Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa
File: rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa (raw, json)
Hash identifier: ANGzzWXs9WMc8fyGIbBpWcfcISDjUPoF4F+e/jtJ45I=
Subject key identifier: AE:61:41:62:19:23:95:21:CC:68:2D:43:5E:BD:BE:A2:A8:63:09:9E
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 0194274863CFDE44DCB0694C68DF8ED487BE
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216012
IP address blocks: 31.202.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:63:cf:de:44:dc:b0:69:4c:68:df:8e:d4:87:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae61416219239521cc682d435ebdbea2a863099e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:c9:63:63:d5:f6:9e:6c:6e:4d:4a:b0:55:
bb:6a:8c:77:10:ff:62:c6:33:64:a0:5b:62:1e:5b:
e9:88:d6:26:bc:4d:48:c7:db:6e:ec:78:3e:19:87:
e7:b8:9e:74:22:6b:dd:ae:ce:2c:3b:44:10:ad:7a:
91:c8:99:ba:d6:f4:e6:72:6f:5c:e8:e0:08:ab:66:
cf:24:b9:f6:82:24:60:60:c2:78:23:99:18:14:74:
7c:cf:7f:ce:1e:2b:19:63:10:71:db:6a:ff:b3:9d:
ab:f0:c6:fb:33:9d:dc:df:13:0b:30:f9:1e:c2:b0:
b8:85:76:2d:40:37:03:bd:b9:89:a9:78:f3:3f:cf:
ac:ed:3f:9c:ae:af:f2:8e:36:e0:69:4d:96:37:77:
59:e3:ff:e9:72:9b:34:c5:af:03:32:0a:1f:37:9c:
1f:6e:52:1b:5b:63:6d:86:e9:82:d4:35:d8:da:df:
ea:a4:ec:f7:37:65:6f:e9:9a:6b:8f:82:79:52:a1:
01:f6:b6:05:5b:85:99:e7:1b:b5:94:82:71:5d:67:
77:49:6a:7b:60:b6:96:11:7d:96:1d:ef:5c:36:97:
ca:a0:f7:0f:bd:58:70:80:20:30:2a:be:ba:c2:6e:
dc:1a:40:7a:9b:28:2a:78:49:e5:f5:c9:dc:95:4f:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:61:41:62:19:23:95:21:CC:68:2D:43:5E:BD:BE:A2:A8:63:09:9E
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rmFBYhkjlSHMaC1DXr2-oqhjCZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.202.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:12:c2:25:53:75:06:d6:8b:c5:5c:87:97:a2:71:7f:00:7a:
b7:41:4c:e4:4e:1c:be:3f:d0:a9:70:77:36:e1:c8:22:23:b8:
85:68:d6:54:71:e8:67:b2:c7:b1:ab:50:fd:6b:55:3e:a3:c2:
44:5d:15:69:19:8b:be:88:69:01:f5:02:b5:8e:f3:98:6f:1c:
f9:70:fd:ef:80:25:81:5b:aa:11:33:a1:c6:95:51:f5:08:43:
ff:5d:dc:d3:e0:92:7f:8b:0a:4f:9b:4b:a4:c8:2e:b0:11:42:
44:65:63:0b:8f:b9:35:aa:75:f5:67:5e:ff:90:5c:cc:4a:68:
ec:a5:8e:9f:d5:0a:bc:30:df:a5:d6:58:ff:5f:8b:21:aa:f6:
b1:76:21:fd:51:57:2f:e9:28:71:92:bb:bd:41:81:e0:93:17:
f1:34:46:d0:79:d5:ab:cb:5e:56:c9:7f:d4:30:d2:f6:41:2b:
1e:14:fd:da:df:e2:74:4e:40:f4:2b:7b:9f:d6:95:92:a7:82:
7b:6f:5b:fb:aa:9b:b9:e6:57:23:4c:f0:09:07:3a:8e:aa:21:
53:c2:3f:fb:c0:88:2b:d4:50:e5:18:c1:ba:e8:ce:77:03:b4:
59:46:92:32:25:0a:9d:5e:af:3b:f8:56:32:93:79:07:c5:05:
03:f6:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net