Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa
File: dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa (raw, json)
Hash identifier: EVPzk1PreoChl9YjAauXazZeGF8twPM0Bys79KZjvx8=
Subject key identifier: 75:56:FB:85:98:46:B9:94:53:33:EF:97:F2:59:2B:87:31:76:43:B6
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019427B485C48DF54DC30D24753709A19DEF
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa
Signing time: Thu 02 Jan 2025 15:48:49 +0000
ROA not before: Thu 02 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56701
IP address blocks: 31.130.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:85:c4:8d:f5:4d:c3:0d:24:75:37:09:a1:9d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jan 2 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7556fb859846b9945333ef97f2592b87317643b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:88:02:a6:39:a5:1a:4a:07:81:42:1d:58:
b7:2b:e0:00:bc:af:b7:31:50:5c:07:2d:9d:a6:ca:
a6:10:dc:e9:77:00:93:54:90:0d:4e:e6:bd:ad:43:
4f:68:5f:36:7f:0d:d8:65:d0:b9:c9:78:3e:c3:03:
2d:bb:5d:00:74:3b:54:7e:e1:66:04:62:9c:e8:13:
d1:87:61:ec:5c:ed:b7:ae:68:e5:b0:e0:d6:cb:e9:
a4:5c:14:f5:f6:0b:27:cd:31:b9:4a:c4:75:e2:20:
23:13:b9:f4:91:f1:12:bc:3a:0e:9d:d8:5d:74:48:
d5:06:48:fc:69:31:f6:94:c0:be:3f:02:a6:bc:9c:
b9:62:56:ed:59:5f:54:7a:ce:94:84:33:d6:b4:b9:
e0:d4:06:7d:8a:fb:9d:f1:5d:6b:b5:43:07:15:73:
93:40:65:4b:90:2e:0f:d2:9a:bb:ae:ff:f6:f2:da:
a9:7a:db:a6:71:73:8a:77:99:d3:51:7e:e1:7b:3a:
1d:3c:4e:88:36:22:2c:3d:ba:26:b3:1a:81:16:86:
1f:fe:f9:07:70:54:ec:c1:24:1a:55:c9:75:36:b6:
f7:89:ec:f4:54:07:ad:6c:6a:7e:2f:15:ac:3b:21:
77:4d:d1:d1:96:71:3a:16:09:0c:19:d5:b4:c3:21:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:FB:85:98:46:B9:94:53:33:EF:97:F2:59:2B:87:31:76:43:B6
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/dVb7hZhGuZRTM--X8lkrhzF2Q7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.137.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4f:ba:b2:91:2b:1e:6b:95:07:c9:53:c2:17:38:55:fe:9b:
75:2a:df:35:d9:af:a5:b7:8a:fe:22:c4:7b:d7:dc:8e:9e:92:
ee:da:7c:59:d9:1c:8a:a8:68:f5:5e:28:17:f1:ee:0c:89:3c:
75:61:ff:1b:ed:1c:8f:4a:4b:f8:44:29:ed:55:57:17:49:6b:
0e:9e:93:e9:32:f2:04:21:3f:15:12:de:b3:50:f9:06:73:3c:
9a:54:7b:df:f6:a8:3d:8a:7d:1c:a7:d4:7b:e7:2a:65:55:74:
ed:1f:f4:6c:af:c1:30:37:ef:5e:33:33:f3:d5:7f:26:47:39:
28:a4:dd:f0:75:da:ed:9a:5a:97:a9:fb:a3:35:c5:e1:79:c2:
86:6c:82:09:e7:88:1f:3b:ec:67:ca:c5:88:e8:00:53:3f:70:
c3:25:79:a1:87:49:75:58:5b:43:dc:35:25:d6:d3:1e:99:f9:
08:c4:74:17:84:18:c6:e0:f4:d6:09:d0:b9:7c:f5:7d:f6:ac:
77:2f:8e:69:9d:98:ef:07:9e:75:27:17:d1:83:2b:09:f9:a4:
71:35:2b:da:01:b2:78:77:b5:f0:6b:5c:08:6d:e2:48:bb:bb:
87:4a:87:78:a9:41:cd:12:a7:29:bf:be:c9:dd:3e:b7:6e:49:
99:d7:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:00:49 2025 by rpki-client