Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hiym1QZVS1hQAheIJfgKPJ_WPw4.roa
File: hiym1QZVS1hQAheIJfgKPJ_WPw4.roa (raw, json)
Hash identifier: afbfPfpBKWFpTda4M8GtWXlBmgGdL9/NrEjrjqqhCWg=
Subject key identifier: 86:2C:A6:D5:06:55:4B:58:50:02:17:88:25:F8:0A:3C:9F:D6:3F:0E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095B52BAF46E1D55329E08134919FDF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hiym1QZVS1hQAheIJfgKPJ_WPw4.roa
Signing time: Mon 02 Jan 2023 03:45:37 +0000
ROA not before: Mon 02 Jan 2023 03:45:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210519
IP address blocks: 92.38.50.0/23 maxlen: 24
31.148.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:b5:2b:af:46:e1:d5:53:29:e0:81:34:91:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=862ca6d506554b585002178825f80a3c9fd63f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:8f:bd:81:66:87:c0:aa:1a:e9:e4:2b:63:
10:a2:23:db:4d:b5:71:65:66:aa:99:cc:16:8c:92:
d3:cd:32:af:c6:b8:88:1d:f5:b1:91:89:f7:71:50:
ce:0b:80:b9:2b:10:3d:db:53:9f:10:94:fb:5e:bd:
ba:cd:7d:8b:8b:16:83:5a:db:20:20:08:39:85:ea:
14:8f:87:84:aa:da:06:3d:3c:00:ab:04:18:00:b8:
2e:63:67:e1:3a:f0:c9:9d:b1:2b:97:42:56:c9:3b:
a1:96:30:09:57:05:6f:2d:33:a2:c4:93:7b:5d:32:
6d:77:80:a3:6d:09:43:61:8f:df:e9:20:aa:8f:e4:
06:74:c5:e0:df:57:34:7f:23:86:d9:3d:33:9b:63:
d3:c1:9a:fa:f8:c1:1d:6c:de:2d:40:27:7d:84:08:
2d:db:d1:a5:1c:31:77:32:80:c3:e6:99:47:27:72:
32:1b:b3:5b:bc:fc:5a:5d:e2:1f:23:26:8f:3d:0e:
fb:f0:9d:43:d1:45:e1:80:7f:e6:2d:55:43:17:c3:
1c:19:b7:e4:ed:01:78:e7:2e:a6:41:53:76:b1:18:
df:66:3e:86:fd:40:86:ce:dd:20:24:8f:12:d9:bc:
81:a7:0d:2a:e9:e2:75:9e:62:21:fd:9c:ea:b6:cc:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:A6:D5:06:55:4B:58:50:02:17:88:25:F8:0A:3C:9F:D6:3F:0E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hiym1QZVS1hQAheIJfgKPJ_WPw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.196.0/23
92.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
33:5e:3e:2a:e0:e9:e1:7c:c4:42:26:90:1a:35:f4:95:76:4b:
41:e5:f2:87:37:f0:a3:70:db:36:37:ff:da:32:9e:e6:07:a8:
66:6c:77:e9:9f:82:90:c9:ef:88:34:2c:8d:0b:a7:b2:aa:b0:
36:4c:e1:6c:e2:0b:23:31:0c:1c:3b:1a:38:ae:d2:76:68:40:
c9:fd:28:cd:9a:ba:2b:7f:4b:40:6a:2e:a5:cb:6b:da:a9:ea:
6b:0a:08:de:82:3d:c2:3a:d3:00:8d:b3:24:13:06:cf:8f:06:
4a:d9:fd:6f:2f:18:7c:1e:04:93:25:f4:97:b2:7b:b5:80:fe:
19:dc:6b:a5:95:14:63:4a:e7:6c:be:00:14:4d:88:1c:94:4a:
5d:a2:0c:97:32:78:a4:09:10:a5:79:ee:6f:1e:30:49:35:ea:
79:cd:01:75:cd:96:a4:56:4d:d5:0a:92:b5:4c:3d:38:af:8a:
45:1d:70:a5:0e:57:1d:77:b6:1c:61:e7:34:a1:f1:a4:98:f3:
f1:0a:74:f5:09:41:d7:d9:e4:fa:03:da:d9:98:1b:83:dd:97:
d5:69:f1:92:28:c9:13:9d:25:60:bd:7a:82:3f:56:d3:4a:a5:
53:a1:79:33:06:65:7d:21:3b:f2:ad:0f:d6:57:8b:30:a1:10:
1a:71:9a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:33 2025 by rpki-client