Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q_UYo_RYPtkFMeUbig6H2Ebf5Bk.roa
File: Q_UYo_RYPtkFMeUbig6H2Ebf5Bk.roa (raw, json)
Hash identifier: 5OlAZtmNdG40e44AmY9wd3poKpCAXyQkTadanvpWTE8=
Subject key identifier: 43:F5:18:A3:F4:58:3E:D9:05:31:E5:1B:8A:0E:87:D8:46:DF:E4:19
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27DFDE07
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q_UYo_RYPtkFMeUbig6H2Ebf5Bk.roa
Signing time: Sat 01 Jan 2022 16:09:01 +0000
ROA not before: Sat 01 Jan 2022 16:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59475
IP address blocks: 31.148.26.0/23 maxlen: 23
92.38.0.0/23 maxlen: 23
95.46.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668982791 (0x27dfde07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f518a3f4583ed90531e51b8a0e87d846dfe419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:05:22:eb:14:51:12:c4:94:16:27:f9:20:
f7:9d:4c:a9:63:cb:9a:77:97:4b:04:f6:92:4d:09:
d2:2c:dd:3f:67:e4:72:95:37:20:72:56:f8:1f:33:
25:c1:a6:60:04:37:94:9a:04:bb:14:22:50:fc:49:
14:4e:5c:9d:34:07:8b:b7:99:ff:85:6b:34:9c:ad:
3d:4f:e8:d4:c0:a1:ed:17:e0:1b:91:14:3b:c5:77:
88:fb:46:be:ec:7f:b4:16:6a:12:71:89:57:10:2c:
84:d6:e6:c4:2e:f9:87:14:c0:d7:64:13:c6:ba:2b:
d8:b4:b2:37:dc:aa:6f:da:35:bc:83:30:20:15:bd:
ce:d1:57:40:5b:2a:65:52:00:d1:87:81:b0:dc:bf:
d9:c7:03:f0:0f:bf:98:4e:3b:b1:37:12:7c:b3:af:
92:4e:6a:d3:8d:bb:39:bd:d2:f3:f1:9c:18:0e:10:
9c:da:0c:c9:36:39:11:97:cc:8c:7b:bb:d5:4d:10:
d4:1a:d1:51:58:54:ee:6e:91:8c:bc:20:33:57:0c:
37:ca:93:75:3c:67:09:af:ef:28:65:58:ca:b9:01:
fe:62:c5:fe:3c:f8:a9:95:ea:a7:ce:22:cb:91:ab:
56:dd:0a:66:e3:75:ce:25:e6:f5:cc:55:7c:98:75:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:18:A3:F4:58:3E:D9:05:31:E5:1B:8A:0E:87:D8:46:DF:E4:19
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q_UYo_RYPtkFMeUbig6H2Ebf5Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.26.0/23
92.38.0.0/23
95.46.112.0/23
Signature Algorithm: sha256WithRSAEncryption
14:ab:b5:54:09:51:93:25:63:ca:f7:d4:4b:80:22:2b:55:e1:
d5:7c:40:c8:a6:54:15:29:c2:08:11:62:bd:a1:af:8f:52:9a:
b7:ac:cc:fa:03:09:a2:d8:9e:6e:8e:c1:55:36:cb:ab:e2:19:
b6:8a:51:c3:f5:a5:c3:64:d6:05:c7:5b:cb:11:ff:f3:dc:c0:
f2:40:44:5d:17:92:21:6f:7c:4f:28:00:81:02:6d:62:59:de:
c0:77:8c:ca:3b:ff:5a:d4:68:18:42:26:1d:a1:f6:9a:c4:14:
d4:db:d7:91:64:e7:f5:8b:ae:73:86:64:c5:10:c8:90:3e:ff:
b4:dd:83:9a:94:df:05:39:cf:26:bf:68:b5:3a:4a:ec:d9:96:
08:ec:f7:d7:68:07:b0:34:df:e1:04:66:47:7d:ec:6d:77:07:
f1:40:07:f3:d8:61:8c:2b:21:01:ea:f4:b9:79:3f:7d:91:ca:
da:d2:a5:c7:e1:57:50:a8:43:ec:bd:0a:ef:55:97:64:dc:5d:
1b:a9:c3:77:37:96:0c:c2:45:ba:bd:48:93:5e:69:7b:97:70:
a2:c5:99:43:b1:8a:14:a8:3e:c9:fa:ee:e0:e1:94:3a:74:e6:
c8:c2:a3:87:54:a4:68:71:ee:16:35:f4:7d:8d:18:99:28:e9:
1d:79:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:15 2025 by rpki-client