Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4CsrPEIxK_kpuWxDfb-gQ7fkVAU.roa
File: 4CsrPEIxK_kpuWxDfb-gQ7fkVAU.roa (raw, json)
Hash identifier: Hv2fpk1B6hQcBq6fj+WXNS62ylnxUxN8MbqPJVsSES4=
Subject key identifier: E0:2B:2B:3C:42:31:2B:F9:29:B9:6C:43:7D:BF:A0:43:B7:E4:54:05
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBDD75AFBBF2FFDD847361A1591C2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4CsrPEIxK_kpuWxDfb-gQ7fkVAU.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51841
IP address blocks: 31.148.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bd:d7:5a:fb:bf:2f:fd:d8:47:36:1a:15:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e02b2b3c42312bf929b96c437dbfa043b7e45405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:ed:07:50:fa:69:7a:18:7b:6d:84:34:02:
17:d0:c2:d4:b9:66:b1:c3:fa:14:b5:b8:04:59:44:
84:28:b9:de:fd:5b:4b:21:6f:f9:c7:8e:dc:e1:d5:
49:4a:96:88:e8:15:9f:81:8b:51:d0:8d:3c:ab:22:
c1:53:46:a8:24:4e:31:81:84:0e:81:aa:16:a8:66:
28:12:53:06:fd:ad:c2:ce:0e:64:02:16:53:ae:b8:
96:78:58:69:37:71:dc:76:cf:7e:d7:39:a4:f2:55:
11:9f:13:56:8f:9a:6d:e2:e8:51:4a:f5:6d:fe:fc:
47:d5:c2:f9:2d:b1:0e:a3:45:13:90:21:6f:47:f9:
e3:56:be:97:54:02:34:ff:80:ea:2f:fb:de:43:b5:
e8:00:36:82:66:e1:ea:d8:d0:ee:f4:75:62:50:ec:
e3:f8:db:a4:ca:52:06:2b:5b:08:e8:db:7a:5a:86:
b9:0c:15:b1:64:94:c9:81:b6:aa:eb:37:ed:1c:cf:
bd:50:84:8e:23:95:0b:f1:30:d2:60:4d:2f:d3:67:
b8:21:93:ab:72:80:53:f1:2e:d1:14:1c:e5:51:a3:
cb:b3:c3:50:67:4c:dc:53:ca:bf:90:f2:52:72:6b:
ba:75:27:97:28:b8:50:ee:1d:ac:cb:db:32:91:15:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:2B:3C:42:31:2B:F9:29:B9:6C:43:7D:BF:A0:43:B7:E4:54:05
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4CsrPEIxK_kpuWxDfb-gQ7fkVAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.201.0/24
Signature Algorithm: sha256WithRSAEncryption
70:2a:c7:de:9f:d2:fb:4e:76:e0:a8:78:d7:2c:44:6c:da:71:
43:1e:ee:cd:2f:c4:b3:73:ba:b5:cf:70:95:fd:ab:a1:06:c4:
35:84:0f:b2:77:02:ee:95:cf:9c:3d:73:d1:69:47:54:24:eb:
71:8e:d2:84:b1:fa:fe:36:42:23:08:c7:22:87:5c:cb:49:d5:
5c:88:fe:77:54:8d:4b:14:ff:c2:31:d2:c9:30:f2:85:a5:c3:
d5:ff:48:c0:2c:77:c6:cb:b2:a6:10:1e:f7:24:77:95:71:24:
a1:d6:76:ac:59:fd:de:42:24:9e:28:5d:51:53:c3:f3:44:e4:
b3:33:e3:43:09:18:31:13:a6:52:b2:da:c3:07:e0:0c:52:57:
1f:f3:b4:15:0b:23:e4:b4:19:dd:cc:dd:07:5d:c1:97:b4:b7:
e8:cf:55:9e:84:1f:5d:44:20:14:8e:a0:bf:ca:d0:71:d1:5a:
1e:95:bf:7a:ba:8a:09:49:0d:bd:60:07:39:45:af:7d:21:e7:
2f:30:55:9e:2f:8d:99:b8:42:8c:a5:92:cb:15:dc:39:0c:ca:
9d:27:58:4a:85:1e:ef:c6:88:ca:6c:59:58:94:fd:a7:d4:de:
04:4a:2e:c0:01:c9:aa:e6:a5:54:74:b6:6c:88:2f:a8:75:c6:
ce:74:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:09:05 2025 by rpki-client