Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ZciseV0h3pH3lp0hLyZ992TdQQ.roa
File: 6ZciseV0h3pH3lp0hLyZ992TdQQ.roa (raw, json)
Hash identifier: sFwBr6Wh0TdrZtVAujkppJqtVxS3U22k/6YTX59vUaI=
Subject key identifier: E9:97:22:B1:E5:74:87:7A:47:DE:5A:74:84:BC:99:F7:DD:93:75:04
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B488A1AF4FB17386CECC4BCB26E47B
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ZciseV0h3pH3lp0hLyZ992TdQQ.roa
Signing time: Thu 02 Jan 2025 15:48:50 +0000
ROA not before: Thu 02 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215455
IP address blocks: 31.130.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:88:a1:af:4f:b1:73:86:ce:cc:4b:cb:26:e4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e99722b1e574877a47de5a7484bc99f7dd937504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:9e:56:f3:2d:42:14:62:eb:4b:b3:e4:16:
1e:2a:65:e7:b5:a6:7e:59:2c:2e:3d:de:a9:ae:99:
4b:35:2f:e4:17:28:35:b0:d0:94:e0:87:9c:a9:0e:
b9:10:b6:e0:ff:a1:0e:95:46:3b:a3:17:6c:1c:95:
56:bc:16:63:79:a9:e6:38:86:65:1a:26:a6:3e:18:
e5:c1:39:a2:84:63:8c:24:74:53:5b:09:3b:85:c4:
f5:df:53:87:a5:11:4c:79:53:2b:be:87:71:1d:68:
d1:89:3c:ef:fa:ea:3e:b6:54:db:4d:80:c5:fd:a2:
e8:73:c8:f8:97:80:41:5b:9c:14:63:55:dd:30:e5:
3f:e7:2f:42:36:01:40:cf:aa:60:0e:17:81:c8:d5:
d6:9e:7c:c1:94:0f:c8:6a:b9:2f:b9:b7:4d:3b:41:
0d:e9:23:c2:a7:3c:36:2a:27:8f:7e:6f:9b:7d:06:
a8:cb:f9:d0:bd:ea:b6:4b:cf:00:cd:1c:8f:97:86:
aa:52:55:c6:82:45:83:09:08:15:ea:0f:8a:8f:51:
04:bc:c2:53:a0:28:05:6c:af:02:c6:52:e1:0d:7d:
33:f2:c2:13:9d:79:09:a1:d1:13:31:b1:11:11:b5:
8b:e9:ee:08:e9:f7:b2:cc:79:f0:ee:d5:29:56:eb:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:22:B1:E5:74:87:7A:47:DE:5A:74:84:BC:99:F7:DD:93:75:04
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ZciseV0h3pH3lp0hLyZ992TdQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e3:76:d9:b8:4e:bf:4d:ca:a7:b4:68:9a:e6:f0:13:b0:cf:
e7:fe:68:3e:46:eb:66:63:e3:14:9b:df:1b:e5:9e:8e:64:f6:
41:c5:fe:66:79:53:22:a9:02:6e:c7:46:65:3b:1b:f1:62:71:
45:ac:1b:ef:22:fe:25:a7:ea:cf:71:a7:a2:9b:c5:0c:38:8b:
d5:0b:0b:ac:8b:11:14:b9:09:ee:4d:b8:7c:ee:b7:21:aa:96:
e3:3c:00:41:55:73:d7:f5:ce:df:6b:47:ff:d7:13:50:82:20:
75:8a:e6:89:38:a0:cc:c5:27:05:7b:dc:fb:06:8d:92:a3:5b:
31:12:ba:a7:2b:fb:1b:cc:ad:ca:f3:40:72:73:34:98:6c:36:
dc:38:c5:c0:c7:42:d6:29:cc:e9:e0:dd:5a:30:2c:49:eb:4f:
a8:23:bb:0e:4f:b1:ce:5b:81:ff:73:2d:9f:37:93:71:30:9d:
91:8d:34:80:d8:b5:71:ab:8e:c3:15:b4:ab:a4:86:6f:7a:1e:
37:37:c2:55:9f:53:ab:81:13:ae:00:f8:81:f0:4e:1d:d0:33:
62:0f:66:a1:06:3f:6e:ab:74:51:39:ae:51:bb:36:c1:87:34:
2a:59:15:c4:7f:34:05:82:61:b2:6b:b2:56:3f:bd:02:c3:74:
72:e9:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:01:16 2025 by rpki-client