Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WZKwaTpn0ejLJdCb1MV-HYV83xA.roa
File: WZKwaTpn0ejLJdCb1MV-HYV83xA.roa (raw, json)
Hash identifier: VeowTPlZiSf+LwnuET/ince4iVSMAPnoleisv0QZXoQ=
Subject key identifier: 59:92:B0:69:3A:67:D1:E8:CB:25:D0:9B:D4:C5:7E:1D:85:7C:DF:10
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455E40D7FC527FF553DBED81B2C15B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WZKwaTpn0ejLJdCb1MV-HYV83xA.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60146
IP address blocks: 31.206.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:40:d7:fc:52:7f:f5:53:db:ed:81:b2:c1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5992b0693a67d1e8cb25d09bd4c57e1d857cdf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:44:2b:3f:b7:a5:a4:1d:7d:0b:b2:03:42:
96:27:01:55:60:2b:cf:c4:02:23:9d:08:61:04:1f:
c9:31:2e:1b:25:b0:3b:21:fc:72:0e:2f:74:c6:0d:
ef:1e:86:51:99:e2:36:f0:33:8a:f7:e9:88:99:45:
1f:88:63:2b:f0:e9:e8:b4:d1:b2:e8:3a:d4:4a:7f:
e1:e9:83:d5:85:07:0d:89:07:22:85:f1:94:1c:bd:
3d:41:d9:fb:db:47:02:fa:a8:92:59:74:7d:53:05:
b7:32:d8:70:41:8d:82:fc:9d:91:4f:12:33:e4:70:
76:99:46:0c:92:e4:6b:75:63:25:f6:d7:8a:31:cc:
d0:e0:46:85:be:df:9f:23:a2:21:8a:9e:2a:23:39:
85:1f:fc:95:32:49:60:01:b6:a7:44:24:5a:c4:88:
f2:fc:84:97:5e:2a:94:e8:db:be:d0:09:24:78:1d:
80:c9:0e:06:1d:40:bd:2c:ab:55:c0:ef:a3:65:18:
16:23:21:b9:ce:76:1f:2d:5c:8f:1a:1a:5d:15:6b:
9d:6d:2a:4b:f8:02:b0:a2:49:f7:d3:df:c5:49:6f:
f7:e7:01:52:51:d6:7c:ba:fe:89:c6:9b:d6:48:3f:
04:0d:c5:cf:d7:6c:29:c4:b2:01:c8:67:71:67:45:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:B0:69:3A:67:D1:E8:CB:25:D0:9B:D4:C5:7E:1D:85:7C:DF:10
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WZKwaTpn0ejLJdCb1MV-HYV83xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.206.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:59:a9:94:50:54:3c:c1:31:0d:07:dd:38:fc:a1:22:8f:56:
09:03:fe:71:f4:3f:53:53:cf:32:7a:0c:68:5f:44:88:25:14:
bc:65:21:4c:47:dc:21:fd:ec:76:c1:4d:d6:0c:3e:97:56:fa:
3e:16:ed:13:73:f3:87:74:4b:98:80:cb:a8:15:88:4a:dd:ab:
08:e9:3a:19:f4:3d:78:57:0b:5e:5b:4d:0e:13:1f:98:88:c9:
f2:bf:73:70:93:50:93:bd:79:a2:d2:4f:bd:17:99:28:05:8b:
07:e3:4d:a2:50:be:c6:95:95:14:8b:1e:7e:40:0b:a8:a0:3d:
1b:c7:e7:5f:bf:46:e2:9b:09:4c:07:c2:75:8c:ac:73:be:2f:
f0:1b:7d:19:ac:09:5b:d2:30:df:62:3f:75:0b:05:b7:87:9a:
b3:5b:ec:b8:3f:93:f7:5b:1d:59:69:ac:6b:7c:77:c3:0d:71:
c3:94:65:39:15:42:9c:a0:7a:3d:fd:d6:c5:ed:2d:c1:ea:35:
14:d5:5a:19:33:e0:4e:07:3a:87:c3:77:57:e6:76:9d:79:ff:
5a:da:fa:39:06:03:33:0a:70:0d:39:b4:ea:ab:a6:b5:56:c8:
ce:81:7f:73:93:95:1e:cf:d7:bb:4f:64:0c:d1:d8:ce:fe:4d:
b5:0b:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net