Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/WJDFN0egiGE6Bq1VmZ_vcgUzty4.roa
File: WJDFN0egiGE6Bq1VmZ_vcgUzty4.roa (raw, json)
Hash identifier: xvyBP78rZbNILgwm2MnaNFsInm8E7+0aZqPQl1aexOM=
Subject key identifier: 58:90:C5:37:47:A0:88:61:3A:06:AD:55:99:9F:EF:72:05:33:B7:2E
Certificate issuer: /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial: 019424B3ADC4365AB71E0C49D9E3DFD450BF
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/WJDFN0egiGE6Bq1VmZ_vcgUzty4.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 46.31.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ad:c4:36:5a:b7:1e:0c:49:d9:e3:df:d4:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5890c53747a088613a06ad55999fef720533b72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:33:61:1b:45:ec:23:1c:56:bd:c5:46:f7:
18:58:ab:57:ca:8d:51:2c:c1:97:fa:bc:1f:dd:87:
57:e1:a9:dd:98:c4:21:9a:28:ce:4d:7f:0d:ed:23:
7c:3d:5b:71:8c:aa:3e:4b:fa:1f:25:83:fa:c1:bc:
8c:23:36:29:1a:c1:80:44:aa:50:79:cc:bd:32:7e:
cb:f9:bc:1f:05:5c:49:f3:52:38:b7:ed:2b:72:38:
ca:b9:77:3c:3f:17:f2:4c:3a:1f:63:dd:18:00:f5:
0f:ce:d9:b4:bb:b0:06:be:b6:a3:82:7c:d9:5b:0e:
77:c3:f3:73:bc:36:47:42:fa:b7:a3:51:74:65:62:
5f:c9:3e:a0:0e:36:04:1a:7e:27:f4:3f:83:b3:95:
6c:1b:e4:06:2e:5a:32:4f:1d:2d:18:30:47:34:82:
f5:b9:24:35:d6:8f:48:3c:15:13:62:54:f9:5b:32:
61:72:2c:3e:e3:54:20:37:b7:b8:2f:c6:33:6f:3a:
c0:03:04:1f:74:dc:2f:ba:23:d5:75:97:a3:84:49:
0d:37:8b:02:90:57:d6:3f:e4:3a:3d:dd:34:f1:5c:
0c:d0:ee:69:b3:09:37:c0:01:75:d7:ac:a0:b4:a9:
22:db:70:00:52:22:fe:c0:4e:0c:40:e2:e7:7a:8e:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:90:C5:37:47:A0:88:61:3A:06:AD:55:99:9F:EF:72:05:33:B7:2E
X509v3 Authority Key Identifier:
keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/WJDFN0egiGE6Bq1VmZ_vcgUzty4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:fc:05:c6:d0:4b:23:21:5d:73:ba:51:26:14:92:91:06:02:
34:e4:1d:0f:ae:03:14:c2:af:13:ae:e8:17:20:59:e4:05:c9:
30:d4:6b:2f:d8:b5:b4:01:89:a1:97:1d:e5:a3:35:6c:ff:e3:
92:0f:7e:d2:e3:28:34:ea:90:0a:77:ca:d2:8f:a7:71:e9:5b:
ca:24:9c:0e:13:b8:8f:62:ef:96:16:4e:68:b2:40:f2:99:df:
f0:46:95:66:8f:16:d7:c7:eb:e7:93:6e:87:7b:82:c0:7a:13:
69:a9:b6:8b:3c:19:42:5c:90:26:fa:d6:c5:50:4a:3e:e8:f2:
98:73:bb:6d:32:ec:e0:70:f5:7f:ed:9c:4b:bf:79:ba:6a:44:
c3:a2:06:da:91:ba:b8:f9:dc:29:a7:fc:67:a5:b6:40:60:01:
ae:6a:87:40:11:53:b0:04:99:0a:ad:4e:4c:da:ce:06:17:c8:
ac:f3:98:49:0f:78:49:9e:2b:71:0a:b7:2b:46:22:4c:06:7a:
50:63:ab:a2:ab:94:5b:d8:d7:cf:a6:b3:a0:9c:0d:7f:a0:d1:
1f:40:64:64:2f:2d:bf:de:3b:9f:a1:df:fc:01:e5:17:c9:7b:
9e:26:1f:d0:76:d4:16:0b:2e:53:1f:92:79:e6:99:a2:56:17:
33:d0:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:34:22 2025 by rpki-client