Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/7RXnmyyS3vqekKTRLkrMbY5ssG0.roa
File: 7RXnmyyS3vqekKTRLkrMbY5ssG0.roa (raw, json)
Hash identifier: 5Q0A5wPbh7lrti5wuMW3vt3LYhzQCaz/8+ZNglrRt+4=
Subject key identifier: ED:15:E7:9B:2C:92:DE:FA:9E:90:A4:D1:2E:4A:CC:6D:8E:6C:B0:6D
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D1D448EF65B421183DA70C6F2C47C
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/7RXnmyyS3vqekKTRLkrMbY5ssG0.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1d:44:8e:f6:5b:42:11:83:da:70:c6:f2:c4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed15e79b2c92defa9e90a4d12e4acc6d8e6cb06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:46:8a:ce:26:46:78:65:04:d4:cf:cc:35:
19:04:9a:97:3a:2b:03:62:a0:da:12:f4:59:cc:37:
ee:c0:2f:69:d5:3b:a1:f1:a2:d5:70:57:2b:ac:49:
c6:89:fc:4f:6b:4c:19:30:1e:60:a9:01:af:ad:42:
55:a3:4c:1b:69:eb:eb:85:f7:1c:c7:7a:0f:6a:5b:
a7:74:3c:fc:b0:ec:a8:c3:9f:b6:e5:5b:97:9f:9b:
75:ef:66:5b:dd:ac:f3:3e:72:51:bb:05:05:eb:55:
1c:41:a4:18:b7:15:94:5b:a7:51:98:96:bb:e5:6d:
a7:ba:25:f7:5d:21:6e:07:31:ef:96:75:2a:69:63:
b4:59:97:26:e7:3c:2e:10:ce:28:e5:4b:87:64:c7:
20:d1:b6:40:b8:85:39:07:2a:01:2e:a4:44:87:2c:
df:47:fc:84:64:b8:0e:8b:7f:f9:3a:6a:e3:f8:8f:
76:e5:bb:1e:14:eb:62:c1:29:6a:dc:23:28:e2:fb:
0f:ed:0b:f6:48:1b:ee:83:ba:c0:d7:85:3e:cb:75:
b8:9a:7a:ca:90:f5:8e:0f:4d:a8:f8:db:b7:5a:81:
f6:ab:97:b9:37:8a:da:42:b9:1e:d2:5b:e7:fc:ec:
f6:26:8f:be:c8:c0:4d:e5:a5:ec:b3:d2:42:a8:5f:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:15:E7:9B:2C:92:DE:FA:9E:90:A4:D1:2E:4A:CC:6D:8E:6C:B0:6D
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/7RXnmyyS3vqekKTRLkrMbY5ssG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.90.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d2:ff:f2:9c:82:d5:dc:9a:ed:5e:e9:be:72:7a:fa:ba:89:
92:33:96:fe:6c:ac:f8:e4:04:27:06:a4:2a:77:10:77:59:21:
6a:af:75:c3:39:ce:fd:8d:e6:07:e0:38:3e:c9:ec:b2:b9:8d:
37:c3:c1:27:84:63:40:8a:cc:94:60:69:be:9e:87:dc:e9:7d:
ef:b1:01:89:56:5a:f5:a8:44:f0:ca:1b:32:c3:1f:2f:31:17:
59:5b:35:ec:87:43:66:a0:91:77:55:d8:86:92:52:bf:f3:7d:
c2:54:85:42:68:38:78:cb:62:d9:22:5f:a6:e8:3c:a1:fc:09:
ea:0a:55:9c:f4:ef:d5:69:07:9a:fe:46:3b:40:6e:29:4a:14:
93:d8:de:f3:06:0e:ac:6c:89:76:6e:4b:df:8f:5b:34:ea:ed:
18:e9:4e:83:1e:7b:2f:30:d7:c1:50:46:91:c5:3f:5f:8a:7d:
f4:7e:70:3c:c0:fa:1c:aa:1e:d4:e1:29:db:61:a3:02:de:c7:
70:4c:61:7f:b3:2a:86:3b:a0:32:39:fb:68:be:99:7e:c5:06:
14:76:c7:b0:de:9e:76:c9:30:e8:b5:9c:07:37:b0:cb:f0:b4:
18:b6:16:81:e2:38:76:e3:56:3b:25:61:ef:38:8c:1a:8e:6b:
83:c4:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:11:24 2025 by rpki-client