Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PQcQ7pHZ52aYaOOinqFJ7_qKfSE.roa
File: PQcQ7pHZ52aYaOOinqFJ7_qKfSE.roa (raw, json)
Hash identifier: 9f3g4vB0iY445VRYWI7Z3QQ8H0GBXlWA5IzjKfvVznY=
Subject key identifier: 3D:07:10:EE:91:D9:E7:66:98:68:E3:A2:9E:A1:49:EF:FA:8A:7D:21
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A1258518FBA812DC3DEE57D3F6A63
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PQcQ7pHZ52aYaOOinqFJ7_qKfSE.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56361
IP address blocks: 95.46.172.0/22 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
31.148.40.0/21 maxlen: 24
31.148.56.0/21 maxlen: 24
31.148.52.0/22 maxlen: 24
31.148.192.0/22 maxlen: 24
31.148.104.0/21 maxlen: 24
93.171.36.0/22 maxlen: 24
93.171.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:12:58:51:8f:ba:81:2d:c3:de:e5:7d:3f:6a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d0710ee91d9e7669868e3a29ea149effa8a7d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:4e:b8:6a:f2:ef:9a:b8:0e:2e:c3:5d:f3:
4c:16:63:b2:0f:8d:08:71:99:c4:85:1c:3c:aa:54:
57:fd:24:c8:ef:51:d4:66:a9:bd:16:4d:af:5a:24:
0d:1d:09:28:06:aa:5c:fa:07:88:b8:46:d7:63:38:
28:a8:21:48:74:2d:2c:11:32:70:f7:c4:3e:54:d6:
86:af:3a:33:b2:30:30:30:1c:d9:78:84:f6:cd:7c:
d1:3d:9b:62:08:0e:b3:4a:3f:61:ec:5e:73:63:f2:
6f:b7:f5:e7:62:5d:1a:e2:73:8b:45:b3:79:65:57:
91:8d:1d:f1:68:69:7f:b5:75:b4:1a:01:c1:a2:c1:
4a:a5:0a:00:21:83:e9:5d:ef:5f:68:44:85:99:64:
1d:22:d7:29:7c:df:1b:97:b5:98:4c:48:88:f1:0d:
c8:4d:7d:a0:12:70:9c:7d:82:44:45:13:27:19:8a:
b3:70:cb:55:8c:b9:9f:b1:1c:52:6f:cd:a8:88:69:
79:0d:ff:93:ef:aa:40:af:ab:3c:fa:86:38:a6:03:
d7:2d:cf:4d:74:22:e7:0d:90:17:6e:d0:86:29:16:
18:db:8e:dc:5d:4c:d9:d8:7c:80:27:e0:64:67:a0:
ce:3a:71:e7:ca:2c:bb:57:35:2b:33:ff:58:fd:d2:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:10:EE:91:D9:E7:66:98:68:E3:A2:9E:A1:49:EF:FA:8A:7D:21
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PQcQ7pHZ52aYaOOinqFJ7_qKfSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.40.0/21
31.148.52.0-31.148.63.255
31.148.104.0/21
31.148.192.0/22
93.171.34.0-93.171.39.255
95.46.166.0-95.46.175.255
Signature Algorithm: sha256WithRSAEncryption
44:03:84:2e:92:f4:34:2b:41:65:1a:64:36:54:7c:a3:26:88:
64:0c:50:d8:23:49:2d:d2:54:49:a0:49:81:b9:4a:05:ac:0b:
a1:27:a5:a3:a3:69:6b:46:2c:22:29:e1:e6:c9:b6:5e:77:80:
81:10:37:20:5a:32:32:19:f7:a3:10:e3:8b:10:f6:40:a9:9b:
c6:3a:8d:27:f8:ff:f0:53:1c:53:2c:bc:03:89:6a:fc:6c:ef:
fe:a6:f4:39:46:fc:91:ce:8c:6a:bb:f8:09:c4:96:99:99:6e:
d1:92:85:a1:4a:f6:0a:ce:c1:91:e2:d0:83:79:ef:76:7f:c7:
a6:a1:c2:b4:f6:9c:61:a8:2e:88:6f:49:51:60:cd:3a:23:ae:
f5:d2:23:85:c7:21:53:77:e8:d3:ad:fa:c4:f5:e1:19:88:0e:
3c:70:24:45:86:e2:4d:ed:dd:95:d1:0d:55:e5:73:02:05:cc:
bf:3b:7e:a6:6e:e5:b9:83:55:59:df:0c:1e:6f:c8:4b:b3:3f:
c0:5e:5a:3b:0b:3d:c7:38:9e:e9:52:45:95:3b:bf:53:e8:b5:
3a:79:c1:7d:5d:8b:68:47:6c:a5:25:be:fb:51:74:d2:cf:34:
17:97:48:13:64:fb:c2:49:73:97:8c:7c:3d:8c:77:a2:79:44:
55:a0:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:34 2025 by rpki-client