Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR8b9Mh-5cUQbS6glE0Hka6-0N8.roa
File: MR8b9Mh-5cUQbS6glE0Hka6-0N8.roa (raw, json)
Hash identifier: wEKyroJtvNYaW8aK2GynKmouUG3yjvaisOYt72fgR78=
Subject key identifier: 31:1F:1B:F4:C8:7E:E5:C5:10:6D:2E:A0:94:4D:07:91:AE:BE:D0:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019606C7A79E1F86B339D690FB05F06E233A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR8b9Mh-5cUQbS6glE0Hka6-0N8.roa
Signing time: Sat 05 Apr 2025 16:27:49 +0000
ROA not before: Sat 05 Apr 2025 16:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 31.57.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:c7:a7:9e:1f:86:b3:39:d6:90:fb:05:f0:6e:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 5 16:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311f1bf4c87ee5c5106d2ea0944d0791aebed0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:a1:76:71:52:dc:30:10:8e:ae:c4:f9:f4:
51:27:10:12:cf:c3:eb:0b:6a:00:46:c1:cd:be:7d:
bb:c2:52:57:ae:c4:98:45:9f:94:98:9d:a9:b3:8c:
68:d9:c0:46:da:a3:0d:69:b8:4b:d5:0b:5d:da:5f:
46:4d:6b:2e:b1:89:f9:04:71:4d:7b:43:e9:0f:b2:
2b:6a:e6:87:cb:0a:46:22:5e:07:c7:e3:79:25:0f:
de:c6:08:2f:2e:2c:6c:40:42:39:3e:cd:06:c9:dc:
c9:8d:71:b2:b0:d6:c4:27:8c:0a:4f:a5:b9:00:41:
bb:17:98:59:91:ec:31:af:1e:a1:0d:40:58:7d:de:
97:e9:07:66:84:c3:0e:c3:66:6d:96:b3:1e:51:56:
59:ed:21:b4:b5:49:65:64:24:f5:1a:82:56:13:69:
99:ec:02:8a:d6:86:ec:68:d8:d0:34:14:15:2c:53:
78:e0:20:97:03:39:3f:e6:f3:c2:67:82:1d:df:1c:
0a:43:ee:61:99:e7:42:3b:18:59:2a:41:2c:3a:53:
92:6d:fe:dd:5d:2b:65:8d:c2:70:06:69:8f:ff:eb:
5f:81:48:a7:35:b4:ad:47:81:38:d8:2a:74:1b:85:
88:59:0e:bf:6d:ce:b5:a3:1b:b6:34:ff:9e:0c:ec:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:1B:F4:C8:7E:E5:C5:10:6D:2E:A0:94:4D:07:91:AE:BE:D0:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MR8b9Mh-5cUQbS6glE0Hka6-0N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.243.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8c:fb:ab:76:05:38:f0:f8:ae:10:c8:02:29:99:a5:f5:1c:
80:2a:ab:fc:87:a3:93:67:00:28:7c:10:89:28:49:df:d8:2d:
dc:78:aa:c2:69:f3:d3:d3:1d:2e:c5:56:d8:5c:1e:94:69:3d:
87:2e:37:5f:01:e0:de:48:40:49:c4:44:36:db:5c:a2:50:fa:
bc:e9:84:48:46:e2:04:30:55:4f:38:3f:ba:3c:1d:86:7f:e1:
f4:e1:03:66:f9:e7:1d:42:09:69:aa:a4:47:f3:82:80:5d:84:
d3:51:54:3d:32:3f:60:e8:fd:d7:e5:ae:4e:b4:45:90:c7:02:
0c:f7:c8:20:ce:ce:0b:92:ee:b4:00:59:27:b5:2e:83:53:21:
de:30:a4:aa:b4:12:49:34:a8:0d:36:fc:ed:3c:50:99:e9:63:
d6:ed:54:ce:ff:4a:8e:27:37:12:23:0c:21:74:76:5c:92:9b:
98:d5:92:6e:0d:68:a6:7b:97:e6:da:c7:4c:ad:ad:1c:15:ac:
be:e7:c8:b5:a3:b5:00:85:d6:e5:72:5b:a2:e7:03:eb:ec:47:
08:59:5d:19:35:ce:d6:84:59:5d:11:ab:99:bd:0a:c5:0d:c9:
01:74:02:a9:a8:14:66:90:7d:6f:c9:18:3d:9b:12:80:1c:b1:
de:15:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net