77:
5a:be:74:6f:99:ed:cf:99:6f:a0:ae:39:fe:9a:36:0a:b1:ee:
78:59:41:07:6e:f9:9e:60:af:13:0e:01:c3:08:03:2e:95:71:
f9:ae:18:47:90:a4:a1:29:48:9b:f6:55:60:6c:0f:34:89:7a:
75:1a:e4:fa:fc:e8:55:2c:74:04:b8:53:af:b4:27:f0:41:46:
78:35:d0:cb:2d:e5:27:78:b7:13:d6:0a:0b:1b:84:5c:8e:fe:
d9:5e:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:39 2025 by rpki-client