Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C9zc0_r4pixhghli5FXC1ZetIMc.roa
File: C9zc0_r4pixhghli5FXC1ZetIMc.roa (raw, json)
Hash identifier: nOJYaHmNdCK9EDquE2W9WXI44q/y4vnuRIP1gQ4WduM=
Subject key identifier: 0B:DC:DC:D3:FA:F8:A6:2C:61:82:19:62:E4:55:C2:D5:97:AD:20:C7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCEF7312DAF6D7F615E4BD0536534
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C9zc0_r4pixhghli5FXC1ZetIMc.roa
Signing time: Thu 02 Jan 2025 05:49:29 +0000
ROA not before: Thu 02 Jan 2025 05:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60075
IP address blocks: 31.148.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ce:f7:31:2d:af:6d:7f:61:5e:4b:d0:53:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bdcdcd3faf8a62c61821962e455c2d597ad20c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:1f:4a:3c:8c:26:ed:a6:84:02:35:9b:d2:
03:50:1b:a8:66:6b:62:25:92:3f:6d:33:07:16:1d:
d9:6a:ec:62:73:56:e2:38:38:47:ac:80:37:f0:69:
0c:d2:9a:23:47:c1:11:20:3b:a8:c7:7e:08:ee:52:
64:42:ef:34:c0:bd:86:6c:b2:35:94:e5:07:9f:6e:
e5:30:0d:24:50:85:69:d0:65:82:f7:e9:c7:c5:54:
7f:77:a8:63:d7:95:c7:44:7d:a0:dc:4d:42:b7:31:
64:3f:1f:6d:e1:35:88:ed:61:16:e5:37:44:13:ba:
e5:e1:74:d0:b8:95:70:1a:81:22:69:2a:7a:71:7c:
7a:f2:52:46:ba:29:0f:69:97:12:a4:9b:de:f2:31:
f5:1f:12:a3:ad:36:16:cf:e8:ac:16:46:e3:34:f5:
e4:ad:59:17:59:36:f4:2d:48:a4:53:d9:17:64:73:
8e:08:ec:58:e9:23:84:45:67:bf:16:73:5b:43:18:
e5:bf:6e:34:70:bf:d4:53:70:0c:b3:30:ec:49:a7:
e6:02:4f:27:7e:f3:11:ae:6b:1b:ba:c0:91:69:3a:
96:38:20:c3:b9:13:26:be:c3:cd:07:d5:a9:bd:61:
f2:08:bb:c2:cc:40:52:eb:0d:66:98:0d:69:07:ba:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:DC:D3:FA:F8:A6:2C:61:82:19:62:E4:55:C2:D5:97:AD:20:C7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C9zc0_r4pixhghli5FXC1ZetIMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:90:05:61:7f:8d:d1:a9:74:7f:1f:49:2d:32:34:74:0d:b9:
31:5a:0a:8a:ca:f3:31:5d:0f:8e:3c:c7:82:a3:92:4d:18:e5:
d5:31:0c:69:d3:d6:1b:a8:3a:b4:fb:62:b3:81:21:30:42:c2:
07:cb:07:87:c8:c9:a9:6c:6f:d0:64:d0:87:8a:51:23:f0:ea:
55:d5:ad:33:26:e4:c1:e1:43:14:91:76:f1:73:63:83:6b:2f:
bf:7f:6a:07:67:5c:73:23:f8:9e:52:d4:58:d5:e0:f8:ac:4d:
c0:fd:c2:ae:25:de:04:c5:79:d0:dc:00:07:16:c0:46:7e:74:
23:71:60:69:1b:4c:aa:a8:00:d6:0e:a0:9f:47:55:4c:94:57:
10:20:cb:0f:84:1f:c8:e5:0b:68:c8:34:13:8b:94:f2:01:2c:
a1:90:6e:ed:a2:23:ce:c6:8a:85:28:39:dd:3a:62:f3:e1:a4:
0e:6b:58:54:74:aa:06:1a:9e:6b:ee:56:b6:1f:9e:a4:30:37:
4c:e7:d2:bf:6d:fb:9d:b4:22:16:06:f8:b3:b1:56:19:63:57:
a8:f8:50:2c:a1:d5:ab:1c:a9:42:00:6e:39:4a:a6:d1:45:5c:
98:93:eb:6d:97:33:ca:d7:94:4a:b3:7b:81:9d:ba:2b:01:fa:
1c:1f:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:29 2025 by rpki-client