Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YxFjyTNwQ1ow5GxhbbJMHfEIXFs.roa
File: YxFjyTNwQ1ow5GxhbbJMHfEIXFs.roa (raw, json)
Hash identifier: ao6T9tv8AtCvNDjvXt2DqF3m/E8ArzZOjKzpP+DWauI=
Subject key identifier: 63:11:63:C9:33:70:43:5A:30:E4:6C:61:6D:B2:4C:1D:F1:08:5C:5B
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA4000D986203A9B19417EB1F466AB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YxFjyTNwQ1ow5GxhbbJMHfEIXFs.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208179
IP address blocks: 31.14.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:40:00:d9:86:20:3a:9b:19:41:7e:b1:f4:66:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=631163c93370435a30e46c616db24c1df1085c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:71:06:63:cb:0d:6f:ef:fd:34:b0:2b:85:
f8:b6:d3:fe:b2:9a:a2:52:bb:fe:93:f8:23:7c:65:
15:35:b2:75:3e:b5:68:38:54:f6:4f:25:30:df:61:
94:7e:41:1e:1b:83:ca:e2:7b:61:e7:e4:b5:c6:16:
e6:75:cb:eb:d4:cc:56:b1:71:60:dd:3d:f0:4a:82:
fd:99:5c:62:92:0f:3e:21:53:23:f5:5e:be:26:4d:
4f:b7:8c:db:aa:49:a8:20:53:b3:6e:52:c6:98:dd:
9e:54:80:cd:91:08:35:12:1b:b5:b3:d2:73:e8:9b:
19:e2:82:fa:f1:21:0b:8a:59:77:bb:b2:42:b3:fb:
71:3d:73:5a:73:48:94:25:69:e9:43:3e:1c:dc:fc:
1d:90:52:84:e5:09:a9:f1:ed:fb:5f:ab:a8:d5:b4:
e4:99:2c:6f:63:84:d6:df:55:18:d0:40:e0:b7:3a:
91:77:98:5a:af:d7:a6:f4:6a:d6:43:4e:f7:36:a8:
12:c2:bb:a6:79:7e:b4:35:36:08:41:38:f4:86:47:
7b:01:69:02:51:ac:84:f0:0c:ee:77:5e:b3:cd:8e:
79:a4:a7:35:44:28:56:33:36:ac:73:fd:f0:2c:b2:
b3:0c:84:05:0b:b7:c9:f0:1a:33:21:ed:85:3d:b2:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:63:C9:33:70:43:5A:30:E4:6C:61:6D:B2:4C:1D:F1:08:5C:5B
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YxFjyTNwQ1ow5GxhbbJMHfEIXFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:df:68:29:b7:d8:e3:b2:e6:e1:de:2b:61:59:6f:00:b4:43:
d8:77:85:55:6c:ab:47:fa:6d:4b:6b:93:80:2d:d2:a7:0d:94:
68:48:26:6a:98:98:93:d1:a6:d2:2e:48:fe:06:be:39:4b:7b:
5b:1f:fe:e0:11:3b:53:d2:6c:64:19:42:cb:b8:18:f7:38:7e:
f0:8e:14:c7:87:6a:58:f8:bb:75:55:77:f7:9c:9d:98:a1:cc:
29:5c:10:af:40:f5:95:5e:42:01:01:14:a2:82:bf:8f:23:4b:
73:1d:08:e9:98:81:20:d5:7f:00:34:fb:3a:03:76:a0:70:41:
dc:77:5a:71:91:42:b1:f7:16:a7:37:2a:e9:7c:2c:d0:f1:b1:
d3:90:b3:41:93:7e:0b:f8:1f:aa:74:be:66:8a:11:04:72:a2:
5a:c9:ea:c3:93:4b:4a:1f:54:ed:a6:3d:12:d0:00:fe:86:ed:
cf:69:97:cf:85:14:99:fb:e4:4a:88:f4:55:af:e0:b7:d3:21:
d8:b7:fd:52:08:ad:76:b7:30:21:9f:7c:aa:a5:af:2f:09:db:
31:5b:c3:72:e6:6b:42:4d:54:34:68:f4:c8:68:7b:dc:fd:cc:
ee:b1:b9:8f:53:ba:86:1c:ce:59:88:a3:89:f5:88:b8:2f:e1:
61:12:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:21 2025 by rpki-client