Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/vQj0u5tlMYf_lL9RXugyXymGDpQ.roa
File: vQj0u5tlMYf_lL9RXugyXymGDpQ.roa (raw, json)
Hash identifier: gXmO06t8T5/ByIAewJqfMDavJ+B6VJpFLH3mt//ZwQg=
Subject key identifier: BD:08:F4:BB:9B:65:31:87:FF:94:BF:51:5E:E8:32:5F:29:86:0E:94
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 0194274793D7C71A799AB1BC8DFC8DC136C0
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/vQj0u5tlMYf_lL9RXugyXymGDpQ.roa
Signing time: Thu 02 Jan 2025 13:49:49 +0000
ROA not before: Thu 02 Jan 2025 13:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203008
IP address blocks: 31.42.58.0/23 maxlen: 23
31.128.246.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:93:d7:c7:1a:79:9a:b1:bc:8d:fc:8d:c1:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd08f4bb9b653187ff94bf515ee8325f29860e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:29:28:77:ec:4a:4d:84:03:a8:39:35:3e:
ef:ae:00:9d:9d:76:94:71:9b:d3:6b:1e:93:e4:96:
bb:e7:49:60:4b:9d:eb:12:d5:68:13:2a:e5:d2:8d:
11:2f:27:51:c4:e6:70:43:d8:0b:72:1f:2f:b1:7e:
5f:82:31:ce:ab:6f:f6:56:2e:b6:16:75:3e:d1:57:
ca:3c:8c:1f:8a:9a:7a:d8:fb:4c:11:6b:3c:f2:67:
5e:29:39:ac:16:7c:2c:e9:4a:fe:66:12:c8:74:55:
80:ff:25:78:8c:bd:af:fd:65:c0:6b:c5:75:b2:85:
80:f7:5b:02:4c:05:cf:17:8d:25:10:99:79:d1:c1:
f5:b5:43:3d:dd:8e:5f:4e:39:e9:82:69:81:9b:f8:
8d:80:25:23:cb:3d:12:6c:43:cb:2d:58:ce:ef:eb:
41:cf:2e:4a:05:f1:af:f4:b6:f2:02:51:54:03:35:
11:db:38:d4:d3:3a:45:c8:bf:84:37:cf:07:0e:a6:
84:36:d4:22:d9:85:8e:43:57:5f:8a:74:bb:df:f2:
a5:c2:52:a0:d5:7c:bb:03:8b:13:82:24:27:fb:a4:
71:2b:40:ed:33:a1:9c:57:b8:1b:64:70:d4:cb:43:
98:c4:ed:b6:19:47:05:9d:38:74:73:72:72:16:3f:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:08:F4:BB:9B:65:31:87:FF:94:BF:51:5E:E8:32:5F:29:86:0E:94
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/vQj0u5tlMYf_lL9RXugyXymGDpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.58.0/23
31.128.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:3d:d2:b1:7d:ef:90:6a:1d:1b:40:ff:47:ac:56:bc:2b:42:
a8:cc:b1:e2:49:3c:e6:14:96:ea:75:2a:17:df:21:1c:b7:c7:
8c:64:b7:af:b5:6f:4b:93:89:1c:eb:85:b4:16:cd:eb:fb:a5:
18:f4:72:aa:af:ce:87:ec:f0:7f:97:dd:c8:d2:6d:06:24:0c:
fc:fc:df:18:65:bb:e9:e3:df:c4:8b:e5:d9:59:71:73:ef:eb:
78:6b:42:3b:a7:03:60:33:ad:8e:5f:bb:b1:31:1c:15:f9:87:
85:19:b9:ac:2d:86:df:b0:39:65:bd:c0:86:35:50:12:fc:15:
60:24:2a:94:8d:98:c2:b8:aa:a8:90:fc:50:1d:e5:da:7d:58:
81:ed:53:a6:46:c4:63:79:c0:40:27:8b:a9:39:7e:b9:57:c7:
e1:96:0b:30:89:75:16:37:bd:30:8f:5b:f4:a8:d3:46:e4:bc:
bb:85:a6:bc:47:19:19:86:da:6b:34:f7:af:3e:ea:21:96:59:
d5:b5:29:ed:9d:b8:39:d4:3b:f9:de:7b:4a:af:69:39:4a:98:
12:14:2e:31:a8:6d:60:a2:03:c1:ce:2e:1e:50:0f:f0:88:4f:
fc:e1:84:8f:55:6a:a6:5e:42:ef:32:28:ff:57:d6:75:b2:e1:
41:db:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net