Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q0frIogPEtHFTvDtg_6aaaO6RK0.roa
File: Q0frIogPEtHFTvDtg_6aaaO6RK0.roa (raw, json)
Hash identifier: 02FauIT+v6NsBdpViXeHHu3WWSHn5EAWkWUWl0Hc+qc=
Subject key identifier: 43:47:EB:22:88:0F:12:D1:C5:4E:F0:ED:83:FE:9A:69:A3:BA:44:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570957E2CE8CD95F7B8FE14E36C174CF4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q0frIogPEtHFTvDtg_6aaaO6RK0.roa
Signing time: Mon 02 Jan 2023 03:45:23 +0000
ROA not before: Mon 02 Jan 2023 03:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62069
IP address blocks: 31.148.5.0/24 maxlen: 24
92.38.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:7e:2c:e8:cd:95:f7:b8:fe:14:e3:6c:17:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4347eb22880f12d1c54ef0ed83fe9a69a3ba44ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:09:7c:1f:d6:31:e7:eb:d3:3b:2b:a6:68:
bc:fa:fc:56:48:fc:f2:bd:13:ea:16:bc:bf:5b:91:
36:9a:46:56:29:21:2d:b3:05:6f:1a:ce:63:1e:83:
31:8e:80:2e:65:2a:37:3c:d2:d7:e5:bb:ed:91:eb:
47:86:45:a7:b2:06:3f:6c:91:eb:23:90:b5:19:32:
cf:55:3e:e6:4b:2d:0e:56:01:6d:20:47:57:72:9a:
9b:a1:38:9c:c2:3b:20:29:a3:d9:d3:e4:6e:e7:45:
52:20:31:33:d7:9a:aa:e7:1c:94:28:6b:4f:93:6d:
f6:e4:17:b3:12:d4:67:3e:de:1c:08:34:3d:2b:2a:
98:db:b6:58:5b:04:88:70:e0:9a:b0:5a:a3:99:8f:
ed:e1:fd:c9:48:1c:51:26:eb:34:8a:aa:da:27:c3:
36:58:a7:43:1e:c3:61:11:cf:9b:e3:9f:a9:8d:08:
bc:ac:4a:75:c7:f3:c6:c3:bc:35:96:aa:4b:a1:56:
7f:e4:63:ad:4d:4e:cf:a6:8f:43:ca:72:e7:89:f4:
2d:07:39:55:69:5c:f6:3d:bb:fe:a9:81:56:49:31:
4c:60:22:d8:41:3f:6e:09:03:ce:f9:82:35:9a:20:
08:52:f4:18:40:d5:65:1c:8b:46:95:f6:d2:6a:db:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:EB:22:88:0F:12:D1:C5:4E:F0:ED:83:FE:9A:69:A3:BA:44:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q0frIogPEtHFTvDtg_6aaaO6RK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.5.0/24
92.38.3.0/24
Signature Algorithm: sha256WithRSAEncryption
05:44:c2:04:30:e7:f2:d3:c7:4d:84:c8:21:84:bd:1b:dc:d2:
5d:f7:86:28:fd:65:80:3e:c3:c8:8c:8f:b9:2f:3f:2e:96:40:
e7:1c:8e:7f:51:5f:85:9c:4f:49:cc:ac:ae:ad:50:eb:8e:8b:
3f:b6:72:af:5f:8b:4a:3b:4c:4c:78:c5:38:d9:06:0e:43:c2:
1d:86:9b:aa:ac:7c:17:b6:2d:06:73:92:89:4b:ac:a7:54:a4:
81:e6:50:d4:31:9c:2b:40:f6:60:3a:4b:9a:7e:62:b7:96:27:
7e:7b:89:cc:a3:ea:d8:e9:f3:da:bc:bf:3f:eb:c1:46:46:bb:
a4:d9:7d:8d:4b:ec:60:c7:12:36:8f:16:0d:b9:60:b5:a3:10:
a7:fa:ad:d3:1a:34:72:27:67:9b:f3:4e:7b:4b:6a:0c:eb:78:
34:75:67:fb:f4:43:c2:55:cd:0f:f2:71:6b:9d:7d:c6:cc:67:
00:41:ab:ba:f0:2d:d4:b1:a4:f7:83:3a:93:50:c9:7f:07:44:
98:8e:29:c4:e4:86:70:1f:c1:d2:8c:f0:47:03:99:c2:a0:91:
d7:3e:15:ba:99:8a:75:10:e7:23:43:7d:95:ea:f3:08:b2:51:
8f:dc:37:79:4d:c9:de:59:b4:b4:bc:9a:86:79:24:65:07:db:
a3:00:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:36 2025 by rpki-client