Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5LztwkovjW5wo74XQlIIlmR945I.roa
File: 5LztwkovjW5wo74XQlIIlmR945I.roa (raw, json)
Hash identifier: kTVd9s4VQWGH/ShnBwK101HCzJHv8hz/GaZHwgNKuWw=
Subject key identifier: E4:BC:ED:C2:4A:2F:8D:6E:70:A3:BE:17:42:52:08:96:64:7D:E3:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570954309F6842286E68AFA2FDA7C84A3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5LztwkovjW5wo74XQlIIlmR945I.roa
Signing time: Mon 02 Jan 2023 03:45:08 +0000
ROA not before: Mon 02 Jan 2023 03:45:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49491
IP address blocks: 31.148.134.0/23 maxlen: 23
31.148.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:43:09:f6:84:22:86:e6:8a:fa:2f:da:7c:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4bcedc24a2f8d6e70a3be1742520896647de392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:45:aa:d0:ab:a6:ff:63:ae:1b:fa:55:d9:df:
04:36:ff:52:b0:3f:53:88:f5:33:31:3e:07:43:5b:
04:e8:93:d0:e2:fe:de:bf:e0:8b:ec:b4:0a:23:d3:
34:7a:c1:f8:9e:54:75:9d:a6:37:43:55:19:57:b1:
98:a5:1b:52:3c:be:ed:af:a2:80:e3:1c:63:0f:82:
ca:60:5d:d0:4f:41:ec:fb:05:9d:b9:cb:34:77:30:
17:6d:ea:98:4b:76:77:07:54:8f:dc:5f:ff:b2:ca:
da:02:f9:5a:2f:63:6b:0e:5d:66:53:aa:1e:08:a2:
36:b6:59:fb:a1:8b:9b:8b:02:f0:4a:b7:f4:66:72:
df:4b:7b:4a:22:29:9b:d5:45:90:64:21:3d:ee:5a:
67:3b:c5:33:fd:0f:9f:dc:af:b4:97:79:55:9c:5e:
7a:4c:8e:bc:32:7b:65:8b:43:9c:7e:06:11:a5:78:
00:df:c2:77:e6:d0:55:ec:6a:d8:1a:24:7f:5c:20:
82:d4:26:7d:be:e8:57:cb:8d:6c:b7:ff:0d:81:38:
c9:a9:f5:6f:f6:20:39:e6:24:5f:02:8f:fa:19:9c:
3d:75:e7:ed:8c:d2:6d:ba:33:b8:69:d3:2b:43:a6:
3e:e1:b7:fb:3b:4f:2d:fc:9b:af:9b:8d:53:a9:71:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:ED:C2:4A:2F:8D:6E:70:A3:BE:17:42:52:08:96:64:7D:E3:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5LztwkovjW5wo74XQlIIlmR945I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.134.0/23
31.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
96:f6:08:3c:df:14:a0:de:0b:32:05:8c:35:54:cc:56:9d:2a:
ea:c9:ff:60:b6:98:ef:a6:62:3f:57:fa:c1:a2:f9:00:76:55:
af:17:86:50:eb:a0:f5:96:f5:56:a0:48:65:dc:e8:1b:0f:6b:
9b:3c:e6:d1:bd:11:2d:26:05:fd:74:e2:c6:bf:e0:83:79:21:
89:fb:e1:29:e5:c5:cd:03:01:e0:9c:73:b4:d2:46:fd:0c:fe:
78:1a:1a:6b:2c:35:c4:bf:69:9a:8c:c6:9c:e9:89:84:b3:47:
a6:f5:6a:44:49:d3:8d:2d:3b:49:e3:7b:76:d7:0d:bb:89:33:
f7:5c:aa:de:26:f0:7b:ab:5e:1b:35:1d:32:c6:8b:b3:57:93:
a5:28:d9:ee:66:d8:bb:e6:c8:1d:81:70:10:0c:88:bd:84:d9:
78:1f:c3:c8:26:e6:ce:ca:ba:b0:4a:f2:30:91:6b:dd:fb:15:
1f:4c:9f:1a:61:7a:47:0a:eb:1a:ce:58:9d:d4:81:eb:a8:c6:
44:6a:f0:fd:94:48:e4:3d:95:26:1d:3e:80:99:1b:e7:a1:66:
0a:cc:d0:41:47:cd:14:1d:34:8f:94:27:c6:9c:33:58:a4:d6:
ce:78:93:f1:28:6c:c1:5a:20:df:24:39:64:9b:7f:29:1a:06:
a7:67:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:53 2025 by rpki-client