Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CL_AmGcz_Rh0hS_br2Hia1gHxJ0.roa
File: CL_AmGcz_Rh0hS_br2Hia1gHxJ0.roa (raw, json)
Hash identifier: bau1R6QUGtqFyAPHWzaTXCzpw36UvQ0mbO5ccZ5gyI4=
Subject key identifier: 08:BF:C0:98:67:33:FD:18:74:85:2F:DB:AF:61:E2:6B:58:07:C4:9D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C2634D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CL_AmGcz_Rh0hS_br2Hia1gHxJ0.roa
Signing time: Sat 01 Jan 2022 16:08:47 +0000
ROA not before: Sat 01 Jan 2022 16:08:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51685
IP address blocks: 31.148.136.0/23 maxlen: 23
31.148.138.0/23 maxlen: 23
31.148.136.0/22 maxlen: 22
93.170.232.0/22 maxlen: 22
93.170.232.0/23 maxlen: 23
93.170.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667050829 (0x27c2634d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08bfc0986733fd1874852fdbaf61e26b5807c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:6f:35:24:fa:de:6b:f0:81:05:60:dd:d6:
cf:02:f8:c6:16:cf:ea:1e:23:81:b3:e6:ef:f6:35:
f1:40:73:f9:de:2f:cd:1d:b4:d3:fd:b7:27:c0:95:
cc:76:70:05:79:5b:2b:08:6f:4e:6f:ac:9b:2c:5c:
24:bf:aa:50:0d:e2:e5:fb:7c:1b:df:30:08:f1:79:
aa:13:a9:4d:56:31:6b:eb:52:5d:8b:45:d4:a0:d5:
00:eb:a1:12:dc:d6:b9:5c:fe:62:e7:35:e2:58:55:
bc:e4:33:c2:f2:84:06:36:38:95:7c:71:8e:fa:25:
db:69:4b:70:30:36:b9:5d:4f:74:f8:a1:4a:49:75:
57:98:42:82:22:b7:e5:3e:a9:f7:eb:86:92:f6:7d:
5a:e6:3a:af:74:f0:73:b2:bc:cb:61:bf:3d:c2:68:
a5:51:7a:2a:5e:d2:9c:a8:ad:5e:9d:84:3c:bc:ab:
14:b9:ac:12:3d:c8:47:ee:d3:30:5a:50:69:df:54:
d9:77:e7:33:9e:97:b5:13:fd:5c:bf:6b:cb:a0:86:
72:5c:00:13:89:4d:95:aa:3c:f3:db:af:11:9d:09:
51:9a:82:8a:59:25:9c:0b:3b:06:ec:a3:5d:26:87:
99:7c:2b:fb:b6:46:c4:ab:f2:c4:26:61:a2:85:dc:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:C0:98:67:33:FD:18:74:85:2F:DB:AF:61:E2:6B:58:07:C4:9D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CL_AmGcz_Rh0hS_br2Hia1gHxJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.136.0/22
93.170.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:02:54:99:1a:b3:02:09:88:ef:ae:00:ad:0d:4f:5d:48:a1:
b4:cf:93:f3:6d:99:b6:58:89:0a:4b:6d:28:3d:d8:fb:13:c2:
e5:fe:c3:1e:c6:7f:90:c1:d8:a1:f5:45:f4:31:d0:2c:d9:1d:
6c:27:23:76:5f:6c:33:a2:32:89:b1:aa:a8:66:a1:ac:0a:ea:
3b:13:d3:dd:71:46:83:08:00:b3:79:5f:1a:26:6d:65:2c:80:
3c:d7:59:d3:1b:a0:d0:26:4a:1d:28:e1:1b:dd:22:c8:c2:c6:
c5:5f:86:74:44:de:f0:cd:83:a4:cd:a5:5e:c6:8c:f6:8a:99:
46:0b:a7:d2:25:c9:3c:aa:1f:7d:10:32:c5:1d:48:1e:de:ed:
ad:97:2c:82:18:da:f3:b0:e1:4f:67:8c:09:02:a0:2d:58:1f:
5a:29:fc:f1:ad:d2:14:ea:fb:aa:cc:3c:2d:ff:6f:8a:44:68:
8b:32:61:c1:39:6d:e6:44:b3:20:da:22:9a:4a:9c:9c:d4:5f:
04:a6:7d:25:b3:52:01:ac:63:3b:8b:fa:30:75:5c:dd:f0:03:
30:4c:73:dc:0a:7d:42:a1:c4:65:5c:3c:b6:9c:9d:6b:3c:02:
00:00:4e:ba:36:d0:33:eb:10:d8:da:c7:60:ad:a5:8a:1d:67:
a0:18:8f:e9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEJ8JjTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDhiZmMwOTg2NzMz
ZmQxODc0ODUyZmRiYWY2MWUyNmI1ODA3YzQ5ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDsbzUk+t5r8IEFYN3WzwL4xhbP6h4jgbPm7/Y18UBz+d4v
zR200/23J8CVzHZwBXlbKwhvTm+smyxcJL+qUA3i5ft8G98wCPF5qhOpTVYxa+tS
XYtF1KDVAOuhEtzWuVz+Yuc14lhVvOQzwvKEBjY4lXxxjvol22lLcDA2uV1PdPih
Skl1V5hCgiK35T6p9+uGkvZ9WuY6r3Twc7K8y2G/PcJopVF6Kl7SnKitXp2EPLyr
FLmsEj3IR+7TMFpQad9U2XfnM56XtRP9XL9ry6CGclwAE4lNlao889uvEZ0JUZqC
ilklnAs7BuyjXSaHmXwr+7ZGxKvyxCZhooXcvzUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQIv8CYZzP9GHSFL9uvYeJrWAfEnTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L0NMX0FtR2N6X1JoMGhTX2JyMkhpYTFnSHhKMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAh+UiAMEAl2q6DANBgkqhkiG9w0B
AQsFAAOCAQEALAJUmRqzAgmI764ArQ1PXUihtM+T822ZtliJCkttKD3Y+xPC5f7D
HsZ/kMHYofVF9DHQLNkdbCcjdl9sM6IyibGqqGahrArqOxPT3XFGgwgAs3lfGiZt
ZSyAPNdZ0xug0CZKHSjhG90iyMLGxV+GdETe8M2DpM2lXsaM9oqZRgun0iXJPKof
fRAyxR1IHt7trZcsghja87DhT2eMCQKgLVgfWin88a3SFOr7qsw8Lf9vikRoizJh
wTlt5kSzINoimkqcnNRfBKZ9JbNSAaxjO4v6MHVc3fADMExz3Ap9QqHEZVw8tpyd
azwCAABOujbQM+sQ2NrHYK2lih1noBiP6Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:09 2025 by rpki-client