Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IDVDbPoE5JxN_I3SXJirhUqF7sI.roa
File: IDVDbPoE5JxN_I3SXJirhUqF7sI.roa (raw, json)
Hash identifier: m6Td3MiFlgbgAHBQhzjLTJXKmw/3By9jn2lYBSh9cFY=
Subject key identifier: 20:35:43:6C:FA:04:E4:9C:4D:FC:8D:D2:5C:98:AB:85:4A:85:EE:C2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5954DFAB656E74F67B2AE5C4C11A040
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IDVDbPoE5JxN_I3SXJirhUqF7sI.roa
Signing time: Tue 08 Aug 2023 14:37:59 +0000
ROA not before: Tue 08 Aug 2023 14:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47673
IP address blocks: 31.148.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:95:4d:fa:b6:56:e7:4f:67:b2:ae:5c:4c:11:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2035436cfa04e49c4dfc8dd25c98ab854a85eec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:18:9f:77:94:de:b0:48:30:fb:4c:cf:58:
36:28:04:11:1d:1f:15:e7:03:77:d0:8c:48:da:bf:
1f:a1:92:4c:b7:43:ae:28:8a:f4:0f:ba:44:ff:5d:
44:10:2d:a7:c1:8d:25:2b:42:ef:68:03:bb:6d:0c:
a3:a0:b3:3d:8b:5a:e0:22:09:b0:0f:89:ad:7d:31:
b0:9a:13:98:ca:de:88:c7:7f:d3:06:9c:cd:d8:a3:
55:16:f1:63:4e:52:9f:8d:13:49:c8:6a:8d:5b:e8:
fa:95:b6:bb:3b:4c:27:40:3c:5c:79:6a:d7:e6:5a:
f1:01:48:22:df:6b:64:c7:ce:83:23:58:93:f6:4d:
0e:4a:4b:0e:a3:65:43:62:ec:96:53:c8:44:32:be:
3e:23:da:5e:bf:ae:7d:1e:53:6a:0b:1f:c8:dc:48:
dd:5d:82:31:5c:f5:7b:7f:5e:bb:65:60:d4:42:ac:
c6:34:f3:8e:67:22:ef:bc:e0:be:a0:a5:42:2d:ce:
90:9e:8c:98:8b:d7:63:a9:7a:6a:24:8a:e2:55:52:
ab:2d:26:b2:6f:0d:ae:64:90:48:47:21:40:f4:8c:
ef:b0:ea:51:c0:43:1d:a7:34:b0:b0:5d:4a:fd:0f:
91:1b:e2:fc:55:f6:b9:80:7e:b8:d4:35:08:d7:26:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:43:6C:FA:04:E4:9C:4D:FC:8D:D2:5C:98:AB:85:4A:85:EE:C2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IDVDbPoE5JxN_I3SXJirhUqF7sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.28.0/23
Signature Algorithm: sha256WithRSAEncryption
84:d8:0e:e1:f9:af:22:1b:cf:16:18:48:b3:e7:0f:7e:ae:18:
98:1e:78:bf:cd:f2:74:10:64:0f:33:87:ad:74:98:b1:b7:b1:
03:c0:71:1b:cd:55:ca:9b:fe:b1:0b:27:23:44:e7:23:a7:1e:
4b:c9:0a:e8:b8:29:3a:bf:fb:4f:c3:25:82:a7:80:4e:28:f7:
ea:75:e0:6a:9b:e0:5f:54:7a:74:f1:ea:92:7b:4e:f6:8b:d0:
be:81:b8:7a:98:9b:68:65:00:fa:40:78:2f:71:64:af:99:77:
a5:a6:b0:8f:b1:48:36:82:d2:1f:72:5a:fa:6c:fb:a0:e1:19:
7d:16:0b:c0:d6:74:30:c3:fe:4c:75:5d:94:1b:51:eb:f3:38:
3d:3b:bc:2f:ba:d4:9a:fe:87:81:79:de:f4:37:16:c4:bf:cb:
43:6d:75:cb:f5:39:4e:44:c2:94:85:64:05:87:1a:08:39:cd:
4d:79:9e:3e:bc:04:b7:7b:bf:6c:76:bb:a8:af:01:06:2e:da:
57:91:2e:46:e2:01:d8:c8:f5:ea:77:e6:66:88:9a:d3:a7:0a:
ed:fb:49:83:c4:50:04:dc:a9:ed:c7:2e:da:96:82:80:f6:c6:
89:a7:b2:41:c5:ea:20:59:c4:e9:58:10:94:39:93:ac:83:a1:
e1:40:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:28 2025 by rpki-client