Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c6Pvhro67RO4QSo8pQ90Y1ukVTA.roa
File: c6Pvhro67RO4QSo8pQ90Y1ukVTA.roa (raw, json)
Hash identifier: lOZQytG6KoDGZFqydZ5425KbxzQLFNgTnkeQGQiG3uY=
Subject key identifier: 73:A3:EF:86:BA:3A:ED:13:B8:41:2A:3C:A5:0F:74:63:5B:A4:55:30
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194C28B74755BF14221E4CDF221471C5EB8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c6Pvhro67RO4QSo8pQ90Y1ukVTA.roa
Signing time: Sat 01 Feb 2025 17:25:06 +0000
ROA not before: Sat 01 Feb 2025 17:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49551
IP address blocks: 31.148.8.0/22 maxlen: 24
93.171.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c2:8b:74:75:5b:f1:42:21:e4:cd:f2:21:47:1c:5e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 1 17:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73a3ef86ba3aed13b8412a3ca50f74635ba45530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:a9:00:23:ba:e1:16:6e:12:ad:2a:16:c2:
e4:73:e7:8d:69:20:62:c1:9d:d0:a9:7e:0f:db:e3:
d7:9c:58:43:06:a7:6f:e3:32:dd:99:17:db:2e:0b:
d1:12:4c:8f:c0:c8:09:69:37:f9:79:15:2b:5f:38:
09:80:d9:83:c7:af:ee:43:03:88:5c:56:e5:1a:ff:
79:a9:62:24:7a:c3:b3:03:a0:fc:71:7a:1b:b0:d2:
2a:07:58:8f:40:77:a0:db:ac:7d:3a:13:5a:df:55:
4c:fb:8c:fd:19:8e:b2:64:6b:3e:72:08:0e:6b:f4:
14:68:23:a9:18:a2:72:46:b0:b5:92:a5:4f:ff:db:
ea:c6:5e:ab:ba:1a:8d:31:76:24:81:52:d7:eb:0c:
45:8e:21:c6:6c:ce:ce:fc:50:e8:3b:78:aa:e3:2b:
6b:72:45:7a:9e:7c:ab:53:5c:49:4c:ad:50:fc:d8:
bf:6a:52:91:a2:04:61:dc:b6:3c:de:3c:a3:09:5d:
f9:ed:7d:5c:29:52:da:b2:d8:7f:f1:ef:a8:31:72:
d9:fe:32:00:e8:1b:29:43:c6:77:8a:1c:8a:39:4f:
71:df:0b:ce:9d:61:65:74:bb:a8:8f:1e:14:b9:7f:
59:6d:89:ea:e6:67:1c:81:ef:f1:a2:4b:46:bc:c5:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:EF:86:BA:3A:ED:13:B8:41:2A:3C:A5:0F:74:63:5B:A4:55:30
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c6Pvhro67RO4QSo8pQ90Y1ukVTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.8.0/22
93.171.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0b:a9:c2:c6:68:a6:5a:17:5d:fb:92:da:1d:06:e4:95:f3:
c6:f1:2c:29:6d:04:c4:c5:5e:a4:8c:3b:7a:64:d7:b9:21:03:
46:7c:07:8f:17:2a:f2:1f:b5:de:86:1f:a5:4b:62:b7:c6:ee:
0a:4e:47:10:bd:c9:3c:63:2b:fd:13:0c:af:8d:fb:28:9c:fc:
b4:da:ec:7b:f6:34:99:fd:82:a3:40:93:f3:3f:fb:cd:8d:dd:
6c:69:1c:89:c0:18:8f:32:f0:68:29:1a:be:d0:fd:8a:13:86:
00:5b:08:00:b3:f9:63:02:47:1a:fa:e0:3b:92:ac:bd:0d:69:
ea:74:89:6c:fc:26:f6:31:d9:e9:1b:52:96:6b:04:61:8a:20:
33:f1:75:5f:fb:94:d8:65:33:7a:f5:4f:e2:d0:3f:df:15:d7:
8b:72:10:2f:68:9b:33:6d:47:3d:59:52:1a:51:f6:54:e4:04:
23:34:71:73:c1:34:e1:6f:c8:d5:2c:e0:34:1f:bb:48:e3:45:
70:4c:04:4c:ca:18:af:c1:4b:d3:c0:df:81:78:83:92:40:52:
14:db:4c:04:88:1b:fc:10:c4:71:17:d1:00:94:3f:6a:3b:19:
35:7a:0b:10:c7:a3:0f:57:2d:89:db:6f:34:7f:90:ed:ab:a9:
24:b0:6d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:11 2025 by rpki-client