Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eoyzD5ZvgbG7faz9DVUOD4NbZ9k.roa
File: eoyzD5ZvgbG7faz9DVUOD4NbZ9k.roa (raw, json)
Hash identifier: 7/zEVFKM7iXei6dhIgb88Na05k3ySkYv8zq81S2QJRM=
Subject key identifier: 7A:8C:B3:0F:96:6F:81:B1:BB:7D:AC:FD:0D:55:0E:0F:83:5B:67:D9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0181D9DCF13FB2FCC87CAD3C056A3CB6C9E4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eoyzD5ZvgbG7faz9DVUOD4NbZ9k.roa
Signing time: Thu 07 Jul 2022 18:12:24 +0000
ROA not before: Thu 07 Jul 2022 18:12:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44975
IP address blocks: 31.148.1.0/24 maxlen: 24
31.148.174.0/24 maxlen: 24
31.148.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:dc:f1:3f:b2:fc:c8:7c:ad:3c:05:6a:3c:b6:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 7 18:12:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a8cb30f966f81b1bb7dacfd0d550e0f835b67d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:1a:61:3f:2c:79:16:fd:53:31:a5:6b:dc:
f3:82:e5:3e:04:85:27:21:d8:05:df:6b:c3:33:e8:
53:60:d4:52:64:3f:4f:2d:87:0e:69:df:63:ca:3d:
cf:63:9e:62:a2:77:a9:54:d3:f5:09:49:96:80:9d:
ca:98:72:91:a8:7c:38:d1:25:f2:3b:96:06:9c:87:
54:2a:89:89:2d:18:ac:23:2f:c5:9e:30:21:a1:8b:
ef:9b:fc:60:28:6d:6b:65:65:7a:2f:d7:00:6e:b9:
fa:85:d4:d3:e4:8c:36:a6:51:0a:7e:8a:e0:92:bb:
e0:15:66:c4:de:81:b1:6b:94:b6:5b:8d:3f:0e:bc:
72:80:c4:92:48:22:7d:7f:a1:b3:e5:36:51:fa:71:
b3:44:a2:4c:15:7b:00:dc:fe:58:b4:8f:d1:07:b1:
68:e7:3f:f9:87:27:dc:8d:01:c8:66:2c:3f:b7:22:
59:5d:02:89:19:7c:2a:b7:04:83:9e:4f:0b:17:e9:
a5:f9:e7:12:f3:2a:c4:4b:23:bd:a6:07:40:c6:80:
06:d7:ec:07:bf:1e:a0:37:5e:37:be:7e:14:b7:4b:
e6:27:ab:82:86:8f:56:02:e9:cb:69:f5:3b:90:2b:
16:fc:00:c3:e5:b4:a0:ac:8e:b5:6d:89:d3:86:8b:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8C:B3:0F:96:6F:81:B1:BB:7D:AC:FD:0D:55:0E:0F:83:5B:67:D9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eoyzD5ZvgbG7faz9DVUOD4NbZ9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.1.0/24
31.148.174.0/24
31.148.204.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0f:e2:28:0a:fa:d2:e3:26:b6:8c:9c:cf:f6:26:87:2b:37:
2c:04:f5:bc:6c:43:53:9e:01:e9:0b:d0:92:76:8c:e6:a6:17:
67:ea:b7:19:20:84:5c:28:95:33:c8:1f:1a:8b:36:d5:28:4b:
9b:c5:7f:0c:93:0e:59:f0:80:dd:4e:48:ee:f2:b4:52:e0:c7:
17:e8:72:be:22:a2:cc:f0:b5:cd:16:07:a0:c5:03:7c:fb:05:
d0:da:1b:a5:35:77:ff:3e:3c:2a:8c:2f:a0:40:4e:0c:b5:25:
72:53:40:b9:d4:d1:2a:cc:05:20:41:70:95:6b:5c:67:08:db:
04:b9:4c:b0:aa:6c:3c:04:7f:10:a1:e3:51:2e:01:c0:24:30:
fe:e0:28:95:a1:f7:44:13:c3:dd:34:0b:3a:a8:59:6e:eb:33:
05:d4:7c:7d:ed:34:5d:66:43:72:d4:ef:f3:ad:f5:08:58:f4:
b8:21:c9:ee:c3:45:68:f2:9f:72:8c:de:f2:07:a2:2b:2d:4f:
c0:88:24:13:a8:b3:90:08:22:c7:f4:65:e0:c7:8d:11:16:f6:
07:95:da:46:d1:d7:74:46:56:fb:c5:29:cb:05:a6:90:31:8f:
4f:5b:c6:ad:12:38:ef:5a:be:c1:75:6b:56:0b:35:9a:76:87:
73:3b:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:14 2025 by rpki-client