Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa
File: ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa (raw, json)
Hash identifier: eHVzXLml0UyyfUhLhyyY4cTxdGZl4YcMu0PqzYEvlZQ=
Subject key identifier: 71:E6:91:A8:86:FF:F6:3C:23:38:1F:47:51:95:ED:93:85:D6:D0:DF
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D1AF4C9EC0C96B1AB3AEFDCFC63E0
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 31.169.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1a:f4:c9:ec:0c:96:b1:ab:3a:ef:dc:fc:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e691a886fff63c23381f475195ed9385d6d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:50:a0:1d:ac:bf:64:05:86:46:6b:60:d0:
56:37:93:d7:b4:a7:dc:4a:ee:1d:79:f5:06:b6:71:
df:9e:2d:56:24:f2:27:c3:9c:7a:54:5f:20:38:70:
81:24:f9:c1:66:e2:42:eb:64:a5:84:8b:92:ba:f4:
7a:73:d6:4a:f1:a5:e1:67:bd:02:cc:26:85:60:41:
25:d3:f8:ef:b4:e0:5b:42:e8:c6:58:19:ea:e6:e7:
88:18:5f:15:cf:74:b1:8d:ad:50:50:86:d3:44:a4:
2a:94:d5:e8:ee:15:6f:4c:c4:0f:0b:cd:8b:3b:e0:
c7:25:29:31:55:89:af:06:89:d9:ea:d2:40:7f:aa:
d2:9d:56:76:11:44:19:6f:1e:74:19:c9:5e:f7:f5:
77:38:7b:27:5e:0a:ab:b9:d6:36:92:66:be:9b:7c:
64:7f:6d:1a:b7:3e:0d:51:24:2d:b3:51:7a:68:8f:
46:85:df:15:22:1b:fd:a7:f7:2d:5b:a5:5c:09:0e:
c6:dc:06:e0:9d:69:63:df:10:91:76:cc:0e:20:35:
e1:96:3c:86:d8:77:ed:16:43:69:f4:30:db:41:f0:
a1:b6:cc:7a:c5:7d:77:e0:d9:cc:46:3e:5c:e0:e9:
d9:bc:bf:65:80:fd:2e:88:42:91:48:ee:76:a1:93:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:91:A8:86:FF:F6:3C:23:38:1F:47:51:95:ED:93:85:D6:D0:DF
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:08:dd:cf:a5:fb:44:cf:cb:50:c7:75:3c:64:c3:ca:2d:0f:
9f:c4:45:f0:23:e3:49:16:da:17:b6:fe:62:0f:28:7c:a5:ab:
66:1b:39:99:1a:a0:de:31:4f:62:29:32:1f:e2:ed:c3:75:94:
0d:20:33:4a:16:c0:54:5c:40:24:71:13:fe:48:7b:7c:dc:09:
38:d2:27:9b:8f:a8:f4:60:ba:77:46:01:7c:78:7a:37:44:4d:
92:4c:b5:7e:dd:98:b2:2f:4d:e5:7b:31:1b:46:20:4f:dd:24:
27:f1:d2:ab:05:66:df:24:e8:6c:fd:6b:78:ef:5a:df:aa:cc:
2e:2d:1e:cf:29:8e:00:93:41:e3:fa:28:97:08:e4:ed:e6:47:
9a:8c:4c:56:eb:82:f8:96:48:14:b9:6f:04:13:b0:c8:a7:b9:
27:29:47:26:35:bf:56:86:26:c0:4b:3e:55:b2:59:0e:d5:48:
3f:76:e9:3a:c2:ae:ba:7c:07:7b:e3:6a:87:43:67:f3:e9:3e:
12:04:cd:ea:9f:d7:96:57:a4:b3:d5:26:26:75:40:17:a1:92:
a9:da:38:e1:79:5f:a0:0e:55:12:42:1c:8d:f2:45:87:be:91:
13:7c:65:1f:b9:f1:7e:98:84:40:23:a2:b4:52:1b:9c:d9:c1:
cb:a6:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:08:32 2025 by rpki-client