Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/cKixBdA2YsQGbECfVrRBeHDlXYw.roa
File: cKixBdA2YsQGbECfVrRBeHDlXYw.roa (raw, json)
Hash identifier: qJETwYzXO3XeLPn/+rF185rIfriEwSzO+xMEVnrI5/g=
Subject key identifier: 70:A8:B1:05:D0:36:62:C4:06:6C:40:9F:56:B4:41:78:70:E5:5D:8C
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 019427479386A436050A81F8D0E6BE05B25E
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/cKixBdA2YsQGbECfVrRBeHDlXYw.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44996
IP address blocks: 31.42.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:93:86:a4:36:05:0a:81:f8:d0:e6:be:05:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70a8b105d03662c4066c409f56b4417870e55d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:dc:be:d3:50:76:3f:20:d6:a7:46:de:1d:
1f:a0:67:a1:7f:5e:b5:fa:f9:a4:ac:f4:97:61:3c:
dc:49:d3:11:a9:0c:3f:55:f2:8e:fa:0c:74:d8:4f:
38:e8:fb:2d:1c:37:80:5c:7b:45:45:e9:ce:9f:bf:
da:06:2c:c9:d5:d2:73:d2:2e:93:ef:6b:3a:41:41:
db:9a:e1:35:7a:8f:88:4a:fd:75:62:95:c9:6f:3d:
7a:fe:26:da:58:2f:66:08:cd:1b:a0:b9:9d:9e:a2:
43:4a:92:b2:99:05:7b:f7:8c:68:41:d7:68:21:32:
96:eb:f1:9a:d2:e2:12:18:a2:f7:a2:57:e0:e4:9e:
6c:6a:d5:c2:87:df:24:ba:a3:97:cc:40:16:f6:61:
1c:68:63:0d:d7:71:4b:ed:eb:7a:78:53:4d:b9:72:
ba:61:4f:1b:12:58:a7:c3:0a:40:6b:29:8e:0c:d6:
47:2a:79:9b:27:30:7d:ea:54:a2:72:ca:7b:02:9f:
54:a3:02:72:a6:74:14:83:05:e8:19:42:b0:ad:cd:
e3:3b:0c:82:a4:9e:40:ef:d4:9e:6e:db:88:05:c2:
85:11:3f:20:24:01:f2:1c:dd:62:14:42:ff:ed:e6:
2d:4c:a4:87:33:da:95:5f:df:72:f0:30:65:0d:2c:
80:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:B1:05:D0:36:62:C4:06:6C:40:9F:56:B4:41:78:70:E5:5D:8C
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/cKixBdA2YsQGbECfVrRBeHDlXYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:52:38:aa:7c:96:a1:28:a8:9e:a3:67:9e:98:dc:fa:b8:a1:
70:d8:0d:bb:e4:1e:f5:1b:0d:55:3f:c5:60:cf:9d:5e:42:f7:
a3:2c:4f:ab:1a:a8:35:1e:ff:22:f0:c6:25:9f:fa:25:a7:0e:
84:6e:8c:06:26:42:c8:f7:53:49:87:8a:4e:ef:1d:1d:c0:e5:
87:c1:58:f1:76:32:e9:a7:44:f4:16:e4:37:d5:a3:a8:38:2e:
91:1a:82:f2:46:eb:b3:0e:a7:8a:b6:37:a9:0d:4a:d7:b8:68:
3b:bd:bf:47:44:29:ff:c9:6a:5f:66:f5:cb:06:02:55:4f:36:
03:c9:34:6a:c8:bf:33:ef:f6:c4:62:84:3e:65:ed:39:1a:0b:
b6:55:2d:cf:d9:3a:af:f2:da:5b:97:c3:1d:85:34:cb:3b:33:
0f:38:0f:86:47:24:80:72:66:54:3b:33:b2:34:54:40:65:f3:
69:33:0c:8f:4b:2f:8d:16:60:36:03:ae:b5:a7:b2:e7:ad:bb:
47:b2:46:cc:92:3a:33:37:49:92:d7:fc:80:94:63:97:d3:0c:
bc:2b:d4:38:db:ab:65:2b:0f:14:c1:68:7d:d3:7a:86:e9:49:
b7:fd:22:f5:d5:aa:7a:df:66:a4:91:bf:cd:9c:54:d0:89:75:
d8:44:a5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net