Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Jr7P-QPH_B1ewGjm_IEJLQJmq0.roa
File: _Jr7P-QPH_B1ewGjm_IEJLQJmq0.roa (raw, json)
Hash identifier: 1DNAIa79Z1fVLV1RJt4jPk/+Yddm/uQB7Wf8MkkVldY=
Subject key identifier: FC:9A:FB:3F:E4:0F:1F:F0:75:7B:01:A3:9B:F2:04:24:B4:09:9A:AD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955F20DD71C11F5EDA6741ED2EF545
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Jr7P-QPH_B1ewGjm_IEJLQJmq0.roa
Signing time: Mon 02 Jan 2023 03:45:15 +0000
ROA not before: Mon 02 Jan 2023 03:45:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57903
IP address blocks: 31.148.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5f:20:dd:71:c1:1f:5e:da:67:41:ed:2e:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc9afb3fe40f1ff0757b01a39bf20424b4099aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:e0:8e:37:b3:05:78:88:91:c5:e1:ab:fa:
30:91:7b:3d:3c:53:3e:b2:4c:1f:e8:36:84:d9:09:
0c:fc:c1:68:2f:77:57:bc:62:85:8e:a2:49:5f:72:
f6:ba:10:ab:52:1a:37:4a:77:2d:d4:45:e8:be:98:
72:00:65:c5:7f:1a:18:e7:67:63:fb:43:ac:d6:0f:
cd:ee:e4:1e:6e:4a:0b:7a:1f:79:c0:d0:40:a5:ef:
76:99:95:26:5a:47:78:e0:49:84:7e:6e:5e:51:d3:
af:8d:c6:d9:5f:53:75:a8:ee:8a:b6:1a:66:e3:c9:
2c:e7:ee:14:39:0a:2c:08:8e:69:6f:4b:37:00:9f:
26:a5:0f:34:ea:f3:f3:35:5e:2f:72:10:f6:e3:83:
c8:45:8f:fa:45:2d:a6:cb:e0:56:fb:95:a3:05:09:
fa:ff:cf:58:dd:b8:b3:3f:ef:1b:3f:49:26:a7:b4:
1b:4e:53:1e:8e:75:0c:00:7b:7b:d8:8e:2a:92:69:
8e:b9:98:4c:d6:c5:47:5e:49:f2:ea:4a:d2:a2:b3:
a0:f1:3d:a4:d0:58:c3:24:e5:c1:c0:a3:76:db:0b:
f3:0d:9d:85:8d:87:de:f6:ca:5b:4d:b2:c2:38:c6:
35:17:ed:43:e8:f5:ce:36:1d:77:1c:68:69:fb:d9:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:FB:3F:E4:0F:1F:F0:75:7B:01:A3:9B:F2:04:24:B4:09:9A:AD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Jr7P-QPH_B1ewGjm_IEJLQJmq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.176.0/20
Signature Algorithm: sha256WithRSAEncryption
26:98:90:f5:cb:7e:97:1e:60:cb:29:46:ad:54:95:66:6e:85:
8b:db:3a:2f:c9:a8:66:06:58:27:90:09:d1:e2:bf:87:43:76:
a2:bb:4c:8e:f8:a7:05:dc:a7:f7:54:8a:97:28:98:9b:b0:69:
f3:81:84:8a:95:c9:ec:6a:65:f2:29:80:86:00:f8:d4:0c:e6:
88:96:46:aa:01:a4:a3:23:4f:43:2b:55:a0:c5:b8:9c:aa:76:
b4:3a:8b:10:33:d8:c1:51:55:ac:29:29:2a:b5:da:62:ff:1f:
34:de:29:16:af:bc:f4:17:11:ad:53:57:bb:ad:94:c6:9b:37:
73:bb:3b:6f:c4:f9:64:0b:3f:02:93:16:45:30:39:ab:2c:74:
56:aa:6b:64:8c:cb:a7:ae:d3:a3:01:fd:43:5f:3c:53:79:35:
b5:e1:07:f0:57:8b:31:85:5a:1f:0e:66:cb:ff:04:3c:bf:64:
87:8b:ef:c5:ad:8e:6b:9e:8b:2d:6f:c6:1c:ec:a3:4f:32:7c:
ef:55:9b:3d:6a:a2:3f:87:75:c3:6f:1d:cb:23:1a:d7:bb:91:
12:45:f4:e1:d0:81:66:36:5e:33:c1:fb:a1:1d:68:12:b2:66:
98:9d:d6:90:ed:3b:06:a2:80:3c:1c:77:ad:d0:5f:f7:32:3c:
0e:8f:ac:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:08 2025 by rpki-client