Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OMMMN5s5l5a2D_2zlnMfHU4D4R4.roa
File: OMMMN5s5l5a2D_2zlnMfHU4D4R4.roa (raw, json)
Hash identifier: loPDmQ81Sm63qAzh96b2yXrNo9dcwceb4F2GbgFpZrQ=
Subject key identifier: 38:C3:0C:37:9B:39:97:96:B6:0F:FD:B3:96:73:1F:1D:4E:03:E1:1E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2A0CBF78
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OMMMN5s5l5a2D_2zlnMfHU4D4R4.roa
Signing time: Wed 01 Jun 2022 09:05:23 +0000
ROA not before: Wed 01 Jun 2022 09:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59475
IP address blocks: 31.148.26.0/23 maxlen: 24
92.38.0.0/23 maxlen: 24
95.46.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705478520 (0x2a0cbf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 09:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38c30c379b399796b60ffdb396731f1d4e03e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:fe:05:8e:84:4e:ce:db:06:53:fb:81:9d:
dc:51:4c:92:69:a4:d7:68:a2:31:b9:dc:23:29:e2:
30:75:af:73:92:7b:18:c3:7a:25:b5:f1:ff:9e:b7:
75:85:bf:c4:8b:a8:fb:e8:9c:95:89:43:83:5e:d4:
23:8b:ff:ed:95:4a:48:5e:f6:93:1e:3c:5e:f3:73:
e6:5d:3e:13:8c:aa:ce:26:a9:d1:e1:6b:76:97:0e:
80:87:ed:cd:3d:d5:8c:76:12:e4:f3:b9:3f:3b:82:
a4:c9:2f:cc:4b:fb:b4:5d:ca:44:9c:bb:50:92:27:
38:6a:67:6c:bf:fd:ef:8f:9e:30:6c:1e:f3:34:b7:
da:4c:6b:39:20:65:a5:5d:17:fb:10:b5:21:f9:3b:
c9:de:20:d1:a2:dd:21:91:8d:5b:b7:0f:f9:cb:22:
aa:28:d0:2b:a3:ba:c0:94:56:cc:a6:ef:6e:b4:e8:
30:9e:db:56:53:5c:1c:66:2d:75:00:60:cb:28:33:
0b:4c:75:a8:be:db:8c:5d:3d:5f:37:dd:ac:3a:77:
84:6b:be:73:4c:31:46:7b:f6:95:05:97:c8:22:d9:
d3:7d:77:49:e9:bf:1e:ae:d8:f2:1a:33:4a:d7:f4:
4f:7b:5d:ce:5b:55:df:64:f6:7c:1b:f6:ba:60:31:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C3:0C:37:9B:39:97:96:B6:0F:FD:B3:96:73:1F:1D:4E:03:E1:1E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/OMMMN5s5l5a2D_2zlnMfHU4D4R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.26.0/23
92.38.0.0/23
95.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
45:7d:55:f0:7d:07:03:22:cb:f1:08:c1:48:a6:18:3c:53:8b:
f2:b8:22:3d:13:cc:f4:a3:50:e2:b1:33:c1:92:11:44:d9:3b:
16:41:83:d3:19:65:db:d7:6f:ee:03:8f:12:13:52:dd:5d:53:
e1:0b:5c:39:be:bd:d3:fe:da:5d:b1:dd:76:a5:c2:b3:fa:d5:
04:1d:7e:04:5a:d6:bb:74:9d:49:6e:fd:71:f3:77:f3:e3:d1:
36:a0:fc:a6:e7:fb:d4:c0:92:65:b9:a4:e4:21:12:80:e3:24:
0d:0c:62:c6:46:a2:73:29:89:27:eb:1d:65:42:a5:44:87:16:
bd:de:94:76:e6:4a:7f:3d:fb:95:64:b4:aa:8f:2f:52:cf:04:
d2:87:30:58:87:2f:b0:31:4e:63:b1:38:50:3b:95:f8:1f:95:
4c:dd:6b:b7:8d:bd:ba:1c:2a:68:ed:51:53:cc:11:1d:c0:7d:
0d:26:3a:b3:cf:ca:f5:e1:7e:4f:7e:57:89:39:55:9f:c6:a6:
6a:36:e8:04:ce:f8:44:ce:28:27:52:64:ca:95:25:77:1e:ac:
49:87:71:3f:12:60:ee:9f:98:62:53:b8:9a:f5:e3:b4:34:c6:
cf:09:53:6d:33:bb:9d:bf:48:8c:d3:8a:1b:4f:d6:2a:11:7a:
77:6f:96:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:03 2025 by rpki-client