Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Lin9dKXdHF3Q2rw5X2BOzFEZxg.roa
File: 5Lin9dKXdHF3Q2rw5X2BOzFEZxg.roa (raw, json)
Hash identifier: I1jQ/DG+kA5v5EeM07Mzj6nkXDnCm19Mt+lc2e13Qo4=
Subject key identifier: E4:B8:A7:F5:D2:97:74:71:77:43:6A:F0:E5:7D:81:3B:31:44:67:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB5C40E859C2BF74361A0943C83E7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Lin9dKXdHF3Q2rw5X2BOzFEZxg.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
93.170.48.0/23 maxlen: 24
93.171.228.0/23 maxlen: 24
93.171.236.0/23 maxlen: 24
95.47.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:c4:0e:85:9c:2b:f7:43:61:a0:94:3c:83:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b8a7f5d297747177436af0e57d813b31446718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:f2:a5:e8:10:87:2d:52:84:58:3a:30:c5:
8e:d1:99:9c:4c:8a:b4:b5:07:ce:c4:bb:91:8e:39:
9e:03:ad:f8:55:28:7b:fb:06:74:9f:0a:a0:d7:12:
8d:fe:dc:0e:f6:4e:3a:e6:28:22:a3:63:ef:59:4a:
3f:b4:5e:1d:5c:1c:34:89:fc:67:b7:2b:d1:e9:ea:
93:a0:96:37:54:50:12:2a:7e:89:ab:80:72:fd:cd:
13:5d:43:a4:98:04:82:25:0d:48:70:e2:6a:5a:9a:
e0:27:cd:ce:32:45:15:9c:2d:7b:97:3f:1e:90:87:
b0:6f:dc:57:8f:d4:f0:05:98:c6:c5:ed:33:3a:37:
74:b4:24:59:14:c2:f1:7c:6b:f4:93:01:8a:6f:e9:
a1:03:80:2b:41:f5:0a:2f:6c:34:71:f6:bc:28:f3:
6f:8f:8f:92:e3:1e:0b:d4:e4:35:08:6f:4b:84:83:
ab:f4:d7:e8:30:cd:c5:74:7e:48:c4:8b:a1:69:2e:
77:50:02:55:0b:b7:6f:06:66:22:91:92:52:d2:cf:
00:d2:93:3a:03:fd:a3:7c:f1:27:b9:78:1d:e4:55:
92:76:45:76:4f:1e:90:d3:10:4e:58:59:db:b2:cc:
c4:75:86:1f:69:d5:ad:7b:14:a4:d3:8a:48:b9:e2:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:A7:F5:D2:97:74:71:77:43:6A:F0:E5:7D:81:3B:31:44:67:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5Lin9dKXdHF3Q2rw5X2BOzFEZxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
93.170.48.0/23
93.171.228.0/23
93.171.236.0/23
95.47.254.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:47:c3:1a:b2:c7:aa:1e:85:cb:de:aa:98:d7:ba:eb:b4:b4:
72:4c:ac:65:5f:8a:93:77:f2:12:91:3d:6c:3a:2d:f5:13:a6:
04:d5:00:6e:29:9f:ab:07:c0:27:70:cf:6d:a9:74:73:4b:02:
0c:d5:39:26:3d:cc:f7:7e:90:e2:66:9e:a7:62:76:47:59:fd:
b3:d7:72:d0:4c:ea:d8:d7:f6:b6:6a:30:30:bb:68:9a:63:76:
f5:f7:b7:a9:1b:6f:ce:a4:0c:e0:df:6c:f8:e7:ca:ef:e1:e7:
64:78:ea:a4:42:6f:28:ac:67:d8:2b:17:08:f2:b6:66:54:a8:
2c:43:21:62:74:d2:f0:6d:83:f4:a0:69:85:d2:dd:a6:32:16:
2c:f0:57:36:e8:e9:08:78:56:bd:3f:96:5b:62:d9:52:61:6a:
2f:7a:f2:4d:83:27:42:1b:63:21:41:6f:7f:4e:1b:21:71:0a:
7b:49:6b:b4:6a:1f:34:91:ca:a7:02:ed:9b:f2:df:52:59:5c:
ec:e6:55:7c:75:7d:7d:89:0c:09:da:66:48:55:bb:27:5b:0d:
c8:c6:a4:94:48:29:29:98:4d:a1:22:95:2c:d5:b5:e9:06:91:
a0:2c:48:83:f6:c2:72:df:23:09:53:13:f0:fc:23:06:de:18:
ee:66:d1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:23 2025 by rpki-client