Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/NZa0gIfmJGTWop9klB_kmws3bBk.roa
File: NZa0gIfmJGTWop9klB_kmws3bBk.roa (raw, json)
Hash identifier: EJR++Bc5Re9D8wlLY18Cmifrl1rYRjuKt7sbeibsf5k=
Subject key identifier: 35:96:B4:80:87:E6:24:64:D6:A2:9F:64:94:1F:E4:9B:0B:37:6C:19
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B4847A3BA04C89D20D092698FAD101
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/NZa0gIfmJGTWop9klB_kmws3bBk.roa
Signing time: Thu 02 Jan 2025 15:48:49 +0000
ROA not before: Thu 02 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 31.130.144.0/21 maxlen: 24
31.130.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:84:7a:3b:a0:4c:89:d2:0d:09:26:98:fa:d1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3596b48087e62464d6a29f64941fe49b0b376c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:20:92:05:98:8c:f4:42:18:ad:80:db:93:
1b:b2:1e:ad:75:dc:79:61:cb:9e:50:65:fb:0a:61:
63:95:5d:1c:f6:10:e0:e0:ec:bc:d6:9a:4f:eb:bd:
e9:e1:b5:bc:b5:e0:02:a3:7f:77:bb:c3:1a:de:7a:
61:67:b3:a6:73:f0:6d:cf:8d:98:05:d8:76:51:8c:
ec:2f:5e:1a:b7:83:69:0f:bd:3b:e1:34:f7:3b:4b:
42:a2:df:ea:ec:3d:24:d0:38:71:f7:59:1d:b1:d2:
14:c8:1b:f8:8e:45:1e:0f:be:aa:59:dc:20:c5:c7:
3b:65:d4:45:6a:a8:94:1f:c8:8c:40:bf:cb:ea:de:
68:2e:94:93:96:a7:75:94:36:dc:c8:62:77:86:2b:
13:79:2d:49:1a:4c:4a:83:40:68:64:6a:84:26:96:
34:c6:b5:a8:fc:cd:a6:73:41:33:67:d5:75:9b:16:
27:0b:3b:80:d3:a6:2b:bf:c1:0e:ac:d3:fe:7b:9b:
ef:9e:12:d0:6a:44:70:3f:60:f2:f0:7e:45:82:3a:
93:fb:64:b8:77:f3:42:24:bc:15:42:2e:4a:22:f0:
0c:c7:97:ac:a4:72:ff:67:51:43:18:e4:2f:b0:ea:
55:12:42:6c:99:7d:06:e6:ef:2d:7b:b0:b1:d4:e2:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:B4:80:87:E6:24:64:D6:A2:9F:64:94:1F:E4:9B:0B:37:6C:19
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/NZa0gIfmJGTWop9klB_kmws3bBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.144.0-31.130.155.255
Signature Algorithm: sha256WithRSAEncryption
26:3f:17:0e:7c:c6:db:ca:cb:06:83:1e:bd:e3:9e:97:f8:78:
35:2e:6c:bd:dd:d9:ed:08:8a:ec:dc:bd:67:9d:c1:15:0b:03:
c1:8a:07:7c:ca:e8:bf:e2:04:5c:07:e3:26:0f:c2:c0:3a:5d:
5b:eb:0a:ce:d7:bc:56:dc:42:60:61:4b:a5:33:36:5a:9b:ec:
a6:87:c2:4f:c4:a3:c5:13:22:32:2f:07:9d:db:ef:fa:b5:a2:
48:47:67:82:4b:30:76:63:77:cd:46:ce:36:81:db:b5:b7:e2:
fc:7c:aa:c6:dd:b4:fe:48:7e:32:d7:4d:c0:f3:30:43:8e:a0:
10:bb:3c:17:c3:5f:f6:fd:20:27:d6:47:a2:58:22:44:db:6e:
26:c5:36:4b:6b:d4:1a:96:4b:ac:cf:b4:92:a4:d4:99:c7:a3:
c3:85:39:42:58:52:70:74:1d:1b:3e:b5:c8:eb:9d:13:09:95:
16:66:5c:99:2a:c5:60:4c:f0:30:f8:c8:28:63:36:38:79:75:
63:05:f0:36:23:34:ba:2d:26:20:aa:2b:02:ba:8d:1d:99:94:
5b:42:81:8d:68:95:5e:cb:d2:12:27:a6:40:20:8e:d6:7f:8f:
3e:ee:54:06:4b:51:8a:2a:59:46:95:9c:5f:99:5e:7e:f4:70:
75:92:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:02:20 2025 by rpki-client