Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48AtHwGVOm8sS3KmQ4wwA_nUvSU.roa
File: 48AtHwGVOm8sS3KmQ4wwA_nUvSU.roa (raw, json)
Hash identifier: qTXKOllIT2GBQ6WCDgWgyYsgvTAt5gsee2tqGgECa4Y=
Subject key identifier: E3:C0:2D:1F:01:95:3A:6F:2C:4B:72:A6:43:8C:30:03:F9:D4:BD:25
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590135C496BCB182EE2D5A69DC81C48
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48AtHwGVOm8sS3KmQ4wwA_nUvSU.roa
Signing time: Thu 02 Jan 2025 05:49:46 +0000
ROA not before: Thu 02 Jan 2025 05:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213841
IP address blocks: 31.148.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:13:5c:49:6b:cb:18:2e:e2:d5:a6:9d:c8:1c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3c02d1f01953a6f2c4b72a6438c3003f9d4bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:0e:27:b8:12:24:6a:f3:38:ef:2a:45:9e:
ab:c9:44:fc:73:ce:06:32:3f:37:b9:17:78:b0:30:
9d:9c:2a:89:0d:76:7f:ad:90:c4:75:e4:ad:f8:9f:
01:4a:0a:be:ec:57:78:59:5d:89:b1:85:14:ef:9c:
fb:3a:1f:90:f2:2f:04:06:cd:0d:8b:9e:71:d1:11:
2d:88:3d:a2:78:1d:0d:ac:2b:4d:22:e3:16:d2:31:
1e:fb:b3:fb:22:79:ab:54:0b:53:68:82:3f:8a:9c:
12:73:f6:cc:db:61:79:8d:e2:e3:24:22:ea:98:64:
b1:3c:50:b3:51:6e:09:c8:89:65:ea:53:b3:1a:87:
36:e9:bb:1f:97:73:10:e6:52:4f:d5:da:83:64:65:
43:fd:f8:d2:a5:1e:3e:e6:6d:d2:a4:3d:cd:a2:11:
a2:1d:86:19:07:c4:5e:c2:68:0f:97:d8:6c:ec:1e:
45:60:a5:8b:be:f6:64:6e:fc:41:a4:03:24:37:1e:
cb:63:55:b6:13:8a:22:d2:08:12:f9:0b:6e:18:3c:
84:69:f0:c2:5e:af:03:c3:a3:05:ae:e5:97:ae:be:
4e:fc:7c:8e:47:04:75:b7:f8:5b:25:55:a9:e1:1b:
53:e2:9f:27:2e:a3:a1:42:e8:e4:8e:c1:75:4f:e0:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:2D:1F:01:95:3A:6F:2C:4B:72:A6:43:8C:30:03:F9:D4:BD:25
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/48AtHwGVOm8sS3KmQ4wwA_nUvSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.140.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c8:fb:c9:8a:a6:4a:e3:dd:15:87:ef:98:1b:13:7b:a7:2d:
66:ff:04:d9:d2:ce:1a:0e:0c:55:cc:e8:12:d2:f2:a2:2d:d6:
c3:18:cb:43:1b:da:b8:b1:41:83:35:a3:7b:fa:0e:ce:e5:94:
ae:71:22:ab:ca:e3:1c:11:b5:91:e4:e9:ee:83:78:9e:a3:a8:
96:7b:c8:67:f4:2d:9d:4d:d4:4d:73:2c:62:e1:c1:a9:2c:9d:
27:84:26:d8:80:52:af:74:e9:1f:d8:e5:a3:32:68:cb:60:3c:
8b:d7:4b:7b:c3:82:b3:9b:8f:71:61:ac:07:07:8f:56:a8:17:
6b:c7:39:b4:71:eb:fa:bc:6c:eb:7e:aa:9c:e0:df:e7:d6:b0:
55:bb:48:c9:bf:f8:21:05:94:01:82:10:9d:bc:d9:8c:fb:0b:
c8:93:95:c1:da:3e:1f:dd:12:90:83:6f:95:4e:d0:9a:b3:e8:
86:d3:28:19:99:1f:ba:73:9a:7a:50:79:78:de:b8:6b:ae:6c:
ef:55:e7:fd:3a:d1:37:3f:b0:52:2f:13:98:af:64:e6:d5:95:
66:3d:49:1b:fd:54:71:16:53:ce:d7:21:9e:b8:ee:9f:cf:e5:
f8:60:05:da:b8:71:71:63:d3:48:6c:8e:bf:38:ea:65:08:5a:
e6:6f:f2:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlkBNcSWvLGC7i1aadyBxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2MwMmQxZjAxOTUzYTZmMmM0YjcyYTY0MzhjMzAwM2Y5ZDRiZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NMOJ7gSJGrzOO8qRZ6ryUT8c84G
Mj83uRd4sDCdnCqJDXZ/rZDEdeSt+J8BSgq+7Fd4WV2JsYUU75z7Oh+Q8i8EBs0N
i55x0REtiD2ieB0NrCtNIuMW0jEe+7P7InmrVAtTaII/ipwSc/bM22F5jeLjJCLq
mGSxPFCzUW4JyIll6lOzGoc26bsfl3MQ5lJP1dqDZGVD/fjSpR4+5m3SpD3NohGi
HYYZB8RewmgPl9hs7B5FYKWLvvZkbvxBpAMkNx7LY1W2E4oi0ggS+QtuGDyEafDC
Xq8Dw6MFruWXrr5O/HyORwR1t/hbJVWp4RtT4p8nLqOhQujkjsF1T+BrzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPALR8BlTpvLEtypkOMMAP51L0lMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNDhBdEh3R1ZPbThzUzNLbVE0d3dBX25VdlNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH5SMMA0G
CSqGSIb3DQEBCwUAA4IBAQBkyPvJiqZK490Vh++YGxN7py1m/wTZ0s4aDgxVzOgS
0vKiLdbDGMtDG9q4sUGDNaN7+g7O5ZSucSKryuMcEbWR5Onug3ieo6iWe8hn9C2d
TdRNcyxi4cGpLJ0nhCbYgFKvdOkf2OWjMmjLYDyL10t7w4Kzm49xYawHB49WqBdr
xzm0cev6vGzrfqqc4N/n1rBVu0jJv/ghBZQBghCdvNmM+wvIk5XB2j4f3RKQg2+V
TtCas+iG0ygZmR+6c5p6UHl43rhrrmzvVef9OtE3P7BSLxOYr2Tm1ZVmPUkb/VRx
FlPO1yGeuO6fz+X4YAXauHFxY9NIbI6/OOplCFrmb/L2
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:24 2025 by rpki-client