Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa
File: CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa (raw, json)
Hash identifier: 5crkiuXzCNa5bqRqNmR9eqwI0/iv0HxGyv4mp2t+4Gw=
Subject key identifier: 08:83:13:52:13:32:5F:99:EB:46:45:BD:F8:D2:40:11:D7:F5:C8:DD
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D197CEC0D27F9CD2E23362F526067
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48737
IP address blocks: 31.169.75.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:19:7c:ec:0d:27:f9:cd:2e:23:36:2f:52:60:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0883135213325f99eb4645bdf8d24011d7f5c8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:08:02:3b:d8:cc:bf:b3:a0:7c:ec:8c:e0:
38:cb:b8:5c:90:81:44:8e:1a:e5:63:ad:fb:e8:24:
9d:68:78:e4:b3:2e:85:fb:16:c5:18:55:87:3d:2c:
fd:a7:56:e0:3a:1d:4d:ac:07:22:81:db:41:aa:f1:
48:90:f4:81:c3:9e:7c:9c:4b:af:b3:a8:96:ff:1f:
23:32:a4:5d:9c:6d:46:f2:0a:18:e0:dc:4b:79:26:
4b:af:fb:17:ab:da:32:98:18:a3:d2:b7:22:94:80:
54:99:a7:36:de:d3:e1:bf:df:04:f1:8b:e1:28:aa:
40:ca:af:32:bd:bb:3e:d3:bb:69:fe:13:10:47:82:
01:40:aa:2e:c4:39:6c:0f:25:9a:27:3e:5e:29:cf:
38:66:d5:8a:5d:ec:dd:c8:99:de:35:ca:50:89:00:
62:cf:b9:9a:6f:40:3e:a1:1d:4d:f1:c2:d7:1d:85:
d6:ab:ec:ca:0e:62:69:8b:2d:50:0f:04:65:7c:eb:
04:43:d8:21:dd:6b:3e:8d:e7:96:71:8b:30:2a:65:
0e:af:28:c0:49:9a:77:2a:c7:70:bb:af:c4:00:81:
d1:f3:6d:f4:e7:4b:9d:b0:90:c7:34:cf:5f:38:b3:
40:bc:35:c4:fe:27:1a:0b:0f:e5:b9:2d:91:d8:33:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:13:52:13:32:5F:99:EB:46:45:BD:F8:D2:40:11:D7:F5:C8:DD
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.75.0/24
31.169.85.0/24
31.169.87.0/24
Signature Algorithm: sha256WithRSAEncryption
05:72:80:84:0c:88:5a:e3:c1:dc:25:ad:f1:ae:27:c1:25:72:
90:2a:e6:27:ba:f9:9c:5b:59:68:c9:60:3d:8d:e1:8d:46:46:
51:1f:2c:b5:fb:f8:89:16:62:40:ce:e2:2b:15:25:15:3e:30:
d0:01:81:ee:ba:7c:63:f8:8b:d0:93:c0:68:d9:d1:7f:e4:a2:
1d:95:de:dc:49:68:a2:ab:ab:df:77:bd:52:c8:e5:12:91:6c:
a4:fe:cb:e2:75:b4:87:f7:87:7b:7a:89:45:70:59:3f:e6:e7:
0b:d1:5c:25:95:57:a8:0e:da:28:ec:4c:a9:d3:1d:3a:fa:ad:
e3:45:26:0a:4a:bd:43:08:51:c6:c7:c1:03:a0:df:f1:a4:83:
2b:ca:27:c8:19:61:51:66:44:28:3e:cc:76:2d:8e:ee:db:6d:
5b:9f:90:e0:2d:0c:8b:7f:68:e6:40:1e:1a:6a:7e:f0:62:b4:
54:ef:7a:a6:6f:fc:a2:d9:c7:ae:53:06:10:60:5e:3b:1d:10:
2b:a8:65:80:4a:d7:56:96:9a:7f:d7:3f:9e:22:67:73:da:24:
1c:af:55:6e:ea:ea:a3:c0:4c:6e:29:6f:22:93:76:4a:25:9b:
9b:a3:d4:09:17:3c:45:d8:cd:79:da:3d:98:9f:45:7a:4d:ca:
9a:f0:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:08:27 2025 by rpki-client