Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ye6GTp45GWdYTvLIzo55TMwt3LU.roa
File: Ye6GTp45GWdYTvLIzo55TMwt3LU.roa (raw, json)
Hash identifier: ZJEfs8WQoCRVJPXwD1h2mWUPzXRR/69OeXDkwxFzEJY=
Subject key identifier: 61:EE:86:4E:9E:39:19:67:58:4E:F2:C8:CE:8E:79:4C:CC:2D:DC:B5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F96EF1EADF7DDEA5C65390B78AD62
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ye6GTp45GWdYTvLIzo55TMwt3LU.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41575
IP address blocks: 31.148.32.0/21 maxlen: 24
31.148.224.0/20 maxlen: 24
92.253.240.0/20 maxlen: 24
93.171.48.0/20 maxlen: 24
93.171.80.0/20 maxlen: 24
95.46.34.0/23 maxlen: 24
95.46.144.0/24 maxlen: 24
146.158.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:96:ef:1e:ad:f7:dd:ea:5c:65:39:0b:78:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61ee864e9e391967584ef2c8ce8e794ccc2ddcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:d9:5e:53:dc:01:3e:dc:bf:55:d8:ca:f7:
cc:d3:91:59:be:e4:dd:86:09:f2:4f:e5:e3:00:87:
dd:aa:70:e4:80:6d:f6:b0:03:aa:8b:03:c5:b8:9f:
c3:df:53:30:35:6e:b6:6f:a5:54:03:be:93:64:94:
2c:ff:b3:69:f6:d8:10:ed:d0:6e:d3:7b:10:e2:69:
63:04:bf:56:4a:c3:50:1d:97:a5:5b:8d:14:91:b3:
93:fa:96:78:78:58:67:24:d3:1e:54:be:70:9a:de:
c6:d2:1f:c3:59:2d:58:c0:d1:b1:fd:24:4c:1f:cd:
ea:ef:be:44:d3:fc:96:1b:95:36:9e:d4:08:ea:a8:
3e:73:e8:b7:86:c9:9b:6f:18:c3:dc:ef:bd:34:73:
7c:8a:94:c6:6f:c1:fe:01:e7:a4:71:7b:39:c3:2a:
33:37:d7:01:b2:17:0d:97:63:e0:e9:86:a4:da:e6:
fb:4f:2a:85:67:67:29:31:a3:88:06:ee:52:27:d5:
f6:b0:ec:18:a9:88:04:c6:28:da:f4:34:28:98:96:
fd:0a:e4:48:ed:05:55:4c:f5:29:33:ba:8e:4a:e5:
61:25:69:4c:3c:9b:eb:10:f8:9f:57:54:dd:6b:61:
4e:92:5b:29:37:0e:ef:3b:08:10:5d:9d:d4:c2:59:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EE:86:4E:9E:39:19:67:58:4E:F2:C8:CE:8E:79:4C:CC:2D:DC:B5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ye6GTp45GWdYTvLIzo55TMwt3LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.32.0/21
31.148.224.0/20
92.253.240.0/20
93.171.48.0/20
93.171.80.0/20
95.46.34.0/23
95.46.144.0/24
146.158.32.0/20
Signature Algorithm: sha256WithRSAEncryption
19:73:9a:d6:00:1d:e5:76:76:37:88:2d:c9:70:0e:72:50:f9:
89:e2:92:8a:e5:96:9f:14:82:4c:4c:89:4d:bf:b7:9a:3e:80:
6c:2c:32:c9:15:aa:bb:9b:2a:bd:a2:94:c1:66:60:93:40:51:
7b:55:c4:48:65:7e:a5:0b:1d:49:e0:c8:d8:8c:93:90:70:39:
c9:f2:69:7a:24:b2:35:4a:08:7c:66:56:07:81:a0:22:72:15:
0f:1b:19:70:a7:ff:85:24:7d:f5:8b:ef:e0:45:17:20:98:bf:
93:dc:6b:d1:b5:31:bd:e2:9e:8a:c9:c1:f6:6f:c4:30:be:46:
1c:85:8d:89:fb:1c:c3:bf:47:ec:0d:62:3c:36:76:75:f8:d8:
2c:14:c4:9f:d1:28:fd:49:b4:df:a3:43:8a:cc:ed:37:65:18:
58:3c:90:64:be:76:e0:ce:fa:30:30:60:bc:ef:8c:cc:3a:fc:
dc:b1:17:66:9b:94:7b:03:aa:40:b7:73:5d:c8:67:e1:6f:19:
89:bc:ca:2b:c3:e2:3c:a2:ae:33:12:53:bf:15:ee:7e:ea:59:
a9:69:b4:7e:e6:6b:b7:11:4b:3c:32:e3:ab:8d:41:a9:20:49:
24:26:b7:0d:b3:ed:e0:11:75:1c:71:e8:32:64:0a:bd:43:1f:
92:21:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:38 2025 by rpki-client