Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/hW_iHMEKGGfSCk4-Yatg4wi8t3s.roa
File: hW_iHMEKGGfSCk4-Yatg4wi8t3s.roa (raw, json)
Hash identifier: fFQ7n/ucPIHVkXU4JlZKMxRKJuhcykKUZttgRF4lPMk=
Subject key identifier: 85:6F:E2:1C:C1:0A:18:67:D2:0A:4E:3E:61:AB:60:E3:08:BC:B7:7B
Certificate issuer: /CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Certificate serial: 018CC6B937E22DAE442F4C108EF9D74E9997
Authority key identifier: 4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/hW_iHMEKGGfSCk4-Yatg4wi8t3s.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 31.216.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:37:e2:2d:ae:44:2f:4c:10:8e:f9:d7:4e:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856fe21cc10a1867d20a4e3e61ab60e308bcb77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:51:ee:30:fa:44:66:90:d6:ca:9d:48:bf:
15:d6:7e:e0:a7:66:2f:26:81:1c:2c:45:4f:24:c6:
47:2f:be:6f:31:15:1d:10:f0:a1:cc:cc:58:cc:25:
eb:39:a1:33:42:e7:df:4c:33:e1:d9:71:5d:fd:b1:
7d:3a:38:4c:fd:10:0c:12:ac:7c:bb:4c:90:b5:69:
8d:41:90:0b:55:33:e1:e2:0c:d4:53:2c:e3:f4:df:
5e:4c:ae:2c:f2:7f:c0:ad:6f:da:a7:12:af:68:32:
cb:0d:4d:f4:fd:75:3e:31:ff:b3:0e:63:20:e0:25:
c4:c9:24:e1:91:08:10:42:78:be:c8:80:43:67:a5:
c2:5c:e0:28:0e:21:c2:b2:0d:8f:c3:15:b6:b1:14:
16:04:c7:f7:49:d9:fc:f2:c7:af:17:6f:ec:74:ff:
1f:67:2c:c8:6e:da:f7:2a:17:c3:0e:42:bc:d3:3e:
be:c6:15:ba:a0:ec:9b:ce:f4:2a:95:70:69:e6:85:
7b:80:e1:fa:6a:1a:c7:ff:78:9c:73:b8:0b:f0:ab:
e6:1f:1b:c3:fe:c9:e9:09:9e:ac:b9:7b:5a:48:5c:
bb:2e:54:29:69:23:8b:0a:22:7b:07:58:ae:0b:6f:
55:71:74:5b:95:08:f1:13:5e:0a:d4:e1:0c:b8:68:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6F:E2:1C:C1:0A:18:67:D2:0A:4E:3E:61:AB:60:E3:08:BC:B7:7B
X509v3 Authority Key Identifier:
keyid:4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/hW_iHMEKGGfSCk4-Yatg4wi8t3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/T1H4xdUIaFS2y_-sAaJkcGhCHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.62.0/24
Signature Algorithm: sha256WithRSAEncryption
74:05:2a:64:f9:9a:ff:cd:d0:1c:2d:b5:84:5b:67:39:8c:a5:
cc:3b:88:14:ed:dc:69:e9:93:bc:e1:03:3c:b8:f7:58:b5:f9:
92:93:f1:c8:ec:05:10:e9:f1:62:5e:28:7b:75:cc:ea:2f:cb:
18:6b:43:d5:7a:b3:3e:3c:3f:50:84:29:95:cf:73:fd:ad:2e:
9e:35:e7:bc:79:89:ed:81:b6:b2:c5:66:26:8c:de:d6:18:50:
a5:d3:4d:c8:8b:8c:c7:fc:f2:10:52:0d:83:71:f6:74:85:3b:
d4:84:4e:3b:e2:bb:4d:84:58:89:b1:27:3d:ff:33:a2:70:a3:
2f:c2:a9:ff:68:8b:31:97:f5:04:c3:b9:6c:99:83:ce:a3:03:
fb:75:26:5d:55:48:93:1f:a1:3c:b1:7a:5b:06:bc:b7:3b:25:
61:3c:37:10:03:1a:89:79:15:f0:32:1e:56:a0:1d:db:40:86:
db:e4:e6:b7:43:c6:be:ff:f3:15:d9:99:f5:b4:2b:c5:e4:5d:
17:a1:2b:0b:1d:0e:34:b4:07:0b:b1:14:92:c7:27:15:fa:bf:
36:1d:40:65:f5:2c:c6:59:d1:99:a5:e5:45:85:27:20:d4:de:
74:5c:f5:b6:30:57:f9:3b:13:5c:7a:f1:30:21:53:cb:9b:21:
4e:a7:3f:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTfiLa5EL0wQjvnXTpmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTFmOGM1ZDUwODY4NTRiNmNiZmZhYzAxYTI2NDcwNjg0
MjFlODEwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTZmZTIxY2MxMGExODY3ZDIwYTRlM2U2MWFiNjBlMzA4YmNiNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1R7jD6RGaQ1sqdSL8V1n7gp2Yv
JoEcLEVPJMZHL75vMRUdEPChzMxYzCXrOaEzQuffTDPh2XFd/bF9OjhM/RAMEqx8
u0yQtWmNQZALVTPh4gzUUyzj9N9eTK4s8n/ArW/apxKvaDLLDU30/XU+Mf+zDmMg
4CXEySThkQgQQni+yIBDZ6XCXOAoDiHCsg2PwxW2sRQWBMf3Sdn88sevF2/sdP8f
ZyzIbtr3KhfDDkK80z6+xhW6oOybzvQqlXBp5oV7gOH6ahrH/3icc7gL8KvmHxvD
/snpCZ6suXtaSFy7LlQpaSOLCiJ7B1iuC29VcXRblQjxE14K1OEMuGhHXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVv4hzBChhn0gpOPmGrYOMIvLd7MB8GA1UdIwQY
MBaAFE9R+MXVCGhUtsv/rAGiZHBoQh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFINHhkVUlhRlMyeV8tc0FhSmtjR2hDSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hN2VjNzktZmI5MC00ZTk5LWI5YmUt
OTVmNmRkYTFhMDFmLzEvaFdfaUhNRUtHR2ZTQ2s0LVlhdGc0d2k4dDNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hN2VjNzktZmI5MC00ZTk5LWI5YmUtOTVmNmRkYTFhMDFm
LzEvVDFINHhkVUlhRlMyeV8tc0FhSmtjR2hDSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9g+MA0G
CSqGSIb3DQEBCwUAA4IBAQB0BSpk+Zr/zdAcLbWEW2c5jKXMO4gU7dxp6ZO84QM8
uPdYtfmSk/HI7AUQ6fFiXih7dczqL8sYa0PVerM+PD9QhCmVz3P9rS6eNee8eYnt
gbayxWYmjN7WGFCl003Ii4zH/PIQUg2DcfZ0hTvUhE474rtNhFiJsSc9/zOicKMv
wqn/aIsxl/UEw7lsmYPOowP7dSZdVUiTH6E8sXpbBry3OyVhPDcQAxqJeRXwMh5W
oB3bQIbb5Oa3Q8a+//MV2Zn1tCvF5F0XoSsLHQ40tAcLsRSSxycV+r82HUBl9SzG
WdGZpeVFhScg1N50XPW2MFf5OxNcevEwIVPLmyFOpz8X
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:26 2025 by rpki-client