Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/dEAMNMMdTqWSiw3qRGwwkOS_L5Q.roa
File: dEAMNMMdTqWSiw3qRGwwkOS_L5Q.roa (raw, json)
Hash identifier: xuhFT3/ksucwOVcCVI3IGR2mD8vqMTWvyO8AuODjIIo=
Subject key identifier: 74:40:0C:34:C3:1D:4E:A5:92:8B:0D:EA:44:6C:30:90:E4:BF:2F:94
Certificate issuer: /CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Certificate serial: 018CC8013158EE82187482FB23635E09B12C
Authority key identifier: 51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/dEAMNMMdTqWSiw3qRGwwkOS_L5Q.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215882
IP address blocks: 31.41.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:31:58:ee:82:18:74:82:fb:23:63:5e:09:b1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512ba152c78bbdeabff6f87d088a2957cce42ac4
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74400c34c31d4ea5928b0dea446c3090e4bf2f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:05:e4:5f:42:de:e7:e3:ce:82:09:49:82:
20:c5:36:32:ac:dc:3a:a4:67:d7:77:7c:f9:5e:81:
02:95:1c:ba:aa:37:3e:03:35:bd:5d:4d:91:dd:bf:
ef:23:35:df:41:ce:94:a1:99:33:5b:51:3b:df:c6:
05:a6:77:ae:9f:e4:3b:30:30:f7:a5:22:9f:1e:7b:
84:7e:99:dc:f8:f5:52:5a:e9:a5:e9:08:dd:43:94:
0a:3c:2d:b4:7e:c4:84:92:fd:15:98:0e:73:49:25:
4c:b0:66:91:35:ad:a3:2e:25:25:60:e1:27:d8:0b:
f7:2a:40:95:1f:3e:b6:4e:2c:09:8b:eb:b6:d2:b9:
86:ee:f1:e1:31:5c:60:6f:1f:a0:2e:e4:88:5b:63:
24:f1:00:04:47:89:2a:34:63:c0:3a:89:86:1b:43:
a3:da:bf:8d:26:c8:d6:ee:20:ad:70:12:65:20:ee:
9d:a6:5e:cc:c7:6c:37:16:8f:99:11:7c:a1:10:b8:
e2:63:fe:63:3e:c3:86:96:14:a0:e4:76:cc:8d:06:
9b:63:92:5c:77:1c:3a:fe:2c:2e:bd:9c:70:09:95:
95:e9:95:b8:18:02:72:c8:62:7d:31:7c:7a:be:4b:
e2:d0:8e:17:18:c0:14:7b:dc:d8:16:89:81:0e:a3:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:40:0C:34:C3:1D:4E:A5:92:8B:0D:EA:44:6C:30:90:E4:BF:2F:94
X509v3 Authority Key Identifier:
keyid:51:2B:A1:52:C7:8B:BD:EA:BF:F6:F8:7D:08:8A:29:57:CC:E4:2A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/USuhUseLveq_9vh9CIopV8zkKsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/dEAMNMMdTqWSiw3qRGwwkOS_L5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ea9594-0039-465c-9735-3ee3a5a5d79b/1/USuhUseLveq_9vh9CIopV8zkKsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.32.0/24
Signature Algorithm: sha256WithRSAEncryption
37:80:49:d0:60:43:75:b9:33:44:04:6f:0d:fb:b1:6b:c7:5b:
5d:3f:07:96:02:7f:22:3b:44:f4:b0:a5:84:ec:6e:d0:31:06:
46:20:15:be:70:17:11:e7:32:35:1a:a5:2d:f5:08:97:d7:44:
ad:98:67:8c:81:ab:02:1c:68:1f:1f:07:7e:06:80:28:27:08:
5e:b1:ac:6a:6a:00:04:bd:1b:e5:a1:fc:c1:5b:4d:57:f7:66:
aa:84:53:4a:54:f9:50:68:28:c9:df:a5:b5:a1:0b:54:0a:e9:
25:7b:e6:b3:e1:fa:69:3e:97:e1:71:89:19:9d:f7:7b:e7:25:
e2:3d:b2:75:a2:7d:f6:14:82:24:10:af:90:9c:79:d5:4f:fa:
c1:a7:a9:cf:f4:c8:cc:70:f4:20:4f:a2:1f:3f:35:a2:64:20:
0d:00:fd:bc:64:12:82:4e:1b:82:38:e4:79:49:c0:a4:72:e8:
73:27:f5:3d:4b:bf:f3:96:40:e0:f3:f6:ad:5a:0b:d4:a7:47:
c2:09:f1:23:71:de:33:dc:49:45:22:68:3f:8b:f6:16:e2:07:
82:e6:85:5a:9e:d5:3d:f2:15:5e:75:3e:18:ed:21:40:b9:65:
76:81:9c:e0:ab:5f:ef:e3:32:df:6e:af:47:bc:b9:5a:e6:8e:
22:a1:c5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:06 2025 by rpki-client