Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3TsBBCNm5GBvBazQOWzBgOdbFDQ.roa
File: 3TsBBCNm5GBvBazQOWzBgOdbFDQ.roa (raw, json)
Hash identifier: COb+lYvddLV51wJk69CEUJZoQTtrGe7YAf0jlio2aoI=
Subject key identifier: DD:3B:01:04:23:66:E4:60:6F:05:AC:D0:39:6C:C1:80:E7:5B:14:34
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194F0A918650F7F3A31533517FA61338222
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3TsBBCNm5GBvBazQOWzBgOdbFDQ.roa
Signing time: Mon 10 Feb 2025 16:20:01 +0000
ROA not before: Mon 10 Feb 2025 16:20:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
93.170.48.0/23 maxlen: 24
93.171.236.0/23 maxlen: 24
95.47.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:a9:18:65:0f:7f:3a:31:53:35:17:fa:61:33:82:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 10 16:20:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd3b01042366e4606f05acd0396cc180e75b1434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:12:84:6f:56:85:69:71:cf:9f:95:09:97:
90:04:be:e8:e5:e2:3b:24:a0:e0:e1:1e:da:d7:f8:
b6:b9:ed:1c:73:78:ce:55:c9:cb:d7:1b:43:43:86:
9e:31:db:bf:5f:ac:13:88:fc:8d:9c:8d:8e:02:ee:
59:39:71:73:a0:87:5a:3f:f4:b2:df:ba:d5:dd:75:
98:2a:e8:36:4d:62:79:01:0a:fa:63:9a:68:3c:46:
9d:45:f8:b5:ae:52:19:ed:ef:3d:08:94:bc:17:ce:
0a:17:40:4f:3a:61:2a:ab:82:68:91:a6:4c:e7:1f:
6c:8c:d7:62:67:16:28:37:41:d9:2e:b5:19:16:73:
35:03:db:a3:f5:59:40:80:3b:e0:a6:38:3f:99:3e:
d8:42:cc:3a:97:10:c7:6e:31:d3:ba:30:2b:9c:f0:
aa:da:05:61:95:8f:c4:ee:da:91:09:cc:15:25:4c:
e6:d9:3f:19:ff:b9:33:79:a3:e3:a2:93:cb:6d:03:
10:da:ca:04:8f:e1:e8:9d:11:d2:56:95:27:c5:5c:
5e:4d:6f:8d:2b:54:fa:6a:96:c7:23:3f:87:d7:30:
e0:45:12:a5:c2:0a:9e:b5:ad:34:0b:36:b4:87:a0:
ae:af:f6:be:d5:65:bd:f3:90:9e:1f:d3:69:2c:dd:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:01:04:23:66:E4:60:6F:05:AC:D0:39:6C:C1:80:E7:5B:14:34
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3TsBBCNm5GBvBazQOWzBgOdbFDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
93.170.48.0/23
93.171.236.0/23
95.47.254.0/23
Signature Algorithm: sha256WithRSAEncryption
63:d3:a8:5f:f7:4d:c7:91:2e:49:27:71:8c:d9:75:64:8c:be:
27:e8:04:c1:42:82:7a:b2:00:49:50:76:1e:c2:fc:10:66:2b:
d7:64:80:fc:86:5a:d1:f8:c9:1a:dd:40:9d:39:6b:6e:e5:3c:
bd:e3:e3:1b:a3:7d:2f:0b:c5:ce:19:c4:b2:20:3b:90:ed:d1:
a0:f9:cf:23:a4:79:f5:34:05:46:aa:df:cd:2c:56:ee:75:14:
74:79:55:ce:12:52:a7:54:2d:89:3e:70:0b:07:c8:04:9d:5a:
b9:dd:3f:7d:28:63:22:57:24:b5:e8:34:be:e7:fc:3b:97:e5:
33:9d:8d:92:04:ee:26:e7:b3:fe:c9:8a:db:f1:c7:b7:aa:51:
7f:6c:18:2a:09:5b:76:7a:25:1e:cf:27:70:b6:ad:92:b9:2b:
ef:b0:54:1e:f8:8f:2a:d2:bb:6d:60:14:65:2c:65:9a:b3:be:
8b:d0:84:5e:4d:f7:43:8f:26:3d:79:b6:a1:50:97:6d:5c:b1:
43:d7:7a:ef:12:88:e1:12:63:12:33:5f:09:db:a0:4f:88:20:
db:ff:30:0a:c7:67:8b:04:20:0a:22:dc:e4:64:df:70:29:dd:
18:76:65:39:1f:fa:d6:9c:a7:f7:3d:10:13:d0:cb:80:83:f2:
eb:3e:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:43 2025 by rpki-client