Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/N8AGFuJQexVDl-bcqn_CbLIjMEw.roa
File: N8AGFuJQexVDl-bcqn_CbLIjMEw.roa (raw, json)
Hash identifier: L4y5uwL0v56/yokoYAVJhmeJbSWO5Fk7pPhjCbRi4Zs=
Subject key identifier: 37:C0:06:16:E2:50:7B:15:43:97:E6:DC:AA:7F:C2:6C:B2:23:30:4C
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA3016FBC70FC99B4CF9CF68C56464
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/N8AGFuJQexVDl-bcqn_CbLIjMEw.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31207
IP address blocks: 188.208.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:30:16:fb:c7:0f:c9:9b:4c:f9:cf:68:c5:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37c00616e2507b154397e6dcaa7fc26cb223304c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:62:7f:a1:df:45:6b:52:05:63:e0:0c:20:
3f:42:83:11:93:29:54:50:d3:7b:38:14:8c:6a:cb:
38:ef:92:2d:c0:7d:c4:4e:8b:a4:57:f9:88:25:16:
ab:2b:c4:cd:d1:ed:06:99:f8:90:1a:f9:b3:e4:99:
7b:1c:f4:93:13:c3:07:6f:28:a7:88:12:97:f1:bc:
45:fe:52:5c:b8:9d:f5:13:6c:d9:15:62:bd:6e:b2:
c3:de:83:19:3f:bb:ad:f2:7e:2b:a3:8d:4e:ea:45:
7b:94:57:e4:66:19:43:9e:2c:53:d2:76:c5:f5:cc:
a8:8e:a4:aa:c5:ee:db:e6:6b:4a:c2:85:ca:63:b8:
1b:4a:d9:41:4c:c1:ca:9e:48:6d:31:e0:5a:9d:6d:
d9:24:c7:43:32:6e:e6:9f:c7:84:76:72:aa:6a:8d:
bf:aa:3f:03:5f:f3:7e:bb:3e:b4:d7:d1:94:81:b2:
ef:3c:a4:3b:9e:1d:cb:97:69:9c:91:d5:43:7e:6f:
48:0f:d3:e6:da:e6:a4:c1:d1:e4:d3:e1:7a:68:c7:
92:ee:f2:1a:38:73:ee:65:f2:bd:ea:b1:91:c2:b4:
26:cc:6c:83:b5:68:4f:5f:1b:01:c0:cf:d9:4d:7e:
3c:25:ff:97:05:71:69:0b:9d:0d:0e:e4:ec:d6:20:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C0:06:16:E2:50:7B:15:43:97:E6:DC:AA:7F:C2:6C:B2:23:30:4C
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/N8AGFuJQexVDl-bcqn_CbLIjMEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:66:17:16:60:1d:0d:21:3e:39:11:df:b9:9d:1c:32:28:61:
b0:2b:88:c0:a5:98:cf:a3:e4:12:b4:14:9f:4f:fc:d3:36:38:
43:b9:d4:83:4c:16:de:9e:ad:ff:ac:63:74:d8:c8:d6:11:57:
ea:cf:a1:31:55:bf:76:27:0d:4c:d5:fc:c2:e1:6a:42:b0:a2:
8a:fc:f3:74:7d:5b:ea:a4:9c:6f:01:4c:ed:d5:72:ac:2b:58:
74:ab:23:00:a2:3c:c5:ec:20:b3:0e:19:22:54:7c:09:5f:1a:
f3:a8:aa:4c:94:a9:7e:0f:48:51:50:21:3e:d8:a0:4d:5a:4a:
6e:de:29:fd:0c:43:bd:1d:d4:ed:9b:14:f0:19:8d:db:f7:a0:
39:c4:6c:9b:9e:ae:db:db:b7:15:c4:8c:09:cd:01:50:89:c2:
55:ba:e8:98:a9:d8:2f:20:d8:49:a5:dc:24:09:35:8e:67:4a:
8b:a5:a7:a3:f5:23:de:f3:b2:dd:6f:35:23:0d:fc:86:46:63:
ed:da:20:66:26:f1:d2:8a:c4:6e:fb:46:3e:e7:e7:0d:1f:50:
ad:61:8c:e1:78:b3:f4:de:8d:72:08:69:b1:aa:71:33:ca:3a:
c8:a4:b0:9c:5f:23:63:a0:a6:87:b0:ed:49:43:85:68:89:b2:
14:c8:d2:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+jAW+8cPyZtM+c9oxWRkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjUwMTAxMDM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2MwMDYxNmUyNTA3YjE1NDM5N2U2ZGNhYTdmYzI2Y2IyMjMzMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3glif6HfRWtSBWPgDCA/QoMRkylU
UNN7OBSMass475ItwH3EToukV/mIJRarK8TN0e0GmfiQGvmz5Jl7HPSTE8MHbyin
iBKX8bxF/lJcuJ31E2zZFWK9brLD3oMZP7ut8n4ro41O6kV7lFfkZhlDnixT0nbF
9cyojqSqxe7b5mtKwoXKY7gbStlBTMHKnkhtMeBanW3ZJMdDMm7mn8eEdnKqao2/
qj8DX/N+uz6019GUgbLvPKQ7nh3Ll2mckdVDfm9ID9Pm2uakwdHk0+F6aMeS7vIa
OHPuZfK96rGRwrQmzGyDtWhPXxsBwM/ZTX48Jf+XBXFpC50NDuTs1iC4xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfABhbiUHsVQ5fm3Kp/wmyyIzBMMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvTjhBR0Z1SlFleFZEbC1iY3FuX0NiTElqTUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNAfMA0G
CSqGSIb3DQEBCwUAA4IBAQBqZhcWYB0NIT45Ed+5nRwyKGGwK4jApZjPo+QStBSf
T/zTNjhDudSDTBbenq3/rGN02MjWEVfqz6ExVb92Jw1M1fzC4WpCsKKK/PN0fVvq
pJxvAUzt1XKsK1h0qyMAojzF7CCzDhkiVHwJXxrzqKpMlKl+D0hRUCE+2KBNWkpu
3in9DEO9HdTtmxTwGY3b96A5xGybnq7b27cVxIwJzQFQicJVuuiYqdgvINhJpdwk
CTWOZ0qLpaej9SPe87LdbzUjDfyGRmPt2iBmJvHSisRu+0Y+5+cNH1CtYYzheLP0
3o1yCGmxqnEzyjrIpLCcXyNjoKaHsO1JQ4VoibIUyNJn
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:32 2025 by rpki-client