Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2WxqwaZAVv2dyvITo-AesFShXVA.roa
File: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (raw, json)
Hash identifier: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=
Subject key identifier: D9:6C:6A:C1:A6:40:56:FD:9D:CA:F2:13:A3:E0:1E:B0:54:A1:5D:50
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 0194228DF1616F557B4DCEF09B0F0644266A
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2WxqwaZAVv2dyvITo-AesFShXVA.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211421
IP address blocks: 31.7.64.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:61:6f:55:7b:4d:ce:f0:9b:0f:06:44:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d96c6ac1a64056fd9dcaf213a3e01eb054a15d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:28:4d:4a:ea:f0:07:65:73:44:f3:10:c7:
31:15:4a:e1:d6:7d:ee:d6:1d:cc:2c:58:20:46:69:
b5:d5:c9:3c:1f:5f:4b:47:1c:1d:04:a6:3b:64:23:
b7:ef:eb:fe:99:10:a3:8f:e0:dc:6f:bc:66:39:42:
ad:be:ad:e0:d5:ed:22:f0:e7:94:fc:7f:c8:ea:7c:
d3:be:f2:19:79:4b:24:56:57:5d:a0:e2:f3:05:0c:
36:c0:47:f9:52:1d:08:98:52:52:39:0e:14:e3:23:
cb:b0:88:9e:52:f4:07:d2:ad:94:58:9d:7a:28:5c:
b8:c2:cc:26:b5:83:eb:b9:0e:94:e4:b0:6a:0a:78:
c7:e2:82:59:25:0e:48:4a:f2:09:c0:a5:bd:79:74:
31:8e:a0:cf:ff:30:a0:f2:c8:bc:69:b8:06:14:1a:
7e:26:d8:6b:8e:31:bf:73:b0:12:f6:9b:20:d4:51:
34:f2:89:f6:89:bb:64:d3:26:e8:a3:9e:25:4e:70:
c1:7f:98:ef:e3:eb:2a:57:ec:29:f7:8d:89:d2:4e:
7f:5f:a8:5a:6e:01:41:9e:1a:ea:6f:e5:15:94:35:
ee:40:97:a8:94:9a:db:b2:27:6d:9d:ca:ef:36:31:
ef:b6:bd:1c:9e:c2:9b:2e:60:a2:96:22:98:15:9e:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6C:6A:C1:A6:40:56:FD:9D:CA:F2:13:A3:E0:1E:B0:54:A1:5D:50
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/2WxqwaZAVv2dyvITo-AesFShXVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.64.0/24
Signature Algorithm: sha256WithRSAEncryption
de:c8:ee:db:f2:89:c2:41:07:b7:1c:23:8a:1d:e5:bc:12:f5:
c5:cc:9e:b9:a1:2c:a7:b3:d4:67:ad:9e:36:bc:45:e1:14:be:
48:a7:8a:76:be:c9:19:2e:4c:ba:45:35:b7:be:94:8e:f7:7d:
69:4c:c2:58:bf:5f:f7:5a:a1:6c:e0:5e:9a:0a:01:e3:34:20:
b1:6c:a8:5d:24:8f:aa:59:9f:3a:5e:b3:2a:7f:f4:cc:43:c8:
bf:01:eb:d0:35:97:65:c4:ab:4e:02:e6:6d:43:e8:ec:84:b0:
65:10:cd:87:51:d8:5f:09:38:1e:1c:d8:51:01:5d:2f:7d:ea:
64:b5:ca:6f:8d:3f:c1:9d:22:5f:49:96:fd:74:ac:98:68:94:
14:ba:5a:f3:8f:9e:83:df:3a:20:04:74:96:4d:35:b5:99:1b:
3e:00:a0:af:dd:eb:7a:54:9e:41:bd:81:01:b7:9d:25:b0:e7:
4d:0f:d0:f3:4a:f2:ac:e6:b6:2b:94:ba:b7:10:b1:c1:a4:dd:
94:cc:1b:54:6b:08:ab:27:b8:14:cc:7c:45:94:db:b4:41:9d:
1b:57:f3:53:40:cc:91:8f:bb:c7:18:a3:17:43:f5:2a:c8:68:
87:1e:2b:42:6b:b6:21:ad:a8:e2:07:4b:9a:eb:fc:60:ec:70:
64:44:d3:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijfFhb1V7Tc7wmw8GRCZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm
N2NmYjAwHhcNMjUwMTAxMTU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTZjNmFjMWE2NDA1NmZkOWRjYWYyMTNhM2UwMWViMDU0YTE1ZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJUoTUrq8Adlc0TzEMcxFUrh1n3u
1h3MLFggRmm11ck8H19LRxwdBKY7ZCO37+v+mRCjj+Dcb7xmOUKtvq3g1e0i8OeU
/H/I6nzTvvIZeUskVlddoOLzBQw2wEf5Uh0ImFJSOQ4U4yPLsIieUvQH0q2UWJ16
KFy4wswmtYPruQ6U5LBqCnjH4oJZJQ5ISvIJwKW9eXQxjqDP/zCg8si8abgGFBp+
JthrjjG/c7AS9psg1FE08on2ibtk0yboo54lTnDBf5jv4+sqV+wp942J0k5/X6ha
bgFBnhrqb+UVlDXuQJeolJrbsidtncrvNjHvtr0cnsKbLmCiliKYFZ6RfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlsasGmQFb9ncryE6PgHrBUoV1QMB8GA1UdIwQY
MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt
ZGM2NTU0ZmQxMjM1LzEvMld4cXdhWkFWdjJkeXZJVG8tQWVzRlNoWFZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1
LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwdAMA0G
CSqGSIb3DQEBCwUAA4IBAQDeyO7b8onCQQe3HCOKHeW8EvXFzJ65oSyns9RnrZ42
vEXhFL5Ip4p2vskZLky6RTW3vpSO931pTMJYv1/3WqFs4F6aCgHjNCCxbKhdJI+q
WZ86XrMqf/TMQ8i/AevQNZdlxKtOAuZtQ+jshLBlEM2HUdhfCTgeHNhRAV0vfepk
tcpvjT/BnSJfSZb9dKyYaJQUulrzj56D3zogBHSWTTW1mRs+AKCv3et6VJ5BvYEB
t50lsOdND9DzSvKs5rYrlLq3ELHBpN2UzBtUawirJ7gUzHxFlNu0QZ0bV/NTQMyR
j7vHGKMXQ/UqyGiHHitCa7YhrajiB0ua6/xg7HBkRNPY
-----END CERTIFICATE-----
Generated at Wed Apr 9 04:16:43 2025 by rpki-client