Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/a9cqclGBd-sGM1DVbQMIle_rrqQ.roa
File: a9cqclGBd-sGM1DVbQMIle_rrqQ.roa (raw, json)
Hash identifier: LplY8V5whPCnMZSvGvrepAJoVMqSl1G+Bnp+LI/C1eU=
Subject key identifier: 6B:D7:2A:72:51:81:77:EB:06:33:50:D5:6D:03:08:95:EF:EB:AE:A4
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D1C9384B64AD05F9C1ECF2FF2C825
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/a9cqclGBd-sGM1DVbQMIle_rrqQ.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208885
IP address blocks: 31.169.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1c:93:84:b6:4a:d0:5f:9c:1e:cf:2f:f2:c8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd72a72518177eb063350d56d030895efebaea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:f0:7a:c2:0f:33:57:df:d9:3c:0c:f2:73:
6d:fa:6b:5a:bc:96:73:ed:75:60:6c:b1:6c:75:bc:
56:ca:3b:c8:76:59:1c:84:89:9f:41:18:77:e7:2a:
52:98:b6:e8:7e:45:ca:8c:de:d8:68:24:26:30:bd:
62:c2:69:32:ec:60:54:4b:6f:dd:f3:e8:ba:a7:27:
2a:65:1b:43:42:91:a5:fc:48:8f:70:27:b5:27:7b:
fd:2c:6d:f7:3d:a9:af:f3:61:e2:cc:28:8f:27:c4:
38:64:44:c0:bb:93:13:a8:da:ef:81:c9:bb:ec:bf:
44:8b:c8:04:29:dc:0c:22:0a:79:6e:e7:03:75:43:
1b:16:34:ed:b0:00:54:8e:1f:8b:95:cc:74:a2:cc:
95:46:c0:19:0b:c5:45:df:ca:44:79:c3:0d:88:36:
a4:b9:65:0b:35:ce:85:a7:5c:5e:47:94:72:2e:f8:
20:49:9e:1a:eb:7f:f1:2e:79:f3:c3:02:52:76:13:
1a:93:f5:88:c5:65:37:0e:9a:08:88:14:2a:da:26:
6c:d3:0e:e6:05:72:1b:41:f7:84:44:09:3e:26:f7:
3e:3b:6d:c0:35:54:0a:8b:b2:45:ad:79:20:69:a8:
71:8b:e8:ee:32:ca:c7:0a:4a:f4:f6:99:0e:70:5e:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:2A:72:51:81:77:EB:06:33:50:D5:6D:03:08:95:EF:EB:AE:A4
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/a9cqclGBd-sGM1DVbQMIle_rrqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.84.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6a:fc:52:68:cc:68:f8:25:78:90:d9:fa:ae:91:70:f3:43:
59:59:f4:f7:07:c9:cf:8a:a5:11:e4:12:2d:1b:81:57:c7:e2:
f6:f1:94:e5:ad:52:4f:60:34:1f:61:f0:82:b9:38:d6:f7:6a:
b2:73:42:c7:6d:e2:e4:fd:bc:14:cb:5f:5d:0d:b0:52:77:21:
01:fb:9f:d9:1a:53:d6:3a:7d:cd:91:4e:3a:e7:4a:9e:aa:f3:
f0:16:69:14:4d:85:4c:8b:a3:f3:16:ad:9e:42:82:11:00:5a:
1e:b5:0c:0c:9a:be:1e:33:3e:e0:f2:fb:9e:eb:a0:e6:3c:2e:
f6:d0:93:e0:ee:6b:85:bf:a7:07:00:36:e1:4c:97:6b:e0:02:
79:32:0c:b3:09:8d:5c:86:e8:c2:ff:4e:8b:d2:35:1a:e2:7a:
6f:10:54:9d:12:8d:72:57:ae:aa:38:70:b1:3a:22:79:b2:f7:
02:e5:76:a6:b6:9d:03:27:5f:c0:27:e2:99:48:ce:6f:40:47:
d9:e5:54:eb:71:d8:0c:30:f1:46:55:6d:b3:b9:c7:0c:25:86:
c2:ef:e6:81:a9:50:86:33:0f:ea:6d:c8:c1:4a:9d:af:6d:87:
37:a6:eb:97:a8:0c:83:2e:7e:e1:03:8a:ae:c2:26:bf:ae:f3:
cf:9d:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:25 2025 by rpki-client