Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MLYRErXTg3COVAohV0EBfCmbeYI.roa
File: MLYRErXTg3COVAohV0EBfCmbeYI.roa (raw, json)
Hash identifier: /eQToLhsqQDMVGaY+wsJG/cYc51SMdt8UTRrD6QHYm0=
Subject key identifier: 30:B6:11:12:B5:D3:83:70:8E:54:0A:21:57:41:01:7C:29:9B:79:82
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF0CC35E4E40A4789F603D6590E84
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MLYRErXTg3COVAohV0EBfCmbeYI.roa
Signing time: Thu 02 Jan 2025 05:49:37 +0000
ROA not before: Thu 02 Jan 2025 05:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204408
IP address blocks: 31.148.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f0:cc:35:e4:e4:0a:47:89:f6:03:d6:59:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30b61112b5d383708e540a215741017c299b7982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:e0:33:42:41:b9:71:71:fd:4f:94:65:aa:
cd:17:44:80:fa:01:5a:32:09:d4:c9:d0:62:1c:8b:
6a:f4:0b:62:7f:3a:26:00:68:05:40:40:60:59:61:
c7:e5:17:1a:8d:bc:80:e8:15:87:b9:57:92:51:55:
ab:e3:5c:f7:26:18:c5:8c:0a:98:13:13:ab:60:1b:
1d:f6:b5:af:55:76:d4:18:5d:1b:05:8e:82:bf:3b:
ca:0e:1f:08:68:bf:e4:eb:cc:7f:34:0d:88:41:e2:
0e:cb:5c:eb:8b:d3:c1:1a:0c:a8:10:7d:0f:14:1e:
cc:cd:d7:a5:0a:2d:ea:cf:7b:99:a8:4d:1a:45:ad:
78:b7:b0:3f:de:4a:2f:ff:94:f9:6f:13:a5:fd:28:
e9:85:ae:79:1f:ec:63:39:0c:70:90:1e:cd:10:82:
92:3a:58:44:39:63:68:61:dd:d2:88:60:58:86:26:
66:b8:11:d6:ee:14:22:36:91:65:cc:ec:4a:5b:9e:
b1:59:d0:91:4b:1c:a4:4a:0a:31:d1:8a:89:5d:3d:
5f:79:98:5e:86:c9:57:43:63:6c:71:58:11:01:5b:
19:38:9e:94:d1:d3:c2:40:fc:0a:20:5a:8d:6f:a1:
66:a7:d6:22:92:69:82:4f:40:e1:7e:bb:4f:e9:cd:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B6:11:12:B5:D3:83:70:8E:54:0A:21:57:41:01:7C:29:9B:79:82
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MLYRErXTg3COVAohV0EBfCmbeYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1e:12:05:82:34:14:2a:23:2a:77:49:e3:2f:b1:af:91:1e:
7d:6b:72:87:dd:7a:b7:71:58:29:70:4b:12:d9:7e:1e:63:71:
13:cd:10:12:c5:14:fa:72:ba:ae:8d:09:0b:31:a5:95:85:de:
40:10:27:9e:b2:81:7e:b7:12:b7:f6:91:37:f5:95:ac:09:ef:
dc:a6:bf:90:a6:3b:87:e2:bb:29:cd:30:67:59:43:3f:67:c3:
67:7a:24:bd:13:f6:c1:23:92:e2:ba:9e:41:49:7b:48:e4:77:
3a:08:e7:22:91:11:ee:0a:0d:19:d1:fc:0c:24:56:60:a5:f6:
14:72:0a:79:ca:e0:9a:0e:e3:2a:53:4c:38:11:40:b2:0e:7a:
4e:2f:c0:52:1e:e0:c4:73:1d:44:d6:d0:4f:65:f4:c0:14:1d:
e8:40:63:66:aa:34:9f:03:f0:64:6e:ca:55:75:26:d3:25:7f:
51:0e:37:c2:f7:a7:31:ed:55:ed:3d:ae:c1:df:ea:f2:9f:52:
72:76:4b:84:29:4e:47:75:09:18:30:de:7d:c1:6e:26:1e:fa:
20:31:6d:53:5b:f5:39:25:45:6d:f0:e2:3d:7e:b2:46:9e:1d:
c7:63:8e:68:54:ff:11:6d:79:8b:1b:d2:8c:1c:b8:a8:23:70:
e3:4c:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:05 2025 by rpki-client