Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6JrcHvECDwj4ehQmKCnlB8YqISI.roa
File: 6JrcHvECDwj4ehQmKCnlB8YqISI.roa (raw, json)
Hash identifier: GC2yel/l22Os/50iSMMB9X+CTw4utXmW07bhyl/QdLs=
Subject key identifier: E8:9A:DC:1E:F1:02:0F:08:F8:7A:14:26:28:29:E5:07:C6:2A:21:22
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A11646435991F2EB63DFA175FB97F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6JrcHvECDwj4ehQmKCnlB8YqISI.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51841
IP address blocks: 31.148.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:11:64:64:35:99:1f:2e:b6:3d:fa:17:5f:b9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89adc1ef1020f08f87a14262829e507c62a2122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5e:16:a9:55:a9:96:bc:07:ed:93:4d:c8:2f:
5f:12:df:87:e8:c9:a5:ff:e5:88:f7:38:46:50:ab:
58:0f:dc:a7:c5:e3:be:4e:28:75:55:99:06:3e:23:
4a:39:23:c7:f7:8b:bd:06:3d:07:ea:0a:45:f6:3c:
50:09:e3:8a:23:ca:19:83:87:3d:21:a5:d7:e1:bb:
56:83:1e:8c:f5:aa:8d:5d:16:1d:93:07:4e:26:90:
f5:fd:52:e7:da:33:c3:33:0a:6c:79:5a:dd:d4:60:
61:ee:3e:d2:5f:42:0b:20:cc:9a:bd:1e:12:d1:7d:
62:75:89:cc:ab:80:e6:5a:82:0d:7d:47:49:c4:e2:
68:bb:f9:e0:3b:b3:bf:01:db:19:05:81:59:ef:08:
76:1d:37:4f:21:40:fb:5d:5b:c4:d1:38:2e:2d:01:
a2:3a:7c:4c:87:33:88:62:1e:c4:e0:7e:ca:1f:4b:
0a:b9:d2:86:6b:42:54:61:fa:15:bc:7b:0f:89:81:
a7:0e:91:73:e8:84:3e:b7:4d:04:67:0f:9c:bc:bd:
d8:b6:7b:b3:51:7b:48:e9:b3:98:16:35:d7:c7:17:
49:c5:1a:a7:df:b2:9c:58:b6:1a:96:5d:18:9d:d6:
af:d4:0b:0d:25:69:80:6a:84:14:58:96:b5:6c:ec:
0e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:DC:1E:F1:02:0F:08:F8:7A:14:26:28:29:E5:07:C6:2A:21:22
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6JrcHvECDwj4ehQmKCnlB8YqISI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b6:80:42:61:49:d9:75:06:08:3e:3d:91:85:b2:95:f0:6a:
aa:fa:9e:6b:0d:69:0f:ef:24:d6:d8:e8:29:4e:bc:b1:b0:65:
95:f2:a9:8e:74:c2:75:7d:ac:f1:0f:e6:8c:cd:b8:0b:49:6d:
50:10:01:97:39:34:7d:0c:75:57:1d:5b:fb:a5:47:c2:9b:81:
17:bc:cc:a8:60:3c:84:2b:51:37:4b:46:29:23:d6:9b:75:54:
1d:2b:77:68:82:43:2a:1c:d7:d3:04:65:e5:67:ae:4d:50:e6:
da:77:91:b6:6f:11:a0:dd:c9:b5:4d:94:7d:cf:4e:0c:a5:5d:
c8:1e:0c:5b:0b:d9:a8:65:08:a4:50:40:d2:99:99:25:0b:31:
24:fb:43:1b:7f:b6:0b:69:55:b8:36:41:35:26:b3:4c:19:b2:
96:8b:df:89:2e:57:35:aa:8d:db:cf:b0:27:46:b9:9d:b6:a1:
fc:99:8b:a0:b3:19:11:04:c3:74:fe:b2:5a:e9:60:1b:f2:ab:
43:09:45:ed:8c:1d:5d:a6:b3:aa:15:b7:21:44:d1:1f:de:8a:
30:bb:a8:c0:79:1f:be:64:f5:7c:be:8e:26:d7:f0:20:69:c0:
e2:e4:79:d5:11:fd:92:ba:1e:65:c0:49:fa:0a:30:9f:ec:a7:
a2:57:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:57 2025 by rpki-client