Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/314VTjBCuYoqLdogLtu-3ujm5ZY.roa
File: 314VTjBCuYoqLdogLtu-3ujm5ZY.roa (raw, json)
Hash identifier: Cr88qgVvVmeA+giIMuP746nV2iIGXraV3pSJyrLS9G8=
Subject key identifier: DF:5E:15:4E:30:42:B9:8A:2A:2D:DA:20:2E:DB:BE:DE:E8:E6:E5:96
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 018CC793D88DFABAB7B644AEE6F87D796BF0
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/314VTjBCuYoqLdogLtu-3ujm5ZY.roa
Signing time: Tue 02 Jan 2024 00:30:04 +0000
ROA not before: Tue 02 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 194.99.45.0/24 maxlen: 24
31.210.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:d8:8d:fa:ba:b7:b6:44:ae:e6:f8:7d:79:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5e154e3042b98a2a2dda202edbbedee8e6e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:72:07:50:3c:5a:fe:29:56:de:4d:cc:1d:0b:
8f:eb:e8:34:17:4b:f0:70:68:bc:3b:c1:c5:e2:21:
94:74:62:f5:8b:36:18:ec:fa:58:1a:8a:f2:76:8d:
4c:09:fe:f2:65:54:53:4b:5a:30:31:61:e2:32:15:
a7:c6:19:52:68:0a:18:d5:ca:12:65:5d:da:10:e2:
30:cd:9c:40:49:b7:b3:5c:f0:84:14:48:d5:28:56:
8a:68:70:d9:0b:94:08:fb:06:0a:9d:b4:33:6b:8e:
80:50:25:7f:e8:10:7d:4e:eb:c2:fd:1e:6f:86:32:
c0:8b:6b:e5:37:d5:fa:51:51:be:c3:72:4a:4b:09:
df:39:7a:a3:ec:06:04:89:d9:55:3e:e7:da:c1:fe:
db:7a:ef:30:31:d9:69:84:6c:d6:08:79:1c:a8:1c:
42:75:9f:0c:f1:e6:aa:52:00:4d:d5:ec:9d:ca:49:
c2:f8:06:c8:e6:90:83:c5:0f:c8:ef:51:0a:f5:83:
c7:be:5c:58:86:0a:27:66:84:c2:cc:8f:70:4b:9b:
94:8a:80:f6:81:65:7f:1c:46:73:e3:99:5f:2f:b2:
6b:6c:94:43:bc:e1:b2:c3:a1:fe:68:1d:c3:19:11:
ed:a1:80:76:55:b2:16:13:16:79:b6:d7:ab:eb:ac:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5E:15:4E:30:42:B9:8A:2A:2D:DA:20:2E:DB:BE:DE:E8:E6:E5:96
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/314VTjBCuYoqLdogLtu-3ujm5ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.22.0/24
194.99.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c6:91:3a:4f:60:c6:77:c1:63:75:44:d9:f8:e0:6b:3e:9b:
1f:64:9d:1e:b9:d0:dd:51:a1:41:a4:41:e7:2d:d3:4a:47:2a:
d0:98:5b:0d:63:c5:45:45:2a:55:0e:e5:e2:d1:74:dc:9f:19:
6c:ab:6d:4b:ce:87:66:7f:81:84:3a:1b:8c:8f:99:77:61:ca:
39:90:3f:3a:2f:f8:45:a8:ec:e1:bb:8b:7e:3f:c0:27:7a:1b:
fa:ff:68:d7:f8:ab:86:d9:0d:fd:01:ba:6b:d6:51:26:86:7f:
85:e4:83:62:2f:94:8d:50:ff:f8:00:25:b8:c5:48:94:7a:88:
69:e6:73:39:71:51:b6:6e:4e:88:c4:42:64:02:1a:14:ea:2d:
49:08:6e:78:96:6e:3a:37:0d:59:43:0c:bb:36:94:ea:f0:93:
ba:f2:0f:8f:02:42:a7:29:30:53:a3:4e:c3:9f:67:7e:6f:06:
1b:15:f5:2a:2c:dc:de:21:47:34:79:d1:d3:cc:da:59:99:c9:
a5:68:1e:0b:6d:ca:79:d2:a5:d6:08:23:31:91:5c:15:c9:df:
41:4b:50:54:a2:30:9c:ea:86:74:0a:ec:27:f3:c3:a8:05:dd:
aa:fb:ff:78:65:fe:e0:59:df:e4:86:5f:6f:3c:2e:9f:9d:f1:
df:5e:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:31:58 2025 by rpki-client