Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-KS6MMnvh1Qo5pa_pffeB_dyUk.roa
File: T-KS6MMnvh1Qo5pa_pffeB_dyUk.roa (raw, json)
Hash identifier: Bmw28R+gbF6lteR67VwyayOI9m6Pwlz5/e5Zlxm1LeU=
Subject key identifier: 4F:E2:92:E8:C3:27:BE:1D:50:A3:9A:5A:FE:97:DF:78:1F:DD:C9:49
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01874BB7476ED080BBC12F4C8688CB28F298
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-KS6MMnvh1Qo5pa_pffeB_dyUk.roa
Signing time: Tue 04 Apr 2023 10:01:55 +0000
ROA not before: Tue 04 Apr 2023 10:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203553
IP address blocks: 31.148.175.0/24 maxlen: 24
92.38.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:b7:47:6e:d0:80:bb:c1:2f:4c:86:88:cb:28:f2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 4 10:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fe292e8c327be1d50a39a5afe97df781fddc949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b9:0f:0e:23:01:c4:83:63:74:00:6f:8e:44:
4d:1e:78:67:cb:38:2b:9d:74:02:4b:e1:91:eb:be:
07:95:cd:a6:5c:c7:8b:b2:90:6e:c6:1e:a2:ff:a4:
1e:85:46:2e:c6:e7:8e:ee:3c:48:c5:7c:43:92:d3:
b1:e2:54:71:74:3d:6d:87:0c:4d:a0:b3:38:8e:bf:
76:5a:88:6b:64:b6:05:3a:00:9d:4d:2d:d2:1c:e2:
7d:a1:10:a0:95:7e:d7:77:66:d2:86:82:8c:47:b8:
67:7f:b7:9a:79:04:33:3c:2d:9f:90:db:c7:aa:7e:
be:ab:38:f6:8d:08:ef:3d:6a:8a:80:c3:73:bb:9e:
f4:c0:1e:e1:c9:78:68:e8:ee:8c:5c:f8:b6:3a:28:
0e:dd:6e:3d:c9:61:9b:66:0c:00:9a:e2:74:9d:cb:
03:88:e7:16:d9:e2:a7:c7:e8:d0:e1:6f:32:e8:21:
56:ab:08:9d:6e:b0:c3:4a:02:3c:2e:1a:12:9a:79:
0d:d4:5b:40:4e:0b:20:e9:7b:38:fe:cc:f6:d9:a1:
da:f5:06:32:52:46:b0:f2:65:9f:56:c3:a7:e5:f8:
4a:89:7f:21:89:1d:ae:88:aa:76:5e:91:01:b8:59:
0d:a7:43:ed:03:a1:9e:c1:37:c9:48:f3:d3:b9:d4:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:92:E8:C3:27:BE:1D:50:A3:9A:5A:FE:97:DF:78:1F:DD:C9:49
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/T-KS6MMnvh1Qo5pa_pffeB_dyUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
92.38.5.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2a:70:1e:22:c1:00:ae:0a:34:49:44:15:f3:7c:9f:f5:50:
4e:dd:a5:ff:5b:8b:ee:94:0d:62:da:6a:5c:28:b3:0f:7c:51:
8b:35:29:dd:4a:bb:e3:e3:83:46:57:06:71:35:ef:b2:7e:ff:
2f:25:7d:4c:27:60:15:19:45:5a:78:57:64:32:50:65:b7:06:
ec:14:82:0e:96:c2:fc:54:ab:7a:eb:24:88:2a:6f:ba:fb:c1:
81:2d:c7:05:47:bc:27:c8:1d:92:4d:ae:72:83:d2:13:04:26:
ba:5e:4a:34:06:be:e4:3c:eb:fb:7e:67:31:fa:a8:d8:f0:01:
2f:6f:ae:09:3b:55:49:c8:e5:ca:ed:e9:0c:b7:3b:46:fd:8c:
12:ba:94:31:ac:76:b7:15:dd:08:29:30:63:53:9e:43:e6:9e:
e4:38:70:04:64:12:4d:33:f2:51:19:8b:f4:49:f3:40:a4:85:
2d:18:8a:21:cb:f2:c1:db:ae:d3:4e:c0:1f:04:12:75:81:5b:
6f:84:f6:f7:10:dc:5b:a5:1b:26:fe:49:c2:bd:ab:f6:ab:7d:
a8:0f:97:91:8c:dd:dc:f0:3b:da:f8:36:0c:b4:7d:d6:4b:5a:
aa:27:3c:62:fd:c1:c7:82:a3:e3:7d:14:b0:13:7c:8f:b6:6a:
c4:74:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:34 2025 by rpki-client