Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bCOUmkDP4Xe_L7CdfDOZ7fP5Ns.roa
File: 7bCOUmkDP4Xe_L7CdfDOZ7fP5Ns.roa (raw, json)
Hash identifier: hTQJW9e3sCioCf7MwjiAHCLf7+DltJhVx5PQizmWiYo=
Subject key identifier: ED:B0:8E:52:69:03:3F:85:DE:FC:BE:C2:75:F0:CE:67:B7:CF:E4:DB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01958FC77EA9067B04219D4672AB51E60596
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bCOUmkDP4Xe_L7CdfDOZ7fP5Ns.roa
Signing time: Thu 13 Mar 2025 13:52:50 +0000
ROA not before: Thu 13 Mar 2025 13:52:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56361
IP address blocks: 31.148.40.0/21 maxlen: 24
31.148.52.0/22 maxlen: 24
31.148.56.0/21 maxlen: 24
31.148.104.0/21 maxlen: 24
31.148.112.0/21 maxlen: 24
31.148.192.0/22 maxlen: 24
93.170.192.0/21 maxlen: 24
93.171.34.0/23 maxlen: 24
93.171.36.0/22 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
95.46.172.0/22 maxlen: 24
146.158.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:c7:7e:a9:06:7b:04:21:9d:46:72:ab:51:e6:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 13 13:52:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edb08e5269033f85defcbec275f0ce67b7cfe4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:88:c4:86:b4:69:5d:86:b8:e3:34:fe:af:
51:cb:c2:6a:54:ee:68:bb:84:29:29:b1:8a:cc:60:
67:85:42:0f:8b:a1:a9:8d:79:e8:c0:aa:d5:17:c8:
43:b9:ab:d4:cd:bd:31:f4:d5:cc:f4:c6:08:17:10:
7c:b8:84:17:c2:ae:2e:6f:91:e0:93:cf:6b:ae:02:
d1:42:02:83:a7:3b:f1:e7:74:3b:99:a3:56:ed:56:
9b:41:89:39:35:ba:ba:71:02:ed:16:32:82:fe:3a:
e4:1d:a1:bc:ca:a0:9c:89:9d:54:7a:7a:cc:32:9a:
55:de:95:54:d5:2b:f7:dc:ad:8d:ba:a6:50:9f:e0:
95:fc:f1:a5:aa:46:16:a6:6e:d3:69:8a:8c:ba:a0:
da:79:78:36:af:30:43:52:af:8c:4f:63:fe:44:1c:
a5:a4:4c:82:6f:20:db:30:e2:12:f0:14:8b:1c:d8:
e1:80:fe:74:8c:9d:63:01:24:a3:b4:f4:db:3a:7f:
88:06:97:e7:75:a5:ad:91:4e:7c:85:a1:59:f4:5a:
81:61:be:35:45:fd:cd:77:73:bb:d8:ae:3c:ee:6a:
6a:27:11:a6:fa:23:56:33:95:cf:df:bc:37:bc:36:
1a:34:fc:b6:3c:98:07:a1:28:d2:ee:2a:15:f5:57:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:8E:52:69:03:3F:85:DE:FC:BE:C2:75:F0:CE:67:B7:CF:E4:DB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7bCOUmkDP4Xe_L7CdfDOZ7fP5Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.40.0/21
31.148.52.0-31.148.63.255
31.148.104.0-31.148.119.255
31.148.192.0/22
93.170.192.0/21
93.171.34.0-93.171.39.255
95.46.166.0-95.46.175.255
146.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
80:57:f3:ac:e5:5b:76:c1:64:e9:86:0d:fc:67:ac:9f:19:01:
28:2e:03:50:e0:72:57:f8:7b:75:15:d2:60:c8:0a:d0:8d:39:
c5:c4:41:a9:d9:cb:f3:13:4d:db:28:00:41:a0:d9:d0:30:f8:
84:99:b9:e9:dd:2c:07:af:ec:ed:86:ac:a3:96:f4:15:ac:38:
72:74:a5:66:f6:d7:e3:02:24:2d:28:bd:2a:2e:2d:88:ec:96:
01:c2:4b:4a:6a:8f:63:d5:24:96:46:fd:97:81:fd:b3:e0:2e:
50:bb:d7:40:8a:8b:70:30:4b:ea:36:78:0b:ed:20:38:5f:18:
8b:9f:78:04:50:07:2b:d5:04:5b:cd:eb:54:35:b5:20:6e:c3:
0f:66:a8:2d:e2:f9:59:69:f3:52:3d:35:00:32:a4:6b:5c:d2:
19:95:6d:87:af:2a:45:8a:11:1d:39:dd:33:9a:26:0b:9f:7b:
17:8e:4f:2e:19:ba:37:f7:a9:a6:5b:12:08:29:15:00:d3:0d:
63:ac:9f:fa:1e:1a:f6:2a:14:df:4c:ac:6e:35:07:89:23:92:
e9:42:05:2f:9b:ca:ab:3a:31:ba:f5:7d:7e:c1:3d:dc:28:3a:
e8:69:d3:0e:eb:41:e7:a8:98:4b:94:10:76:18:c0:42:4d:d3:
3f:2e:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:13 2025 by rpki-client