Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hVd7byABrXh_prMFLSgfTrQ5j3k.roa
File: hVd7byABrXh_prMFLSgfTrQ5j3k.roa (raw, json)
Hash identifier: AnroWbUJIsL6A10DQZOfiU/UDgxFfi5+zgAmuBdE+/Q=
Subject key identifier: 85:57:7B:6F:20:01:AD:78:7F:A6:B3:05:2D:28:1F:4E:B4:39:8F:79
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0193DEDB74309B78CB987B2BD5EEE4A64310
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hVd7byABrXh_prMFLSgfTrQ5j3k.roa
Signing time: Thu 19 Dec 2024 12:19:04 +0000
ROA not before: Thu 19 Dec 2024 12:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49038
IP address blocks: 31.148.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:db:74:30:9b:78:cb:98:7b:2b:d5:ee:e4:a6:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 19 12:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85577b6f2001ad787fa6b3052d281f4eb4398f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:b6:cc:88:17:9c:c0:f4:66:01:c4:81:b6:
b0:56:b5:7f:55:f5:2a:84:eb:89:02:44:53:57:9e:
2b:c4:a5:1b:e6:15:84:9b:d5:a8:e5:b5:ec:0d:bf:
ec:a0:ac:c5:84:5f:63:aa:02:2b:95:d3:51:5a:89:
1a:fc:7b:70:1e:d0:82:81:86:ed:ee:fe:32:8f:53:
34:18:14:4d:25:98:42:81:62:6c:be:23:4e:21:c5:
b2:87:e7:b1:de:82:23:f0:9e:cc:7a:fb:9c:dd:76:
0d:32:f0:b9:e2:76:a8:67:7a:79:1e:ca:ad:1d:8a:
50:52:4d:0e:32:57:4c:13:59:12:e3:50:a5:c6:72:
71:f9:47:bc:d9:bd:9d:3a:5f:4b:d8:e5:b5:66:ee:
41:23:97:ac:f2:ac:e9:f5:4c:32:10:0f:f0:c7:d2:
a2:15:fd:48:a0:05:25:39:01:4a:f6:71:a1:6b:67:
1a:3d:cb:04:28:f1:cd:fc:61:f6:83:b3:5a:01:5b:
df:50:01:8d:70:94:06:3b:4d:75:8e:73:ac:b9:03:
9f:df:e3:80:a5:76:22:9b:d4:d4:aa:4a:23:85:b1:
7d:53:4d:35:5e:12:06:f0:2f:32:e8:61:8a:81:ae:
c3:f4:f4:54:84:2a:90:a4:a2:c5:e5:ca:4b:57:53:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:57:7B:6F:20:01:AD:78:7F:A6:B3:05:2D:28:1F:4E:B4:39:8F:79
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hVd7byABrXh_prMFLSgfTrQ5j3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:73:5f:54:0d:51:6b:91:19:86:21:82:1d:86:03:e1:a9:a4:
13:56:67:53:4d:13:8f:2c:05:5c:9b:47:ec:52:9d:10:2e:5d:
05:f0:bf:d2:72:ab:6a:0e:81:e5:44:b0:92:41:46:df:f6:bf:
68:d7:bb:72:8c:ee:f0:a9:79:c3:75:aa:3f:c4:11:7c:50:be:
9b:52:f5:62:d1:2b:89:92:93:9f:ab:69:12:ca:4e:f1:78:10:
f9:29:75:6c:a5:46:e7:c2:a2:39:05:ac:8b:e4:7e:87:dc:e8:
10:4b:a2:1a:1e:27:d5:46:83:c2:c6:04:6f:5b:58:80:62:f9:
5b:fe:04:8c:48:05:f4:65:4f:ba:a9:84:79:94:9d:9d:ab:ca:
82:aa:81:04:2b:c2:ce:42:89:7c:f2:c4:be:6b:8b:d8:68:49:
33:23:dd:7a:4b:da:74:f4:47:b1:98:07:a5:92:12:ca:c1:ff:
cc:f2:69:d1:1e:b3:e3:7d:3b:da:43:b5:05:6f:47:5a:11:31:
01:d9:4c:1f:d6:44:83:2f:32:99:94:04:c4:3c:83:44:09:c2:
1c:58:ea:64:4a:d1:1a:40:99:64:36:4b:df:53:b8:60:d4:99:
53:37:f9:85:34:40:db:86:13:91:9f:4e:e7:08:9b:88:b7:65:
de:00:d6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:21 2025 by rpki-client