Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R-HJZks4qRq214hd4oQcsoe-0-g.roa
File: R-HJZks4qRq214hd4oQcsoe-0-g.roa (raw, json)
Hash identifier: OJR6LMN+yol0wCbqJmpMaHxkNvYSGedHmCoBfoN9aRg=
Subject key identifier: 47:E1:C9:66:4B:38:A9:1A:B6:D7:88:5D:E2:84:1C:B2:87:BE:D3:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590081E0B4017D5511B3748FE313307
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R-HJZks4qRq214hd4oQcsoe-0-g.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210519
IP address blocks: 31.148.196.0/22 maxlen: 24
92.38.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:08:1e:0b:40:17:d5:51:1b:37:48:fe:31:33:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47e1c9664b38a91ab6d7885de2841cb287bed3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:ea:a5:3b:e8:a2:ed:2b:e2:7d:0d:af:fa:
70:8a:2c:db:bc:7c:95:da:0c:66:8d:d1:eb:67:ee:
bc:7b:99:83:c9:10:bb:80:53:4e:83:44:b9:9d:d1:
79:43:4f:39:e0:84:df:77:93:20:b3:19:55:9e:e7:
ab:7b:cc:15:4d:73:66:d9:ad:1a:f8:d4:4f:ac:2e:
a3:1f:5f:78:2f:a9:39:00:14:16:92:33:89:42:ad:
25:54:b6:49:76:37:66:7c:69:96:06:22:eb:26:27:
68:aa:17:83:81:4c:75:71:75:7e:a8:23:d5:0f:32:
d5:a3:a8:2b:46:2f:18:0b:00:98:06:ab:a6:a8:ac:
b9:73:e0:7c:29:5c:49:96:3d:85:98:94:04:aa:f7:
92:e1:98:d9:39:f8:99:3c:1b:8d:3f:98:77:00:8b:
28:7c:f7:9c:6c:a4:e0:f9:48:dc:ac:ae:b1:df:a2:
96:bc:ec:00:9b:71:89:cb:c5:79:9d:f4:a7:e4:50:
58:f5:63:54:fd:14:27:c3:c9:ee:a9:67:47:24:d6:
d1:3d:78:a2:5f:4a:cf:28:72:24:1d:78:ff:c4:fa:
42:02:29:ab:8d:8d:9b:64:4f:01:ff:e9:d9:91:52:
f0:48:a1:12:0e:30:ea:c0:ac:89:fe:54:67:49:87:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:C9:66:4B:38:A9:1A:B6:D7:88:5D:E2:84:1C:B2:87:BE:D3:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R-HJZks4qRq214hd4oQcsoe-0-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.196.0/22
92.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:41:a8:0a:43:c1:97:b4:72:df:70:d5:21:17:da:c1:72:99:
8d:80:2b:19:4e:4f:d9:a8:49:5e:ef:30:39:c1:d4:58:39:da:
ab:0e:77:e1:b1:40:fb:54:92:8b:c8:4e:cf:e2:2c:30:30:98:
33:c9:c0:0f:33:71:34:f0:0e:a3:37:ba:88:c8:e5:a4:a2:91:
f3:6c:d6:25:b4:c2:e6:09:7f:74:77:e7:b3:52:27:fa:66:15:
84:df:3f:46:cc:ac:a7:63:4f:29:c6:8b:b1:5a:fc:a0:87:4e:
3d:2b:cd:c2:19:80:fa:95:76:70:77:0f:b0:2a:0f:19:24:2d:
78:67:65:05:de:8c:69:d3:d0:3b:84:00:1e:ab:be:fa:87:f9:
ec:d4:74:01:48:97:92:fe:9a:f3:0a:c7:3c:22:89:c7:5f:27:
f1:6a:0b:25:be:55:68:28:5f:d5:19:79:5a:f1:50:1f:d3:55:
14:c3:c0:ea:58:22:9f:50:35:d4:18:8f:be:78:ad:31:27:05:
7f:1d:c4:e3:07:5d:44:78:e7:8c:ee:68:1f:1a:a7:f2:37:11:
23:87:67:5e:be:c6:d7:2d:1d:dd:d3:c7:05:ed:24:29:28:d7:
25:66:79:57:cb:1d:3a:3a:55:d2:45:3d:1d:06:63:59:16:22:
36:18:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:32 2025 by rpki-client