Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-goaQs1x_tfgXiyeL2oCQut3Fkg.roa
File: 1-goaQs1x_tfgXiyeL2oCQut3Fkg.roa (raw, json)
Hash identifier: DYC+oEfRUWL3aozUvT2kfgRDcEA8ZSboFtnU35fmc48=
Subject key identifier: FA:0A:1A:42:CD:71:FE:D7:E0:5E:2C:9E:2F:6A:02:42:EB:77:16:48
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01948961AA8E7F78795B4805626C57DA0978
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-goaQs1x_tfgXiyeL2oCQut3Fkg.roa
Signing time: Tue 21 Jan 2025 15:01:06 +0000
ROA not before: Tue 21 Jan 2025 15:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49551
IP address blocks: 31.148.8.0/22 maxlen: 24
31.148.202.0/23 maxlen: 24
93.171.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:61:aa:8e:7f:78:79:5b:48:05:62:6c:57:da:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 21 15:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0a1a42cd71fed7e05e2c9e2f6a0242eb771648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:08:09:9d:45:3a:dd:99:ba:ad:1d:1f:e7:
4f:7c:28:58:5b:57:44:21:b0:3a:1a:18:23:44:1b:
a2:77:48:cc:bc:9f:fc:a6:6d:f9:c8:be:ef:3b:2a:
95:93:53:4d:35:4c:5b:56:c7:fa:b1:30:81:26:71:
90:e5:d1:db:3a:77:ef:e7:9d:eb:62:90:a6:79:2d:
9a:ee:68:5f:a7:21:50:b4:64:6b:1d:af:c9:85:3a:
46:8f:83:03:65:1d:a0:38:6c:77:15:88:8a:88:08:
b1:2a:e4:50:31:9e:90:68:09:d1:d0:f7:56:79:72:
5e:9e:81:fd:8b:41:c4:e5:ff:1d:f6:f9:aa:44:9e:
12:46:82:b9:22:f0:a1:30:e3:fc:7e:d8:63:f4:92:
9d:c7:ca:53:50:38:4f:8b:56:ee:2a:1b:cc:39:95:
60:ee:7e:85:1e:dc:06:9e:51:ad:ba:a7:32:c9:dd:
84:9c:ba:c4:2b:ec:89:46:24:77:72:ac:54:3a:5a:
56:61:44:50:62:31:03:c5:64:4f:f8:68:9e:74:67:
a5:c7:82:25:10:e8:5d:27:35:64:c5:90:c2:3b:fc:
60:fc:80:87:10:50:b3:82:55:e5:95:c8:1f:88:8a:
57:ba:3b:80:30:59:c5:59:4a:64:23:4f:e8:ef:0e:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:1A:42:CD:71:FE:D7:E0:5E:2C:9E:2F:6A:02:42:EB:77:16:48
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-goaQs1x_tfgXiyeL2oCQut3Fkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.8.0/22
31.148.202.0/23
93.171.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e5:ca:2b:da:4a:23:82:ea:47:39:dd:98:a3:6c:d2:3a:28:
45:a4:5a:43:27:38:0d:e5:a3:db:5e:1a:b0:fd:09:f4:d6:e1:
54:05:41:96:c2:34:46:29:5b:3a:46:a1:3f:05:f9:e4:08:a5:
74:63:f0:cf:71:bf:69:21:4f:05:be:ca:c3:8a:48:7b:b1:5b:
d3:9b:74:a2:4e:59:65:b1:7d:0d:51:93:e0:a4:30:3a:66:5a:
28:af:e3:96:d1:46:34:27:0d:f0:1f:a6:52:e1:b9:ca:2b:65:
76:49:68:8a:d8:12:7e:fa:3e:b1:c5:79:69:ca:69:11:5b:e6:
ae:d7:68:96:f6:75:8c:09:02:06:fa:99:62:2d:1b:92:1f:ac:
72:c8:8d:66:ad:29:1e:87:63:42:ec:b6:77:21:78:02:7f:e4:
82:09:ad:25:d7:21:2a:39:4e:c2:e5:ba:f3:80:2b:5f:9c:8e:
6b:ea:2f:5a:c7:8b:1f:e9:b4:32:e7:93:52:1f:f0:88:a2:79:
42:be:d7:e0:1d:38:6f:d6:ef:3c:96:b3:20:4e:20:23:6f:5d:
27:4a:7e:55:cf:a9:f6:36:2e:0a:bd:8a:63:06:33:1e:65:6b:
73:2a:65:62:c3:4c:39:5f:24:11:d5:99:6f:c9:be:04:f2:09:
14:fb:b0:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:32 2025 by rpki-client