Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/oVHqW7Znx3iXeIApvzhLphsAfTQ.roa
File: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (raw, json)
Hash identifier: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=
Subject key identifier: A1:51:EA:5B:B6:67:C7:78:97:78:80:29:BF:38:4B:A6:1B:00:7D:34
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 01942521F7437EAA154831AA5E4D68740FBF
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/oVHqW7Znx3iXeIApvzhLphsAfTQ.roa
Signing time: Thu 02 Jan 2025 03:49:30 +0000
ROA not before: Thu 02 Jan 2025 03:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56517
IP address blocks: 31.24.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f7:43:7e:aa:15:48:31:aa:5e:4d:68:74:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a151ea5bb667c77897788029bf384ba61b007d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:ef:eb:07:d4:51:85:53:c1:ce:b7:c6:4b:
45:12:c1:a1:f9:23:e8:f9:92:85:59:77:0b:09:1d:
71:b2:1e:73:46:48:ed:f1:c6:98:6c:99:9f:ad:12:
c5:1c:1e:4a:95:65:ca:d7:73:4f:38:80:16:22:12:
47:74:30:f5:21:45:57:3b:44:26:21:37:9b:9b:6e:
3f:fe:48:6c:f9:8a:19:9f:99:fc:a4:b2:1c:f9:e1:
e6:bc:ce:a6:9a:a5:a7:77:37:1c:85:89:8d:09:d7:
b1:4d:31:3e:5f:42:20:f5:9e:bb:e8:3a:7d:3b:e9:
c2:09:bf:b7:de:ab:22:72:c4:d3:c8:53:2c:57:3a:
29:1f:f3:05:41:b1:c3:24:20:25:91:ee:c5:4e:6a:
68:18:d2:54:a8:e0:c5:d1:5b:8d:23:95:98:20:45:
9f:4d:7f:7d:be:e7:39:6a:54:8b:11:6d:8f:cd:0f:
a7:fd:5a:ad:dc:59:94:ab:fd:8c:d3:32:71:4e:dc:
c3:ac:55:b6:90:e1:29:ce:e4:3a:18:b8:73:77:73:
a6:35:13:f0:cd:34:31:b7:37:56:16:12:f0:e2:05:
f9:c0:c4:75:9a:fa:07:4f:74:2a:16:5d:14:47:85:
eb:f3:a0:0e:83:13:fc:21:e1:3c:29:6e:ba:64:b5:
86:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:EA:5B:B6:67:C7:78:97:78:80:29:BF:38:4B:A6:1B:00:7D:34
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/oVHqW7Znx3iXeIApvzhLphsAfTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:18:6b:47:2e:89:50:9b:fa:d5:06:2e:15:95:b7:4a:29:2c:
39:16:88:7a:65:7f:9b:85:ad:6a:9b:89:1e:a4:2c:c3:4c:12:
f2:e8:77:d2:c7:bc:4b:63:2d:a7:13:c8:2e:08:b8:a7:c1:19:
d9:ac:ad:74:44:48:1d:64:6e:bd:4d:c9:72:92:02:5a:f6:78:
16:1b:da:7e:16:e1:71:79:d9:89:38:a4:86:a8:31:c4:57:79:
fc:51:50:56:40:eb:7e:4f:a4:1e:4e:bf:d9:ec:21:60:15:67:
f7:29:94:7c:b6:01:7b:64:70:32:7d:76:51:5e:ab:46:b0:0c:
65:4a:68:15:0c:83:fe:07:a4:cd:fd:34:e3:af:ef:d7:d2:d6:
f1:12:b0:d7:1b:4a:c5:3f:77:1b:4e:21:fb:14:93:4b:c6:9f:
07:90:51:c7:87:8c:3c:1a:d2:06:84:e4:cd:06:66:fc:77:fa:
51:a3:a4:b3:84:55:d5:08:f2:5d:67:52:49:a7:20:d9:3b:de:
5d:61:5d:2f:12:92:be:af:35:0b:54:83:e0:19:6a:a3:d0:7b:
39:99:4d:24:a8:29:d8:71:25:dd:20:76:e5:53:d5:f9:ea:f7:
4e:71:91:43:03:10:9b:23:2b:0c:c9:87:b5:ce:56:de:68:2d:
b9:f8:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net