Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PX_1lisi6rLRJ_R_nmCzHhA2UNY.roa
File: PX_1lisi6rLRJ_R_nmCzHhA2UNY.roa (raw, json)
Hash identifier: sdZCf+y1szYjK5rFZ9uGHkkThrGfzZxRyQfl2dLetro=
Subject key identifier: 3D:7F:F5:96:2B:22:EA:B2:D1:27:F4:7F:9E:60:B3:1E:10:36:50:D6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5963A78BB131EA830B47AC8565DC997
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PX_1lisi6rLRJ_R_nmCzHhA2UNY.roa
Signing time: Tue 08 Aug 2023 14:38:59 +0000
ROA not before: Tue 08 Aug 2023 14:38:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29256
IP address blocks: 31.148.152.0/21 maxlen: 24
92.253.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:96:3a:78:bb:13:1e:a8:30:b4:7a:c8:56:5d:c9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:38:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d7ff5962b22eab2d127f47f9e60b31e103650d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:ee:a1:9d:42:93:f4:e1:ac:1a:a7:f1:4a:
a2:28:99:2e:87:da:9c:6f:c0:43:20:4c:18:5e:45:
06:13:04:ac:1a:10:df:7b:62:d6:d9:99:a8:14:26:
f8:4e:f1:a8:fe:91:50:34:26:c9:d6:7c:76:33:48:
ea:65:27:25:04:53:2c:43:43:41:34:56:f0:ff:90:
c9:67:81:b7:22:4f:fb:5f:f4:a5:1a:8c:76:0e:26:
02:a8:ce:0e:f8:1e:3b:80:c2:41:59:fb:2c:1b:a7:
14:bf:30:56:ff:b4:e7:c4:a2:e2:cb:66:d8:9d:8f:
ef:10:8d:0e:bd:8d:2c:fc:f0:42:fe:3d:35:ec:72:
bf:25:00:f3:ab:76:42:0f:13:a0:e1:d1:70:55:27:
d6:53:d3:9f:f1:67:07:65:a3:56:dc:17:24:0e:77:
21:6d:81:f0:4f:43:69:35:46:64:49:dd:dd:3a:67:
60:00:44:d6:79:e6:fe:45:76:84:02:61:9c:d9:ec:
0e:3d:5b:31:80:82:85:4e:95:c8:ab:0a:5c:c8:90:
c4:2a:a8:18:e8:31:b1:6e:7e:82:4f:1c:4e:3f:3b:
fa:82:e8:06:45:ed:c5:01:bf:6f:91:ce:46:3d:c5:
43:77:0f:26:5a:8c:5f:58:cd:5a:ad:03:24:d7:e2:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:F5:96:2B:22:EA:B2:D1:27:F4:7F:9E:60:B3:1E:10:36:50:D6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PX_1lisi6rLRJ_R_nmCzHhA2UNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.152.0/21
92.253.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:64:d0:0e:ad:0b:2a:ce:8c:a8:52:6f:74:61:0e:1a:b4:e8:
75:dd:90:9b:4c:54:91:9b:60:78:2a:9b:35:18:c5:74:b1:78:
a1:da:75:ac:97:f0:1e:9b:60:5f:80:27:2e:0c:32:8a:4e:9c:
0d:82:69:40:e5:6c:a5:a0:02:ed:a1:05:b8:00:e6:33:f8:51:
26:15:16:aa:56:f0:c6:cb:6b:7e:0d:fc:47:8b:be:80:e1:49:
fa:90:73:74:c1:e4:b7:72:f0:a5:53:f4:3a:98:0a:6f:d7:61:
24:60:b6:7d:b1:43:12:f1:40:57:35:ab:6a:c7:0b:9f:6d:a2:
d8:8e:a7:34:00:26:c4:39:f2:f4:6f:1a:66:46:b5:29:24:d8:
c6:03:cd:b1:d2:ed:bb:f3:fb:ce:59:4a:78:10:e1:2c:dd:a5:
f1:62:ed:8e:3e:a2:75:b5:a9:07:ce:87:18:67:9d:31:36:f8:
47:76:84:e7:80:55:f0:fe:b6:d7:1a:8e:4f:1c:fa:66:bf:62:
4c:40:ef:13:20:44:57:7c:1b:e1:82:8c:85:65:53:c8:db:f9:
8b:81:b5:6b:f6:ac:06:7d:c9:9d:a2:bd:94:c9:bf:f8:da:c0:
4e:11:da:52:d4:c5:eb:1c:52:97:77:9f:6b:f4:bb:d3:b6:db:
77:38:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:08 2025 by rpki-client