Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eUQ81AXmEi-cmXp4s0qAqLZE9eg.roa
File: eUQ81AXmEi-cmXp4s0qAqLZE9eg.roa (raw, json)
Hash identifier: u+NOSsinahiFOVHb6mYyt/pL0Z1A1QFLhX2msBJhnRc=
Subject key identifier: 79:44:3C:D4:05:E6:12:2F:9C:99:7A:78:B3:4A:80:A8:B6:44:F5:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019514DD0210742DDDEC1FE9BEF5D74580B9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eUQ81AXmEi-cmXp4s0qAqLZE9eg.roa
Signing time: Mon 17 Feb 2025 17:03:03 +0000
ROA not before: Mon 17 Feb 2025 17:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35004
IP address blocks: 31.148.149.0/24 maxlen: 24
93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
95.46.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:dd:02:10:74:2d:dd:ec:1f:e9:be:f5:d7:45:80:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 17 17:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79443cd405e6122f9c997a78b34a80a8b644f5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:90:e2:f0:37:37:46:f0:e9:ea:78:bb:2e:
97:97:d1:d9:18:8f:fe:55:1f:cd:2e:85:d2:0a:56:
a7:5a:81:4d:67:a9:b2:c1:53:05:a1:5f:1d:ed:66:
79:2b:db:e9:62:da:f4:bc:ef:22:2f:92:25:01:4a:
7c:6a:37:1d:a5:9e:25:8b:0f:07:9a:b1:a5:5f:1b:
cc:8c:f7:a4:9e:a3:dc:09:c6:33:fa:a8:82:ad:f8:
a2:a8:c3:47:b0:f7:f3:d9:fe:01:25:69:ed:b2:ba:
44:d7:b1:c1:75:6a:2e:c0:02:ba:d8:f7:41:8f:37:
09:93:fa:1e:ef:d4:b5:fb:8c:d2:32:87:c3:52:3a:
97:41:84:61:c2:a3:b7:8f:8d:97:ba:af:00:31:fa:
33:70:c6:62:df:08:e7:69:ee:81:b1:18:40:67:38:
2e:78:89:62:26:44:f8:77:a4:35:8c:bc:0a:b1:f5:
55:5e:5b:d8:65:c0:9e:86:3f:0e:95:93:e6:4f:d0:
f3:19:a5:81:3a:75:3f:8e:f9:74:4d:55:1d:53:50:
fb:3c:29:a9:d5:fa:1f:43:bc:eb:db:0b:0c:9b:2b:
dd:d9:de:5d:ba:1f:87:cb:cf:13:46:e6:bf:b6:b0:
48:09:13:33:df:d3:2b:08:82:97:09:56:83:05:51:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:3C:D4:05:E6:12:2F:9C:99:7A:78:B3:4A:80:A8:B6:44:F5:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eUQ81AXmEi-cmXp4s0qAqLZE9eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.149.0/24
93.170.116.0/22
95.46.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:01:71:4f:6f:7c:bf:d9:1a:11:e3:b1:17:84:33:1f:db:5c:
90:4c:90:fa:c4:ba:57:f2:7d:72:fc:17:d4:79:88:32:4d:62:
04:55:42:cd:8b:25:eb:35:52:77:0d:a2:f1:7c:c4:f9:1a:f0:
4a:02:d4:d2:d8:4a:c5:32:0b:3b:6f:51:35:f7:5f:88:b3:2e:
4d:09:06:a4:9e:c2:67:fc:b3:5d:78:72:9d:33:a8:b7:25:84:
d8:36:74:40:d6:39:27:e8:b1:7d:c6:31:6e:9d:77:d3:bd:84:
76:53:7f:fb:29:22:af:b9:83:fc:1d:69:5d:e7:ee:0f:8a:af:
5a:43:6b:ce:be:97:62:72:7d:41:1f:82:19:7f:2f:4c:d0:1d:
ea:40:77:7d:20:27:f6:ae:60:97:4b:28:29:8e:2f:a8:95:4b:
e3:50:84:48:08:22:e2:6c:56:f3:cb:bf:1c:7e:26:64:6f:66:
6a:54:a4:30:3c:b8:d2:7f:7a:f4:65:8c:5a:21:d0:a5:6c:ff:
88:e0:5e:ae:6a:a0:03:d4:e6:ee:b6:15:59:1d:83:6d:88:bb:
48:1d:92:23:8f:54:72:55:6d:ff:84:e2:9b:25:6f:1f:53:ed:
58:b1:ee:4b:f1:a0:9f:38:f3:1d:4e:63:0a:bf:ed:7e:d9:ee:
78:71:2a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:03 2025 by rpki-client