Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/uu77yeL0ZhiVWJtEemArdzbbXb4.roa
File: uu77yeL0ZhiVWJtEemArdzbbXb4.roa (raw, json)
Hash identifier: /qUtL3HDOTuihEswusH5rdWSMCnXKeufQELnFS6I4cI=
Subject key identifier: BA:EE:FB:C9:E2:F4:66:18:95:58:9B:44:7A:60:2B:77:36:DB:5D:BE
Certificate issuer: /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial: 018571030373863778F404A733B9484CA48B
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/uu77yeL0ZhiVWJtEemArdzbbXb4.roa
Signing time: Mon 02 Jan 2023 05:45:00 +0000
ROA not before: Mon 02 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.193.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:03:73:86:37:78:f4:04:a7:33:b9:48:4c:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Validity
Not Before: Jan 2 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baeefbc9e2f4661895589b447a602b7736db5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:08:d0:66:f8:f1:d2:fe:b8:81:d2:26:e2:
32:6c:a8:08:3c:c1:30:f8:9a:7f:5e:77:be:62:89:
fa:f3:34:91:24:09:ff:16:e8:37:1d:c9:ee:be:88:
00:ff:15:e6:01:fc:ec:13:60:bf:ae:ce:ba:8c:1a:
31:bf:2d:41:2e:75:8d:bc:01:b7:42:ea:28:34:a0:
6a:8e:03:ae:47:ef:a7:26:4b:f1:d1:2b:85:62:fc:
91:ff:3c:3a:57:b4:ae:8e:2e:98:44:fd:f7:7b:df:
7a:99:7d:04:ad:59:4b:cd:62:29:2d:82:a4:e7:c9:
c1:e7:dd:b0:78:8f:e7:8d:74:3d:1c:35:12:ef:5d:
ef:68:93:f3:17:c5:7d:51:35:a6:9c:cf:f6:ab:55:
99:30:24:40:da:76:01:3f:4f:8d:d8:45:4a:85:63:
42:2f:2e:18:6f:6c:22:2d:8c:b0:d3:1c:e1:e2:8d:
4d:ee:1e:fc:15:7d:60:ff:60:41:80:5c:90:d0:02:
27:b8:fd:ec:a4:79:46:b1:53:b3:e2:96:cd:50:80:
23:d6:b5:63:76:80:f4:75:0b:28:c0:c8:1d:60:e2:
b7:26:64:a7:26:b6:1d:e8:03:a8:1b:c3:96:0e:9f:
af:b2:a6:b1:a1:d3:7d:2b:6a:0b:b6:11:df:7b:8d:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:FB:C9:E2:F4:66:18:95:58:9B:44:7A:60:2B:77:36:DB:5D:BE
X509v3 Authority Key Identifier:
keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/uu77yeL0ZhiVWJtEemArdzbbXb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b6:ea:81:1e:67:d7:13:52:7f:22:6b:e2:ff:50:a5:47:f3:
de:d4:52:4c:48:82:47:d2:ef:93:51:73:f6:2d:9a:9f:27:65:
ae:c9:59:e7:be:23:77:8e:97:17:df:6b:3e:a5:18:46:4c:26:
0a:9e:f6:84:77:85:67:0d:13:8e:8d:46:00:58:0b:4b:75:e2:
66:fe:50:75:82:ca:51:56:69:7b:55:73:9b:bb:16:72:33:e6:
66:a8:7e:db:d7:2b:18:65:7c:34:84:1f:49:a8:48:08:55:0e:
cd:a8:e2:d3:ba:65:35:0d:44:74:2a:59:d2:db:01:e2:12:c4:
5f:bc:96:d1:68:db:c3:fb:e5:d3:01:f6:1a:8e:55:7c:60:05:
22:a6:7d:76:8c:d4:c8:79:1e:ee:8a:09:d3:fe:28:0b:48:ea:
2c:21:3e:c9:fe:a7:86:7c:88:f5:09:35:e8:1b:9e:59:6f:7e:
ec:26:8b:61:2d:76:db:3b:6b:40:bc:83:9c:e6:29:ae:c9:fb:
6b:9e:fe:98:80:b4:a2:fe:0d:c7:a9:54:77:78:45:4e:ed:81:
59:26:94:b5:bf:03:e8:fb:2e:53:54:8c:20:8b:b3:60:89:41:
60:2b:69:43:6b:56:57:ee:f6:fb:c0:be:f3:03:1b:a3:5e:45:
c6:c2:11:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:11:48 2025 by rpki-client