Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BJ0immyfSloCoC3XX_4-Ytix2uk.roa
File: BJ0immyfSloCoC3XX_4-Ytix2uk.roa (raw, json)
Hash identifier: SNmV3HzYeXJhPNwZ+7NnmKUrq/t+AdOCPeBXEY8yXTI=
Subject key identifier: 04:9D:22:9A:6C:9F:4A:5A:02:A0:2D:D7:5F:FE:3E:62:D8:B1:DA:E9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA391F8E5A984F684A1310461D847
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BJ0immyfSloCoC3XX_4-Ytix2uk.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44343
IP address blocks: 31.148.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:91:f8:e5:a9:84:f6:84:a1:31:04:61:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=049d229a6c9f4a5a02a02dd75ffe3e62d8b1dae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:34:8a:ab:3d:92:2e:b1:6a:e2:0f:7a:5c:
6c:4b:50:5a:24:08:c5:72:e2:f0:04:c3:07:f0:12:
02:4a:0b:08:75:c3:09:82:a7:50:6c:09:40:8f:d9:
c6:e5:91:58:a2:d2:5c:25:5c:2a:3a:37:34:2a:c3:
39:0c:6c:09:cb:29:8e:ee:39:dd:45:07:85:20:6f:
6f:2c:ef:6b:51:25:60:d6:88:fa:8b:c5:34:76:01:
f7:c0:d0:e0:12:5a:1b:ec:9c:fa:bf:cd:d4:f6:bd:
2a:ef:9f:2e:cb:83:73:f0:2a:85:a0:e7:b3:77:61:
11:9d:ab:f7:b5:e8:3b:8f:bc:d5:c5:61:5c:1a:86:
7e:17:f9:8e:e1:43:28:71:f0:0e:c0:65:f6:1a:a1:
a8:85:03:bf:3d:95:90:c5:f7:8c:6f:3c:9d:ca:e0:
d0:42:ee:5b:30:a1:a6:87:28:a7:5f:eb:0a:55:01:
b0:a5:49:98:80:04:4e:9f:a0:3f:61:61:27:45:f0:
0e:da:24:46:71:49:ef:06:36:04:c5:e7:0a:5a:5c:
d9:f6:5b:ef:19:b2:5d:f9:bb:66:7d:ea:9b:4e:dd:
ae:4a:31:c3:73:a6:80:ed:c2:4f:69:47:e8:cc:de:
3f:13:28:3e:e8:5f:71:b2:2e:d2:d9:34:81:07:ae:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9D:22:9A:6C:9F:4A:5A:02:A0:2D:D7:5F:FE:3E:62:D8:B1:DA:E9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BJ0immyfSloCoC3XX_4-Ytix2uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bd:de:5c:28:9d:51:1c:67:64:d4:27:11:68:77:d0:e2:11:
41:6b:4c:6d:5d:b0:4b:11:3f:38:e6:f1:78:bc:45:25:4a:bc:
18:0a:f9:b4:38:da:39:a6:31:9f:30:67:f7:91:20:42:d7:a2:
e9:3f:51:9d:2d:10:42:43:58:56:f4:a3:f8:c5:21:a1:f8:a9:
c7:10:92:5d:53:3e:97:1f:2b:e2:07:0d:b5:a9:96:54:37:0e:
4c:6f:dd:e0:4b:b8:76:c8:4f:dc:84:76:1b:40:44:88:53:d8:
94:bd:c6:76:0a:67:8f:86:8d:28:08:3d:f7:45:fe:96:9f:e2:
20:f7:c6:9d:71:fe:4d:f8:cb:84:3c:79:55:09:50:4f:32:8f:
de:b4:23:fb:2b:08:19:f9:10:ff:95:97:3a:ad:79:73:00:a1:
9a:b9:7d:d7:52:2d:85:4c:68:7c:de:35:31:e6:00:bf:09:13:
dd:cf:1c:0b:89:ba:5f:1b:1b:80:37:1c:da:75:b0:81:9a:bb:
a5:44:6e:61:a5:19:4a:14:9b:3b:9e:15:1f:28:af:e0:a9:f5:
58:44:37:fe:ec:47:b1:f2:9b:82:b1:92:64:49:a8:9e:1e:dc:
19:c4:14:82:b0:fd:d8:c3:1e:78:18:a0:93:ee:71:ee:7d:f3:
38:d1:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:41 2025 by rpki-client