Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa
File: IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa (raw, json)
Hash identifier: 4GrZpRrmEcfjAh7WjD7CljT1R5GLtYIOMemDYXjtZzU=
Subject key identifier: 23:13:BB:73:12:86:C4:9B:72:BD:C6:0C:15:8A:3C:02:B2:92:F2:75
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 0194274792D59A529DF923BF8932109E8925
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42719
IP address blocks: 31.128.253.0/24 maxlen: 24
31.128.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:92:d5:9a:52:9d:f9:23:bf:89:32:10:9e:89:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2313bb731286c49b72bdc60c158a3c02b292f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:9b:db:e7:9d:78:71:6d:21:59:b7:e3:1c:
5f:5f:5a:af:50:2b:61:43:d4:d5:c8:7c:c9:f4:4a:
fd:4a:f1:56:c2:6a:5c:2c:dc:30:46:5b:a4:2c:f6:
a3:10:a0:ff:24:29:28:45:3d:9e:1d:27:b8:51:82:
4e:c2:19:b8:a1:c3:0f:88:09:b6:a0:be:b7:ae:d7:
65:51:7d:cf:71:9e:9a:67:6d:36:34:97:6a:af:0d:
7a:2d:e2:e2:64:05:30:8e:c2:11:dc:34:40:a7:8a:
8a:9d:65:89:e6:f4:78:30:e6:6d:40:f6:4e:9f:c8:
a3:19:c1:be:1c:94:74:b7:69:ad:55:af:73:52:69:
cf:d6:29:90:55:be:33:d1:54:48:37:99:04:89:b0:
df:74:36:79:3e:6a:df:94:6d:34:74:0f:a4:c6:78:
8a:c1:e1:47:81:4d:10:21:dd:3d:6c:a1:84:97:bf:
74:2e:e0:ee:2a:64:f3:53:f1:05:ef:ca:a7:89:8d:
3e:74:18:47:82:0e:36:00:f9:42:bb:a8:9c:c7:56:
c9:d7:9f:be:82:3e:67:b9:e2:54:0f:bf:9e:03:17:
15:f0:de:ba:ed:bf:9c:b7:61:6e:f1:52:6d:70:ff:
8d:08:ef:1e:71:71:27:22:24:fd:c5:c0:d1:ff:5d:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:BB:73:12:86:C4:9B:72:BD:C6:0C:15:8A:3C:02:B2:92:F2:75
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/IxO7cxKGxJtyvcYMFYo8ArKS8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.253.0-31.128.254.255
Signature Algorithm: sha256WithRSAEncryption
68:3b:66:75:f9:c1:fa:08:43:fb:c3:9d:e9:4f:43:45:77:4a:
5c:a6:d6:c2:36:2f:57:f0:b9:37:69:5a:b7:ad:9d:92:c8:e6:
9a:a3:ad:d6:2c:ba:15:d0:55:29:4c:dd:99:ad:8b:bd:6f:d8:
4f:b7:de:f5:84:c5:3d:f5:3a:50:51:27:8d:84:37:1d:fe:21:
64:cf:3d:13:56:c7:7f:c0:46:8d:50:c5:37:37:f7:8a:6f:c4:
2f:62:44:1f:5c:ae:97:0e:4c:4a:c3:25:f3:c0:75:1c:81:98:
ca:ec:d3:f7:f9:f5:24:fe:84:8d:77:29:56:5f:f4:15:5f:a8:
8e:1e:dd:21:82:02:9e:ab:2f:27:ec:51:79:b3:ba:7b:d8:62:
a1:95:0d:e5:42:02:a0:7e:04:d3:93:50:21:ad:5a:6d:6b:20:
9a:54:53:5e:2e:52:59:02:36:45:d8:21:9c:38:a2:d1:62:55:
24:70:12:38:95:4a:53:c2:7c:81:6c:65:e4:3d:2d:08:7e:b8:
0a:26:27:c1:63:d7:e1:ba:e5:73:04:a1:13:60:6a:fb:d1:9a:
49:d9:30:43:94:23:5d:bc:21:f3:81:5b:c9:92:f8:9e:73:56:
08:54:d1:bb:c2:fb:97:23:9b:08:73:4e:57:d1:ba:a5:54:a5:
f4:9d:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:18 2025 by rpki-client