Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/o_vPKp-yya5cSSqO1lhAf5-yu5U.roa
File: o_vPKp-yya5cSSqO1lhAf5-yu5U.roa (raw, json)
Hash identifier: E6uA6lZ6vd1G5UfqzsNySuj5rqIPT/m1yd1RyvfXfrA=
Subject key identifier: A3:FB:CF:2A:9F:B2:C9:AE:5C:49:2A:8E:D6:58:40:7F:9F:B2:BB:95
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 019424455E031FB97CEE732E338B7D321C1F
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/o_vPKp-yya5cSSqO1lhAf5-yu5U.roa
Signing time: Wed 01 Jan 2025 23:48:33 +0000
ROA not before: Wed 01 Jan 2025 23:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60096
IP address blocks: 31.145.70.0/24 maxlen: 24
31.145.71.0/24 maxlen: 24
31.206.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5e:03:1f:b9:7c:ee:73:2e:33:8b:7d:32:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3fbcf2a9fb2c9ae5c492a8ed658407f9fb2bb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:c4:a5:f0:d3:82:3a:f6:6c:9f:90:93:f8:
a8:a8:1f:a3:3d:8f:6e:6a:5c:a5:83:c3:cb:04:46:
e8:c5:6c:99:0e:b7:97:10:fb:c0:bb:f0:79:6b:ed:
15:ce:1c:d0:cc:c9:92:a1:d6:ac:c0:32:ae:61:d5:
2c:5b:8c:4a:01:b5:3f:77:99:46:16:46:29:cf:9a:
4e:39:e8:76:45:05:d9:aa:da:6c:8f:f4:af:a5:ca:
a1:3e:58:f6:ff:f1:90:c6:c2:8d:60:a6:09:d0:8a:
e8:59:3d:ea:30:87:7b:fa:ba:96:91:7a:75:53:ea:
39:56:81:cc:e9:58:0d:96:f5:24:64:40:9f:f3:ff:
39:c5:3e:4d:fe:50:3c:da:09:9a:14:b0:20:da:12:
9d:06:33:cd:f2:9b:8d:f9:f1:20:c9:b7:53:3e:ad:
6e:07:6c:28:51:aa:6b:05:e7:f6:2d:a0:3b:00:d5:
2b:29:a0:93:72:f5:05:2b:56:b3:93:7c:e9:36:8d:
72:c3:63:f0:69:55:3e:86:9d:3e:04:9a:c4:29:bd:
0c:2c:01:92:e9:e4:37:26:c8:ab:35:3f:09:0e:3e:
70:05:1d:5e:6d:02:83:8a:7b:49:97:29:a1:9d:87:
a8:92:c0:2e:c5:21:f6:2f:6b:a9:51:47:0c:9a:b5:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:CF:2A:9F:B2:C9:AE:5C:49:2A:8E:D6:58:40:7F:9F:B2:BB:95
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/o_vPKp-yya5cSSqO1lhAf5-yu5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.70.0/23
31.206.32.0/24
Signature Algorithm: sha256WithRSAEncryption
39:af:98:d2:10:d2:d5:e1:bd:74:08:25:76:37:02:48:04:a1:
75:14:44:00:ab:b5:42:c1:2e:cf:d9:ef:a3:3f:7f:f4:17:5a:
cf:71:6c:3f:ac:de:80:f6:62:0b:f2:b2:66:e4:e7:b8:70:50:
37:f1:f4:4c:a1:7d:ae:bf:ed:56:9d:ac:46:73:03:92:18:73:
68:28:79:3c:c8:8c:bb:c0:de:0d:76:3a:0d:50:91:c9:36:c1:
d3:be:58:cd:ab:f0:4b:a6:11:75:0f:1b:a5:39:de:18:70:0d:
83:c6:35:2d:fe:94:84:0d:2c:cf:1a:a9:74:d8:64:45:79:0d:
41:a1:17:00:d4:30:5e:41:56:de:75:1c:5d:38:6c:1f:8f:97:
f7:35:21:8c:f4:70:18:ba:84:2c:e9:0c:7f:bc:b8:62:b9:20:
00:94:fe:fe:67:27:e1:a7:62:93:c2:66:3d:d6:4c:86:fe:69:
34:10:1e:31:5e:c7:1b:75:65:17:16:70:86:05:fc:d5:3d:12:
3f:56:4e:8d:21:42:4f:5f:b9:0d:ad:c9:2a:00:8c:58:68:ff:
d7:b8:6c:7c:e4:fc:c0:be:2c:13:a9:9d:23:91:81:be:03:3b:
14:ac:a9:14:ff:ba:a6:25:74:00:33:fe:01:dd:d8:00:eb:0a:
6f:1c:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net