Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S_R_aSSjU5aT4MXyL4ZaFdF8CNw.roa
File: S_R_aSSjU5aT4MXyL4ZaFdF8CNw.roa (raw, json)
Hash identifier: 4r7cc48z+AmSgReepth4ifNs2geQssc/5JeLwTpr+VI=
Subject key identifier: 4B:F4:7F:69:24:A3:53:96:93:E0:C5:F2:2F:86:5A:15:D1:7C:08:DC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 281DCEC9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S_R_aSSjU5aT4MXyL4ZaFdF8CNw.roa
Signing time: Sat 01 Jan 2022 16:09:38 +0000
ROA not before: Sat 01 Jan 2022 16:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200122
IP address blocks: 31.148.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673042121 (0x281dcec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf47f6924a3539693e0c5f22f865a15d17c08dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:b5:82:21:07:46:c5:91:89:00:b6:83:36:
04:95:08:a1:68:95:1b:eb:8b:34:1f:f4:f4:68:f6:
3e:d8:56:f5:1d:d6:54:a2:d2:1c:b6:9d:6e:1e:cc:
a8:68:47:39:42:15:0f:6a:a8:6e:e3:38:70:71:0e:
5f:11:88:8a:f9:7f:a4:3f:cf:cf:4d:91:45:13:16:
8d:a2:00:5c:05:5a:62:e8:fd:dc:25:52:19:2c:c1:
74:aa:dd:86:31:e8:e0:17:86:90:25:8d:ad:29:a6:
a4:bb:7d:fc:ce:43:0c:2b:73:52:bd:08:a8:38:31:
b4:31:9f:da:84:13:1f:66:bd:6f:b3:22:63:fc:f1:
5f:ed:86:2b:1e:7b:52:26:de:9a:d1:94:7d:0d:f7:
45:b9:99:10:fc:f6:3c:66:9a:be:74:c8:bf:33:ea:
3f:42:52:ec:b6:d6:f2:86:3c:0a:48:c4:97:fa:b8:
82:a3:1f:da:e9:66:18:eb:d4:10:bc:62:f3:92:82:
58:a7:58:bb:f3:f8:a9:16:65:21:2a:73:3b:b8:d5:
dd:00:3f:71:6a:e7:7e:85:5f:fd:e9:63:7a:e2:32:
f5:93:b5:30:76:94:e4:7f:9c:dd:34:71:a3:3b:e0:
ea:ef:25:0d:85:72:96:c9:47:da:be:f4:a8:05:e3:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:7F:69:24:A3:53:96:93:E0:C5:F2:2F:86:5A:15:D1:7C:08:DC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S_R_aSSjU5aT4MXyL4ZaFdF8CNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.222.0/24
Signature Algorithm: sha256WithRSAEncryption
40:eb:af:65:42:c5:f0:c2:1d:79:c6:21:f9:ca:46:b1:ea:f3:
de:0a:80:0d:16:d0:85:ab:39:51:4d:5c:b7:81:40:52:1a:03:
a6:7b:1a:33:58:ba:c5:19:05:a8:7c:c7:c0:0e:b6:30:01:68:
f9:70:08:c6:67:a4:05:94:7d:73:95:fb:40:88:33:02:c5:9c:
42:40:a7:b1:a7:88:65:d8:42:9b:85:89:ef:54:de:28:39:f7:
ca:7b:f5:59:53:44:bd:81:7f:5d:64:02:17:94:f3:1f:ba:fb:
bb:f6:8a:44:2a:6c:e3:84:ff:f1:21:db:5d:12:f2:29:27:4d:
f7:47:b6:13:5d:aa:46:e4:15:6a:8e:8b:71:c9:f5:c7:67:1e:
ad:13:c1:c6:42:f2:c2:95:f8:65:ff:eb:2f:53:d9:f3:90:82:
bf:90:92:b9:72:21:4f:d7:4a:28:dc:7e:03:05:72:6f:2a:8a:
87:96:e4:5c:45:6a:00:22:8f:88:86:ce:30:4b:10:53:dd:6a:
a0:99:dd:33:a0:e0:a1:51:51:91:08:a7:de:b2:ab:f9:b0:08:
27:04:75:39:ba:4d:2b:0d:2f:7e:89:fd:ab:1d:d2:ce:c8:ad:
f4:8a:66:db:79:32:89:97:07:58:27:49:07:fb:1c:bf:04:83:
e9:8f:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:35 2025 by rpki-client