Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa
File: B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa (raw, json)
Hash identifier: GYazD0XUED0Lzoqp0JRsmv1Wdv3MWiNL0orAYJkGs0s=
Subject key identifier: 07:90:2B:CD:3E:52:E6:C3:31:29:FC:A3:0B:23:F5:9F:58:F1:23:E2
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 0195F07734E1866778266A2EED1E66A56345
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa
Signing time: Tue 01 Apr 2025 08:28:19 +0000
ROA not before: Tue 01 Apr 2025 08:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50606
IP address blocks: 31.6.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:77:34:e1:86:67:78:26:6a:2e:ed:1e:66:a5:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Apr 1 08:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07902bcd3e52e6c33129fca30b23f59f58f123e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:b2:c2:25:7c:0b:27:69:87:bd:aa:eb:31:
57:0a:42:a8:af:f1:7d:4e:d5:28:a1:c9:97:02:d6:
24:a0:99:04:87:f6:68:23:5b:ef:e6:ed:5d:02:3a:
55:18:e5:b8:0f:6c:06:6e:86:9a:e2:88:8e:4b:a4:
4f:5e:12:6d:e4:bb:2b:24:fc:38:2e:cb:fa:db:33:
64:3f:19:02:01:18:94:53:71:fc:cf:2c:bd:4e:b0:
19:c8:d2:4a:1e:b3:b1:92:b8:69:f0:10:b7:d8:b3:
ce:10:8b:89:6f:61:91:91:ab:61:06:8f:0a:40:1f:
89:b9:f9:b3:96:69:7f:c8:52:b6:f8:7b:4f:31:06:
51:49:e1:2b:a9:67:36:6c:9c:83:94:25:55:b9:b6:
e8:c1:34:a6:25:21:bd:15:a7:28:ef:14:4e:37:80:
54:c4:3a:b0:35:23:9f:49:06:b1:6a:d4:0c:15:fc:
10:fc:3b:aa:52:50:4b:40:1f:68:38:2e:6e:9d:f6:
46:36:ff:d3:4b:6d:ec:c2:cb:6d:37:64:f9:4b:33:
74:50:e4:5f:8d:5c:1d:f0:19:e6:6e:e1:09:f0:91:
3d:41:4e:77:df:48:d9:a0:44:f9:6d:ce:33:49:2c:
a6:bf:af:ed:d7:48:af:20:55:7d:32:d3:ee:9c:d0:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:2B:CD:3E:52:E6:C3:31:29:FC:A3:0B:23:F5:9F:58:F1:23:E2
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/B5ArzT5S5sMxKfyjCyP1n1jxI-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.247.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cd:ef:1f:a6:25:da:b1:6d:65:81:67:c3:38:aa:80:da:b5:
43:f4:2e:6f:17:a8:45:48:c5:89:e2:c2:aa:59:6d:6a:8c:c9:
0d:ea:ea:34:c9:5b:62:08:1f:58:a6:71:55:0d:bc:56:ec:4e:
82:e4:67:c3:ad:a1:3e:35:8a:c5:1a:c4:56:37:eb:ad:79:9c:
e0:08:8e:fb:cf:85:ae:69:15:44:76:df:a4:50:d2:9f:53:f2:
10:22:31:73:65:d6:c7:5c:58:5a:89:9d:21:7c:5f:f6:93:ed:
e2:3d:ab:78:b9:89:0e:d7:75:e3:3a:d8:fe:02:1a:13:53:13:
21:c8:64:69:ed:60:fe:66:4c:8a:bd:08:5f:7c:f9:29:ee:1b:
58:43:11:cd:b6:cc:4a:02:cb:10:fd:75:4d:80:58:0e:68:5f:
87:a3:89:89:5c:66:0d:f4:3d:6f:17:6f:ef:84:67:a0:23:21:
20:84:d7:27:b7:49:bb:2d:68:95:59:d5:ac:95:b0:2b:f0:38:
4a:bb:3f:e8:f7:8b:a7:2f:75:ad:e7:4b:04:a3:30:f5:a5:56:
08:c7:a8:5c:eb:38:db:74:fc:fd:e2:e6:67:f3:d6:6c:b8:5c:
4f:44:46:e3:96:04:83:84:48:6a:4f:fc:80:eb:43:2d:48:25:
44:ca:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:45 2025 by rpki-client on console.sobornost.net