Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5TEuXUgIEVald8JS-cfXD4I98Y.roa
File: O5TEuXUgIEVald8JS-cfXD4I98Y.roa (raw, json)
Hash identifier: oQlQDQgzDjUTlHMI+2UtIdm4cHmwyI2r9pu+9diyf+Y=
Subject key identifier: 3B:94:C4:B9:75:20:20:45:5A:95:DF:09:4B:E7:1F:5C:3E:08:F7:C6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018BCE7A8609E4A8C6B4643CA103D75E672E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5TEuXUgIEVald8JS-cfXD4I98Y.roa
Signing time: Tue 14 Nov 2023 15:36:57 +0000
ROA not before: Tue 14 Nov 2023 15:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59679
IP address blocks: 31.148.223.0/24 maxlen: 24
146.120.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:7a:86:09:e4:a8:c6:b4:64:3c:a1:03:d7:5e:67:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 14 15:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b94c4b9752020455a95df094be71f5c3e08f7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:cc:17:a6:54:4a:0a:11:6e:f1:96:3b:0f:
bd:b3:74:32:23:02:a7:5e:86:27:c5:9c:4b:5b:49:
07:a1:74:9f:41:25:ca:2c:7a:f4:d8:17:1c:3e:db:
da:fa:09:fa:f5:a6:ba:15:e9:74:ce:e0:11:1b:4a:
2f:0e:28:6d:ac:f2:ca:02:90:f2:01:f2:17:c2:e9:
fd:2c:d3:38:3f:8f:2f:b7:1c:73:6e:98:00:2c:e6:
20:70:5c:89:3d:b2:92:ce:82:d7:60:42:ac:c9:87:
43:77:c6:49:2f:bf:0c:61:30:fd:7c:b0:5c:6e:43:
20:9a:de:52:dd:05:3f:59:3d:9b:a8:42:12:40:19:
f8:8d:08:22:9e:19:5d:48:5d:f7:15:f8:5d:11:2b:
9c:04:2b:c8:a3:3d:04:7b:ff:b1:cf:ba:75:9e:4b:
40:27:16:57:55:48:36:01:18:7b:07:99:af:43:ab:
69:87:31:bf:07:23:54:23:c8:6a:1a:f4:97:2b:a9:
d6:a8:e1:f0:54:fb:b8:45:aa:3a:e2:a1:36:99:a4:
27:46:46:c8:32:c9:f9:ba:06:40:b2:b8:a1:c5:f4:
2f:b3:f9:29:d9:a0:cc:dc:04:06:71:5e:53:12:df:
b6:2f:6e:5e:22:a7:ec:58:23:7e:71:6a:a3:86:27:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:C4:B9:75:20:20:45:5A:95:DF:09:4B:E7:1F:5C:3E:08:F7:C6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5TEuXUgIEVald8JS-cfXD4I98Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.223.0/24
146.120.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:05:c8:f2:26:f7:d6:a9:d9:d8:56:78:87:44:50:b2:ca:d0:
0f:05:35:f6:56:f1:9a:e1:06:a1:c0:e4:d2:8a:4f:e9:ea:a0:
a7:c7:5c:da:34:81:71:e1:7b:1c:1c:6f:0f:48:ae:d8:b4:dc:
02:13:dc:e5:61:18:b1:bf:75:7f:fe:f2:86:a8:bc:f1:88:da:
17:1d:9f:69:9f:59:8c:30:9b:fe:8d:2f:18:35:d4:66:66:9f:
3b:cd:e4:e8:0f:4b:36:9d:42:0e:f1:36:44:92:f7:a1:57:23:
b9:f4:14:62:4e:b5:bc:40:af:52:2b:31:96:2a:37:ef:7e:6d:
56:73:49:f7:bf:3d:23:ee:e6:8e:5c:ae:a0:72:d4:a4:6c:0c:
f8:1e:f1:79:c4:d4:c6:df:f2:43:38:6e:95:c4:e7:fa:d4:18:
d3:4e:ac:c5:16:59:e2:44:4b:9f:90:aa:ff:a6:d5:d4:a6:f5:
93:1a:9a:41:38:11:4f:bd:f8:f6:e0:56:ba:60:77:a4:e1:d8:
d2:a0:de:0e:ab:8c:26:4c:eb:42:df:03:66:0d:31:3a:f4:43:
d0:b9:45:ba:33:1b:c3:4c:8e:90:ee:a9:dd:29:49:10:e6:86:
88:21:98:6f:1f:87:b2:16:5f:62:c0:c1:74:d3:5b:f6:ba:df:
dd:88:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:15 2025 by rpki-client