Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U_9yJziqL68Vlpo8LcfiT2k_TkA.roa
File: U_9yJziqL68Vlpo8LcfiT2k_TkA.roa (raw, json)
Hash identifier: okS5k7eMs3rxRXNzXUCnctt1S8BvMx0r3g2EHrIQZYk=
Subject key identifier: 53:FF:72:27:38:AA:2F:AF:15:96:9A:3C:2D:C7:E2:4F:69:3F:4E:40
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019618BB53D97AD40A0F69298729D671D5C3
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U_9yJziqL68Vlpo8LcfiT2k_TkA.roa
Signing time: Wed 09 Apr 2025 04:07:31 +0000
ROA not before: Wed 09 Apr 2025 04:07:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58262
IP address blocks: 31.40.4.0/24 maxlen: 24
31.40.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:bb:53:d9:7a:d4:0a:0f:69:29:87:29:d6:71:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Apr 9 04:07:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53ff722738aa2faf15969a3c2dc7e24f693f4e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:bd:cb:8c:04:3e:b6:55:64:cb:44:3a:1e:
9c:f7:17:ac:83:44:80:e8:fb:f0:3e:13:80:7c:0f:
7b:72:55:f7:f6:62:b2:e4:4a:48:43:35:bc:5a:01:
b1:0a:94:c6:ef:61:e9:1a:ff:f5:82:f9:43:a3:98:
5b:3d:a2:98:68:27:14:61:be:d9:12:78:87:1d:b0:
bc:54:eb:d0:6a:fa:10:54:a3:9e:e2:d5:22:f6:c7:
98:3f:57:b9:54:0e:2d:10:c1:5a:96:66:0f:f7:0a:
db:6a:96:d6:48:15:3e:15:24:fb:d5:d4:2d:d8:85:
88:88:da:63:d2:1c:8c:cd:09:7e:50:c5:a8:94:fd:
c5:a9:de:c4:4b:7c:c6:44:4f:c8:e3:8e:35:2a:05:
ae:b9:da:44:8c:54:c8:9c:00:10:50:12:b6:d7:ea:
a3:e3:25:e2:56:a9:3e:8f:7e:04:d6:e3:2a:9f:79:
0c:fe:d4:c6:b4:a6:ab:b3:e0:36:ec:a7:d7:a8:8c:
26:e4:7a:88:07:54:6c:d7:db:8d:91:e2:b1:c9:8b:
5e:4e:15:fa:2e:d1:68:84:dc:12:8f:ac:39:be:4c:
2e:7e:f3:26:58:2f:0c:b1:de:bc:c4:08:18:32:64:
ad:84:78:43:7b:4e:df:55:bf:f2:c0:cd:ba:c7:1b:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:72:27:38:AA:2F:AF:15:96:9A:3C:2D:C7:E2:4F:69:3F:4E:40
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/U_9yJziqL68Vlpo8LcfiT2k_TkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:f5:af:91:99:d3:1d:dc:3c:a9:ce:58:00:91:dd:b4:83:e1:
20:c6:24:ec:1f:4f:b9:a2:2b:07:3f:d9:2c:ab:c5:4c:7a:bb:
9e:f5:cc:6c:e4:b6:d4:32:d2:86:0d:20:e1:4c:7a:f8:ed:df:
33:8d:b7:b4:02:5b:28:17:8a:5a:9f:74:41:b3:14:31:d8:ff:
10:8e:07:9b:04:76:d2:b1:bc:10:bf:19:38:5f:90:72:c9:66:
ce:6b:5a:cc:38:94:a1:a0:46:f5:17:47:5b:b4:f6:7e:e4:43:
0b:8d:b6:c3:71:4a:6d:7b:de:3e:27:75:73:7e:d9:a1:17:51:
b6:f8:4f:b5:87:29:26:e5:69:49:f1:ab:ed:37:d1:8c:67:f0:
65:f9:84:35:b8:9a:82:9a:d4:44:cd:6b:d1:10:28:2c:03:5a:
58:a5:22:e1:aa:bb:98:17:d9:43:de:90:d0:27:ed:af:79:cd:
68:a3:13:1e:69:eb:d9:3e:22:80:2b:13:d4:23:87:35:1d:d2:
8e:32:47:8c:66:69:58:c1:6d:48:2a:64:f4:43:5c:a9:18:98:
a5:cc:f5:ec:9a:c3:94:1c:6f:d5:8c:30:3d:40:a3:9f:11:4c:
66:ef:9d:26:e5:59:ae:8c:fb:bd:ac:a2:5e:37:10:95:41:a6:
d2:57:29:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYYu1PZetQKD2kphynWcdXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5
YWQxZTIwHhcNMjUwNDA5MDQwNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2ZmNzIyNzM4YWEyZmFmMTU5NjlhM2MyZGM3ZTI0ZjY5M2Y0ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4+9y4wEPrZVZMtEOh6c9xesg0SA
6PvwPhOAfA97clX39mKy5EpIQzW8WgGxCpTG72HpGv/1gvlDo5hbPaKYaCcUYb7Z
EniHHbC8VOvQavoQVKOe4tUi9seYP1e5VA4tEMFalmYP9wrbapbWSBU+FST71dQt
2IWIiNpj0hyMzQl+UMWolP3Fqd7ES3zGRE/I4441KgWuudpEjFTInAAQUBK21+qj
4yXiVqk+j34E1uMqn3kM/tTGtKars+A27KfXqIwm5HqIB1Rs19uNkeKxyYteThX6
LtFohNwSj6w5vkwufvMmWC8Msd68xAgYMmSthHhDe07fVb/ywM26xxvNqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFP/cic4qi+vFZaaPC3H4k9pP05AMB8GA1UdIwQY
MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt
NTE0NmYxM2I3MWExLzEvVV85eUp6aXFMNjhWbHBvOExjZmlUMmtfVGtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx
LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHygEMA0G
CSqGSIb3DQEBCwUAA4IBAQA99a+RmdMd3DypzlgAkd20g+EgxiTsH0+5oisHP9ks
q8VMerue9cxs5LbUMtKGDSDhTHr47d8zjbe0AlsoF4pan3RBsxQx2P8QjgebBHbS
sbwQvxk4X5ByyWbOa1rMOJShoEb1F0dbtPZ+5EMLjbbDcUpte94+J3VzftmhF1G2
+E+1hykm5WlJ8avtN9GMZ/Bl+YQ1uJqCmtREzWvRECgsA1pYpSLhqruYF9lD3pDQ
J+2vec1ooxMeaevZPiKAKxPUI4c1HdKOMkeMZmlYwW1IKmT0Q1ypGJilzPXsmsOU
HG/VjDA9QKOfEUxm750m5VmujPu9rKJeNxCVQabSVyn5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net