Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V4xRV_aYpi4AWZ_m6ySaplQ78Pw.roa
File: V4xRV_aYpi4AWZ_m6ySaplQ78Pw.roa (raw, json)
Hash identifier: tuaLTiiiD92o5JqSMofftIDN1krMwjsi3O7RY7iHJUw=
Subject key identifier: 57:8C:51:57:F6:98:A6:2E:00:59:9F:E6:EB:24:9A:A6:54:3B:F0:FC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF52374D825CE4DD6A33BD2F15F27
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V4xRV_aYpi4AWZ_m6ySaplQ78Pw.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204889
IP address blocks: 31.148.20.0/24 maxlen: 24
92.253.204.0/24 maxlen: 24
93.170.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f5:23:74:d8:25:ce:4d:d6:a3:3b:d2:f1:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=578c5157f698a62e00599fe6eb249aa6543bf0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:83:44:12:9c:cf:78:1d:dc:c7:ec:c2:14:99:
0d:99:08:3f:dd:69:1d:70:7a:1e:72:37:b2:e2:f2:
bf:53:a7:ce:b4:00:6f:5b:2e:9b:d1:b0:6f:5c:82:
de:d2:de:0b:7a:6d:96:8f:ab:ab:25:9d:83:59:b9:
e8:ca:04:c1:92:65:d2:1c:51:67:2d:db:1d:7e:9c:
9c:c1:98:32:96:d3:fc:f4:f7:77:e7:5e:12:74:bf:
0d:34:5d:ae:f7:79:3b:7e:f3:65:96:90:7e:76:98:
71:28:41:15:da:7c:6e:01:61:89:96:fa:93:bd:db:
d0:a9:4c:d0:05:6b:3f:52:60:b8:64:9f:86:0a:6a:
97:ea:75:84:30:ff:0f:52:0d:bf:68:b7:39:2f:dc:
32:54:10:31:8c:eb:df:f7:72:c6:f5:45:41:6d:83:
52:b8:cb:b1:ef:48:e2:b2:63:12:9d:9e:29:b7:44:
01:01:4f:d6:98:9b:68:48:d3:48:08:91:44:86:88:
40:6d:b4:93:88:81:56:74:37:f7:3b:6f:1d:3c:c6:
c4:79:cf:f3:cb:15:44:fb:cd:8b:0e:63:4a:cc:24:
9c:de:52:ad:fa:24:d2:ee:74:7d:27:69:d8:9b:aa:
6b:f6:9b:be:08:31:44:5b:6e:8b:07:65:99:af:cf:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8C:51:57:F6:98:A6:2E:00:59:9F:E6:EB:24:9A:A6:54:3B:F0:FC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V4xRV_aYpi4AWZ_m6ySaplQ78Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.20.0/24
92.253.204.0/24
93.170.15.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ce:d5:be:fa:86:f7:6c:ff:2f:35:6c:bd:66:b6:aa:6c:fb:
48:ed:c2:50:2c:45:0f:6f:84:36:23:9f:04:08:36:b1:b7:86:
a8:29:f4:2f:85:3c:c5:de:3a:52:aa:ff:21:25:44:b9:2e:5c:
4b:6d:3f:de:b2:c7:3b:57:e6:30:ea:5a:d0:ce:a8:96:a6:98:
ca:4d:2a:31:1a:11:fc:b8:49:ac:fe:0b:a8:83:e7:ab:36:fb:
ab:2e:16:68:87:18:04:38:0f:ac:85:30:3f:5c:a8:00:3c:b0:
39:1e:d1:41:5b:33:4a:56:bf:a1:b1:80:4c:85:05:54:e0:62:
c6:e1:f8:76:4b:69:bd:68:2a:9c:98:20:16:b1:44:53:88:47:
3c:8d:8d:61:38:26:e5:ed:c5:a7:04:80:68:4f:d9:59:8c:fc:
7f:15:13:54:1b:02:cb:d2:e1:d3:36:90:d5:2f:a0:ac:3b:c5:
8c:80:e6:29:34:c1:d7:79:cb:ee:d0:b3:3a:ea:af:8e:c6:db:
51:06:86:8a:f4:22:36:3b:7e:e2:20:cb:fe:e7:89:f7:90:2b:
cd:62:1e:14:83:2b:6f:f3:4c:eb:94:19:07:ea:c2:d2:4b:1b:
61:c0:12:72:c7:41:bb:83:32:56:2b:85:4d:bd:79:93:34:de:
7f:bf:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:10 2025 by rpki-client