Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/31Lnqd98aILf2Q9ICfWlWSchBQQ.roa
File: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (raw, json)
Hash identifier: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=
Subject key identifier: DF:52:E7:A9:DF:7C:68:82:DF:D9:0F:48:09:F5:A5:59:27:21:05:04
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 01942521AC1AFCAFACB44F28C16AAC9B72AC
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/31Lnqd98aILf2Q9ICfWlWSchBQQ.roa
Signing time: Thu 02 Jan 2025 03:49:11 +0000
ROA not before: Thu 02 Jan 2025 03:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209810
IP address blocks: 45.129.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ac:1a:fc:af:ac:b4:4f:28:c1:6a:ac:9b:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df52e7a9df7c6882dfd90f4809f5a55927210504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:46:f3:30:0f:f0:cc:10:e3:ec:d7:94:99:
34:8e:69:20:01:7a:74:d4:9d:01:fa:97:b3:b6:a7:
98:97:bf:3e:c2:02:bc:57:9b:c9:c4:73:b9:ed:94:
de:46:51:c0:b1:cc:a1:e7:5c:ae:6a:11:d6:96:5c:
11:8f:80:b3:89:92:ef:b4:4e:b1:01:82:06:91:7a:
ef:75:6b:42:20:af:25:64:c7:17:fd:22:5c:42:04:
62:6f:48:29:4e:fe:96:e4:a2:5b:3a:31:ea:17:6d:
a1:dd:68:64:bb:5a:0a:9d:aa:0b:43:68:25:8f:e5:
03:65:d2:0b:74:d7:c4:25:0b:69:02:67:ff:47:22:
7d:3a:9f:6c:76:49:f7:61:a7:3c:3f:01:2f:88:a3:
c0:98:da:a9:11:4f:af:a8:a0:41:05:ab:62:5f:eb:
68:e5:0f:69:81:5c:b7:39:4a:79:a0:9e:82:ee:dd:
71:a5:51:54:1f:a5:40:f2:d9:a2:30:01:d2:8e:37:
e5:57:37:22:da:0a:a8:0c:e3:e6:29:e7:9a:26:06:
22:00:5a:c5:92:b8:9c:b3:88:4b:06:54:d1:9b:9a:
ea:f5:3b:89:a9:6a:c8:c7:00:dd:e8:75:0d:f6:26:
b8:83:7d:45:b4:83:15:87:0f:e1:6a:0b:93:86:51:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:52:E7:A9:DF:7C:68:82:DF:D9:0F:48:09:F5:A5:59:27:21:05:04
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/31Lnqd98aILf2Q9ICfWlWSchBQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:62:c7:56:60:a3:93:14:34:35:dd:10:8e:f7:c9:36:ff:bf:
4d:36:55:2e:75:8b:cc:f1:40:e5:77:ef:e4:58:33:18:34:51:
bd:9e:3a:d6:fa:a7:9e:d5:d9:ab:f3:7d:cc:fe:57:83:1e:10:
1c:54:66:37:49:ac:4b:6a:6f:e0:27:09:db:f8:3a:38:21:20:
8c:7b:d9:a8:80:f7:88:56:67:3d:74:27:15:68:d1:f4:ff:83:
43:3a:4f:f0:69:fe:97:a7:da:6c:11:c9:b8:56:69:15:47:b8:
c7:5e:af:98:ec:6d:23:53:ad:99:73:e8:da:34:aa:9c:c9:b8:
ad:44:4d:12:8a:fc:1d:fa:b0:c9:99:23:9c:50:9a:87:a4:2d:
df:a7:3a:64:4e:92:42:80:e1:ef:ff:99:57:9f:48:c5:0b:ad:
04:26:08:5b:9b:28:0d:18:c5:fe:d6:39:0b:62:8a:11:ca:4a:
0a:58:0b:68:79:17:6f:b8:58:1b:15:a3:3c:09:f3:1b:3d:fc:
ba:ae:48:53:7a:bf:9a:9e:73:ce:f5:be:87:72:dc:5f:b6:6f:
c6:66:cb:86:3c:6e:db:3a:37:1c:cf:37:ee:c7:73:75:c5:fb:
9c:c6:6a:4a:fd:65:99:fc:31:35:78:7b:e7:b0:4e:7d:d2:b9:
67:ee:ff:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIawa/K+stE8owWqsm3KsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl
YTk3NGUwHhcNMjUwMTAyMDM0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjUyZTdhOWRmN2M2ODgyZGZkOTBmNDgwOWY1YTU1OTI3MjEwNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0NG8zAP8MwQ4+zXlJk0jmkgAXp0
1J0B+peztqeYl78+wgK8V5vJxHO57ZTeRlHAscyh51yuahHWllwRj4CziZLvtE6x
AYIGkXrvdWtCIK8lZMcX/SJcQgRib0gpTv6W5KJbOjHqF22h3Whku1oKnaoLQ2gl
j+UDZdILdNfEJQtpAmf/RyJ9Op9sdkn3Yac8PwEviKPAmNqpEU+vqKBBBatiX+to
5Q9pgVy3OUp5oJ6C7t1xpVFUH6VA8tmiMAHSjjflVzci2gqoDOPmKeeaJgYiAFrF
krics4hLBlTRm5rq9TuJqWrIxwDd6HUN9ia4g31FtIMVhw/haguThlE9pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9S56nffGiC39kPSAn1pVknIQUEMB8GA1UdIwQY
MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt
YmE2NDVmMTk5MTVhLzEvMzFMbnFkOThhSUxmMlE5SUNmV2xXU2NoQlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh
LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYFqMA0G
CSqGSIb3DQEBCwUAA4IBAQAsYsdWYKOTFDQ13RCO98k2/79NNlUudYvM8UDld+/k
WDMYNFG9njrW+qee1dmr833M/leDHhAcVGY3SaxLam/gJwnb+Do4ISCMe9mogPeI
Vmc9dCcVaNH0/4NDOk/waf6Xp9psEcm4VmkVR7jHXq+Y7G0jU62Zc+jaNKqcybit
RE0Sivwd+rDJmSOcUJqHpC3fpzpkTpJCgOHv/5lXn0jFC60EJghbmygNGMX+1jkL
YooRykoKWAtoeRdvuFgbFaM8CfMbPfy6rkhTer+annPO9b6Hctxftm/GZsuGPG7b
Ojcczzfux3N1xfucxmpK/WWZ/DE1eHvnsE590rln7v9l
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net