Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/ElFRzESyd_FARx8sdZQyvtKhhiQ.roa
File: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (raw, json)
Hash identifier: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=
Subject key identifier: 12:51:51:CC:44:B2:77:F1:40:47:1F:2C:75:94:32:BE:D2:A1:86:24
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 01941FFA23A04E9FE6A9E0EA94F11F784364
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/ElFRzESyd_FARx8sdZQyvtKhhiQ.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394923
IP address blocks: 31.210.148.0/23 maxlen: 23
31.210.148.0/24 maxlen: 24
31.210.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:23:a0:4e:9f:e6:a9:e0:ea:94:f1:1f:78:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125151cc44b277f140471f2c759432bed2a18624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:83:65:a1:c3:62:e4:65:e6:25:92:3d:13:20:
25:4b:9e:0e:98:c4:bb:89:63:e5:9d:b1:90:71:62:
94:4c:79:6c:fd:65:b4:cf:e2:5a:16:f1:a8:0b:0b:
8b:8c:07:48:d0:a9:25:7e:88:b7:ae:60:ea:8b:db:
ee:3c:fb:6c:9a:ba:79:0e:44:22:b8:6f:b2:79:31:
91:c9:47:02:b3:67:48:e4:22:7a:9c:7f:f8:9e:26:
fc:1e:7a:d0:14:32:c7:d4:ec:1d:0e:9b:a8:11:0e:
08:ef:14:27:40:06:c3:2d:e8:ae:c7:c3:1d:af:13:
03:ee:e9:90:26:46:d6:14:b7:1b:ba:bc:74:3c:2e:
de:3c:49:21:27:ea:93:34:da:d6:d1:8b:fa:a9:80:
7a:45:ea:9c:67:9f:da:62:b3:e2:41:39:33:46:fd:
4d:a1:c7:b2:a1:5d:63:dd:17:90:df:af:11:a6:97:
94:e1:a9:ca:13:23:42:50:67:ee:36:4d:9b:7c:38:
b3:24:55:c3:e2:fc:98:2c:ff:d8:b1:df:cc:45:93:
34:bb:28:e9:dc:0f:a0:7c:b4:d6:04:70:b1:8c:b7:
40:e2:f1:a5:fe:ba:4e:a5:23:48:77:82:23:af:fe:
9d:4e:75:47:71:66:b5:d2:45:4a:5a:71:64:20:2c:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:51:51:CC:44:B2:77:F1:40:47:1F:2C:75:94:32:BE:D2:A1:86:24
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/ElFRzESyd_FARx8sdZQyvtKhhiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:27:bd:c6:7c:06:dc:75:22:a7:a5:28:c9:59:77:dc:c3:e1:
e6:d6:96:b6:a6:64:b1:e2:55:59:78:50:7b:f1:d4:b3:1c:9e:
03:d5:09:4f:f1:27:14:ad:c2:ca:3e:dd:97:aa:67:69:94:bc:
9c:99:84:eb:a2:cb:1a:19:14:f1:a3:de:ee:98:f8:63:a9:77:
8f:c6:34:2a:ce:37:03:b7:bc:c7:70:69:ff:73:13:34:28:ec:
41:07:f2:60:eb:3f:0a:c7:67:7c:74:79:cd:6a:6e:a5:47:36:
ae:9a:a1:33:3d:48:2d:e2:c7:60:5e:5e:f4:d7:a2:be:40:a4:
08:51:51:11:ac:4a:9f:90:b2:33:84:92:8c:4f:83:91:81:a4:
4c:34:c3:41:d1:2d:4e:05:40:d8:d4:88:6a:1b:82:43:ba:d2:
81:69:8a:6b:72:22:7b:a7:bc:f2:a0:14:e5:62:8d:40:8b:de:
06:9a:d0:cd:9f:02:df:d3:6e:22:6f:64:dc:da:b1:b2:93:d9:
d4:72:91:11:38:47:ed:3c:e8:e5:b2:0f:c9:64:e2:fb:22:54:
1c:1c:b4:16:98:56:d3:c7:1a:16:af:13:f9:a8:ee:f8:91:22:
02:61:e8:d5:79:00:4c:5d:fc:75:14:45:c1:14:62:88:ee:0c:
0a:fb:bf:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:37:08 2025 by rpki-client