Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa
File: 2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa (raw, json)
Hash identifier: JPn9kgkJ/mLlJFOnz5rvlquqkQlvdwjIM0rOCRw/j14=
Subject key identifier: D8:CD:AE:7D:67:BB:39:F9:7A:BB:A8:E7:F5:81:5A:28:97:4C:42:05
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019425FC63458108C248B0F477FD224C580B
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa
Signing time: Thu 02 Jan 2025 07:48:04 +0000
ROA not before: Thu 02 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:63:45:81:08:c2:48:b0:f4:77:fd:22:4c:58:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Jan 2 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8cdae7d67bb39f97abba8e7f5815a28974c4205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:9b:d3:7e:5e:3d:03:f2:5b:55:16:3d:2f:
3c:2d:65:6e:6b:a2:a6:09:f3:eb:d3:bb:c0:b1:05:
e4:36:68:bf:28:28:57:61:fe:c3:5a:1b:e8:6f:0a:
32:58:81:00:67:c8:66:9a:41:26:35:cd:98:23:89:
05:85:5a:ac:84:4f:80:dc:2c:e3:41:5e:69:82:e1:
df:1e:52:0d:c0:cf:aa:2f:03:3b:b9:2e:23:40:e5:
f3:2c:51:3b:cd:b0:ff:27:0c:15:c9:37:31:80:6c:
ac:b7:88:30:86:eb:83:41:28:45:94:bc:31:3e:f9:
51:a9:4f:0f:dd:f3:eb:4f:74:a5:9a:7f:46:01:ae:
ea:ac:33:bd:2c:f6:a0:97:2f:65:5b:1f:cc:bc:28:
37:f0:b4:db:c1:f3:4b:18:93:01:1a:49:ac:d2:31:
58:90:27:a9:25:b5:01:db:97:fc:b7:05:11:88:cc:
1e:6b:5c:24:e5:54:9c:73:35:68:b7:5a:19:a8:78:
42:d4:44:85:3b:66:77:41:c1:1f:df:87:2c:f2:3a:
2b:5a:07:d2:41:b6:17:33:57:cc:57:3a:aa:60:ce:
e6:ae:1c:8e:d4:c0:44:41:e8:24:58:2c:cb:92:bc:
58:d0:0c:01:76:3c:a3:72:c3:bd:2e:e9:b2:3d:c6:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:AE:7D:67:BB:39:F9:7A:BB:A8:E7:F5:81:5A:28:97:4C:42:05
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/2M2ufWe7Ofl6u6jn9YFaKJdMQgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:68:8c:17:3d:7f:6a:a5:31:32:cd:d0:25:b7:dd:73:f2:20:
92:90:88:58:54:9a:2b:31:fb:63:39:dc:db:08:5f:59:17:84:
d0:53:e5:24:81:03:47:9a:65:0a:6d:8f:88:4f:cb:f1:2e:48:
98:59:be:1b:7a:c6:f9:86:f0:bf:1c:87:32:b8:d5:5b:b5:1e:
f5:63:af:36:4f:1d:d8:74:c7:6d:ee:76:9a:c1:8b:8c:26:38:
d0:d8:b1:d3:38:3a:6e:e8:0d:58:48:62:f2:ee:42:65:2d:5c:
5d:02:7d:f1:82:39:fa:ea:f7:e6:a1:12:20:2f:24:a9:20:6f:
bb:fd:72:c6:71:67:53:2c:56:fb:a1:a9:0b:ff:7e:ec:6c:04:
d8:18:58:72:ff:0c:3a:75:e5:f0:4e:0c:47:c6:b5:9d:39:b5:
74:7d:9f:2b:6e:27:0c:e7:e3:eb:e4:4d:df:81:c2:bf:a7:6d:
d1:b1:76:6a:45:fa:fa:88:dc:f1:7f:93:e3:b9:19:c9:cb:13:
e0:88:39:83:61:83:6f:2b:dd:57:f4:62:42:95:f1:67:42:18:
a2:0e:43:c6:3b:c3:51:48:b9:d4:42:12:21:62:c5:bc:ec:f0:
95:0a:53:02:a2:4d:85:cd:59:db:83:7b:5d:33:8f:86:7e:c5:
31:92:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:26 2025 by rpki-client