Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/WePxKKoKyQQ7IwieAyFWOpdW0gc.roa
File: WePxKKoKyQQ7IwieAyFWOpdW0gc.roa (raw, json)
Hash identifier: QuIKAfj9NeHrWLXRzqHFaF9WwHO2H5mfJUpdI0U8Rgg=
Subject key identifier: 59:E3:F1:28:AA:0A:C9:04:3B:23:08:9E:03:21:56:3A:97:56:D2:07
Certificate issuer: /CN=20354e2015ee0c179bf03aed3373314fde6f11de
Certificate serial: 0189654A8D695C93690617EF9BFACB6F7A30
Authority key identifier: 20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDVOIBXuDBeb8DrtM3MxT95vEd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/WePxKKoKyQQ7IwieAyFWOpdW0gc.roa
Signing time: Mon 17 Jul 2023 19:18:51 +0000
ROA not before: Mon 17 Jul 2023 19:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 31.41.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8d:69:5c:93:69:06:17:ef:9b:fa:cb:6f:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20354e2015ee0c179bf03aed3373314fde6f11de
Validity
Not Before: Jul 17 19:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59e3f128aa0ac9043b23089e0321563a9756d207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:25:56:ff:19:49:f4:0b:f5:df:1d:a1:1e:
06:2c:ff:47:85:0f:e0:f1:23:6e:00:66:74:99:1e:
b5:7f:5c:68:dd:98:52:53:69:32:cf:9c:9f:2b:bb:
dd:3b:37:75:eb:57:17:bd:cd:bd:af:86:e1:fe:16:
42:16:d6:dc:46:b4:35:97:6b:17:bf:dd:91:d3:3e:
ae:8a:f6:43:86:92:8e:60:83:bf:75:eb:dd:85:f5:
f5:16:1d:60:42:36:0f:f0:7e:99:04:dc:15:bf:24:
64:45:f5:a3:8c:d8:28:9a:6c:61:b4:a2:6a:49:24:
db:ee:fd:58:79:8d:ff:00:be:ed:66:c3:f5:3d:a1:
1d:5c:6d:7a:28:02:30:ad:93:bc:f5:26:03:e1:a2:
cd:0a:e4:12:d0:24:d9:c5:0e:54:9a:49:85:cb:cf:
71:ae:bf:83:96:c6:5c:4f:b0:8c:64:3d:9b:43:27:
ca:c2:86:c1:56:18:99:1b:e4:8c:1d:b1:4b:52:01:
95:fe:e8:4a:51:d8:99:00:70:f9:d3:83:4f:df:21:
7f:b5:85:69:3e:4b:1b:a4:e2:f5:52:38:a9:8a:bb:
d4:e9:12:e3:7c:12:0a:9a:fe:ce:89:b6:9d:a9:8c:
48:98:8f:1e:79:fd:28:c5:33:9f:9c:fd:c8:a7:99:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:F1:28:AA:0A:C9:04:3B:23:08:9E:03:21:56:3A:97:56:D2:07
X509v3 Authority Key Identifier:
keyid:20:35:4E:20:15:EE:0C:17:9B:F0:3A:ED:33:73:31:4F:DE:6F:11:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDVOIBXuDBeb8DrtM3MxT95vEd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/WePxKKoKyQQ7IwieAyFWOpdW0gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b35a0-a38c-4c8f-b83e-c99b6198a9a2/1/IDVOIBXuDBeb8DrtM3MxT95vEd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.253.0/24
Signature Algorithm: sha256WithRSAEncryption
72:21:5e:a9:a8:b4:b7:8d:f4:db:fb:e5:92:f9:6b:a0:16:e2:
5c:cc:a0:7d:48:97:9f:dd:40:60:15:a3:93:5c:14:28:b2:74:
2c:f3:69:16:01:c0:79:3f:3e:ad:dc:16:ba:2e:51:8b:eb:08:
6c:b6:b0:8f:a6:23:ad:97:a5:60:d1:b8:df:cb:2e:22:82:59:
f4:58:b2:c7:a6:30:f2:73:6a:76:8c:22:0d:40:49:58:56:52:
fb:d2:5e:83:e8:7b:4e:3a:e7:37:5b:95:a9:ec:48:af:70:2e:
42:81:a0:50:7c:56:cb:fa:97:e2:db:e0:e1:b2:b3:f2:ad:a2:
e3:1a:e9:70:1b:ef:d7:82:14:e7:f1:1d:91:00:60:00:5e:f8:
29:96:37:78:c2:fa:fd:92:8a:25:81:0b:95:c3:cb:98:6b:dd:
b6:a6:a8:d8:9b:59:06:b5:a5:4c:69:fa:76:19:75:03:89:5a:
cf:4e:38:0f:51:41:e5:b6:fe:68:e3:98:12:06:a6:76:13:89:
bd:da:c4:93:51:da:cc:4a:96:84:f3:71:1e:dd:5e:90:a9:c4:
14:49:d8:45:72:26:52:fb:32:d0:16:04:49:a8:20:c2:2a:a5:
19:c9:99:5e:7c:50:dd:f9:fc:f9:85:a4:6f:e2:95:a4:f9:f2:
3e:46:4c:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllSo1pXJNpBhfvm/rLb3owMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzU0ZTIwMTVlZTBjMTc5YmYwM2FlZDMzNzMzMTRmZGU2
ZjExZGUwHhcNMjMwNzE3MTkxODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWUzZjEyOGFhMGFjOTA0M2IyMzA4OWUwMzIxNTYzYTk3NTZkMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFwlVv8ZSfQL9d8doR4GLP9HhQ/g
8SNuAGZ0mR61f1xo3ZhSU2kyz5yfK7vdOzd161cXvc29r4bh/hZCFtbcRrQ1l2sX
v92R0z6uivZDhpKOYIO/devdhfX1Fh1gQjYP8H6ZBNwVvyRkRfWjjNgommxhtKJq
SSTb7v1YeY3/AL7tZsP1PaEdXG16KAIwrZO89SYD4aLNCuQS0CTZxQ5UmkmFy89x
rr+DlsZcT7CMZD2bQyfKwobBVhiZG+SMHbFLUgGV/uhKUdiZAHD504NP3yF/tYVp
PksbpOL1UjipirvU6RLjfBIKmv7OibadqYxImI8eef0oxTOfnP3Ip5lhBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnj8SiqCskEOyMIngMhVjqXVtIHMB8GA1UdIwQY
MBaAFCA1TiAV7gwXm/A67TNzMU/ebxHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURWT0lCWHVEQmViOERydE0zTXhUOTV2RWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjM1YTAtYTM4Yy00YzhmLWI4M2Ut
Yzk5YjYxOThhOWEyLzEvV2VQeEtLb0t5UVE3SXdpZUF5RldPcGRXMGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8yYjM1YTAtYTM4Yy00YzhmLWI4M2UtYzk5YjYxOThhOWEy
LzEvSURWT0lCWHVEQmViOERydE0zTXhUOTV2RWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyn9MA0G
CSqGSIb3DQEBCwUAA4IBAQByIV6pqLS3jfTb++WS+WugFuJczKB9SJef3UBgFaOT
XBQosnQs82kWAcB5Pz6t3Ba6LlGL6whstrCPpiOtl6Vg0bjfyy4igln0WLLHpjDy
c2p2jCINQElYVlL70l6D6HtOOuc3W5Wp7EivcC5CgaBQfFbL+pfi2+DhsrPyraLj
GulwG+/XghTn8R2RAGAAXvgpljd4wvr9koolgQuVw8uYa922pqjYm1kGtaVMafp2
GXUDiVrPTjgPUUHltv5o45gSBqZ2E4m92sSTUdrMSpaE83Ee3V6QqcQUSdhFciZS
+zLQFgRJqCDCKqUZyZlefFDd+fz5haRv4pWk+fI+Rkyl
-----END CERTIFICATE-----
Generated at Thu May 8 20:03:54 2025 by rpki-client