Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PvM6pyFs8JktrmcdU5x80QUxYR0.roa
File: PvM6pyFs8JktrmcdU5x80QUxYR0.roa (raw, json)
Hash identifier: 8HEpjM3AzBHARyyfAFWcCroiOMvC17+f2aJp1JZcWaE=
Subject key identifier: 3E:F3:3A:A7:21:6C:F0:99:2D:AE:67:1D:53:9C:7C:D1:05:31:61:1D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095695213AFE41490D8057824236B87
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PvM6pyFs8JktrmcdU5x80QUxYR0.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60165
IP address blocks: 31.148.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:69:52:13:af:e4:14:90:d8:05:78:24:23:6b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ef33aa7216cf0992dae671d539c7cd10531611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:da:87:63:3a:68:50:16:fd:a1:18:d1:ed:
3b:9a:ff:ab:ae:8a:15:70:ff:28:48:98:e2:10:c9:
0c:0a:bd:ae:3c:96:06:10:1d:a0:cb:b2:7a:45:6e:
72:a7:28:a6:ce:04:78:8d:1d:cc:da:63:4f:e1:b0:
2d:5e:5e:98:37:dd:f2:7a:7d:bc:57:be:aa:d4:4a:
db:7f:9d:fd:8d:15:07:80:08:f1:f7:40:e9:c0:6c:
9d:ff:49:f2:91:b5:02:83:8a:06:6a:9f:f2:ac:b4:
10:d7:e4:fc:9d:9f:78:eb:21:7a:a9:de:c8:bb:5b:
0e:19:de:a1:31:d5:51:06:18:3d:48:cf:8f:43:08:
2c:44:5d:d3:cb:a7:be:d7:2a:33:79:4a:08:ef:ef:
b0:94:c0:e8:0a:f4:7b:e0:23:b4:ce:fa:26:91:f7:
76:03:34:6b:b4:7f:ec:6e:0c:e6:f7:2d:66:c6:0a:
1b:bf:33:67:08:67:44:1a:49:40:63:f1:7f:e2:40:
5d:2d:54:17:53:ab:a5:27:6c:4a:4d:3b:7f:18:20:
37:a2:6b:03:c6:46:07:0b:38:fd:4b:df:06:bc:81:
71:a1:b2:35:a2:04:62:c3:d7:96:f8:fd:95:b3:c5:
eb:7b:c4:72:b8:b3:a2:4c:d3:31:ed:6a:dd:57:14:
f1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:3A:A7:21:6C:F0:99:2D:AE:67:1D:53:9C:7C:D1:05:31:61:1D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PvM6pyFs8JktrmcdU5x80QUxYR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:5c:bd:7c:ad:5d:b2:9b:f6:e0:fc:aa:e5:60:e0:66:df:d5:
77:82:e8:e5:70:c1:43:6d:6b:88:1e:03:cd:18:56:af:28:18:
41:ba:69:75:2b:96:9e:c5:8f:a7:cb:29:57:81:ca:80:15:fe:
94:6a:0a:2e:4b:40:72:63:29:74:4d:20:cf:c1:2c:d9:60:b2:
5c:ac:f3:c2:8a:57:ed:50:6d:92:e8:55:66:8e:63:3b:d9:30:
0a:85:a2:30:28:33:19:4c:aa:ab:5d:90:da:d5:f2:e5:39:78:
13:72:b1:45:e8:f7:9f:a3:49:50:c2:4c:ad:fa:23:f8:2e:88:
ef:17:b7:3e:fa:e1:9f:df:36:91:8e:10:ad:ef:c9:69:2b:df:
aa:68:f8:e7:ad:3d:28:45:ea:50:bf:38:e0:58:75:46:19:17:
ec:4c:6b:0d:22:84:21:2e:30:13:2d:e9:08:60:cf:70:d2:03:
e8:bd:13:d1:a2:06:6d:0f:21:fc:8a:8e:70:62:68:6d:8b:f4:
d3:68:58:7d:df:28:d2:66:87:0e:4e:24:32:e3:35:14:cd:d5:
35:e0:cf:b1:c8:d0:95:f9:cd:88:09:43:47:1d:c9:03:b2:53:
fa:83:68:39:d1:1d:f9:1d:0f:b5:67:dd:94:e3:0b:1e:e0:e6:
7f:69:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:55 2025 by rpki-client