Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l7AtUlVFDdPZzL5MQKOUSc1eq8w.roa
File: l7AtUlVFDdPZzL5MQKOUSc1eq8w.roa (raw, json)
Hash identifier: 82f930GNmK1JBVMbA78c+ggQoyMSjaLahZgE5MMVzXQ=
Subject key identifier: 97:B0:2D:52:55:45:0D:D3:D9:CC:BE:4C:40:A3:94:49:CD:5E:AB:CC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCB220BB79225C95EDBDE3A430938
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l7AtUlVFDdPZzL5MQKOUSc1eq8w.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59679
IP address blocks: 31.148.223.0/24 maxlen: 24
146.120.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cb:22:0b:b7:92:25:c9:5e:db:de:3a:43:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b02d5255450dd3d9ccbe4c40a39449cd5eabcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:16:31:4e:dc:84:2f:83:bb:4b:e9:f4:f2:
84:bb:0f:1d:74:1b:cf:a8:a6:a6:ce:b3:94:48:07:
be:a3:f2:cf:c1:47:e8:b0:0e:3b:2d:00:14:36:0e:
03:f5:bd:34:4b:f4:3d:a9:f9:66:2a:84:ef:e9:eb:
4f:a1:cb:8a:69:eb:b3:26:7b:8a:ab:62:2c:40:bf:
4b:ad:9c:55:3f:aa:78:5f:f1:28:60:1c:47:08:e5:
a0:84:7a:a5:2b:3d:78:29:86:70:19:50:fb:92:29:
0b:74:4c:38:07:b9:a1:7b:06:ea:e1:ea:cc:84:95:
e5:b9:e1:9a:4b:40:cc:28:58:65:eb:99:98:cb:50:
f8:47:cf:0e:66:72:da:76:9c:ad:76:f4:b9:d3:92:
f8:36:b1:3a:ec:43:01:41:85:4e:dd:49:25:49:ba:
66:8b:20:e8:41:02:78:43:9f:ce:ba:92:f6:05:db:
cd:32:78:de:6c:05:60:dc:fe:30:57:71:3c:eb:96:
9a:f7:46:aa:9f:c7:26:83:c3:b4:72:3c:76:92:db:
2a:b1:36:5b:36:60:92:be:52:59:02:30:ff:af:b0:
63:5f:49:ff:6b:3b:7f:80:e8:2c:cc:ea:7f:22:c7:
d4:fe:d5:b4:f3:c7:b6:c7:6b:c1:72:94:a6:17:7b:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:2D:52:55:45:0D:D3:D9:CC:BE:4C:40:A3:94:49:CD:5E:AB:CC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/l7AtUlVFDdPZzL5MQKOUSc1eq8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.223.0/24
146.120.108.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ef:3e:81:ae:0b:fc:1a:b4:2a:e2:ac:3d:cb:4d:65:d7:91:
db:83:9b:6c:11:8c:97:fa:a2:f0:d5:06:ce:bd:e6:37:8d:d7:
89:f1:4e:8b:4c:e3:af:fb:89:64:1f:6b:a1:51:21:50:cc:b5:
e9:74:dc:25:43:c3:b6:af:9b:a8:34:79:94:11:f9:ba:b8:e6:
0e:6c:0a:bd:94:0d:ce:b9:31:44:2a:f5:10:97:6e:6a:fd:ae:
71:83:1d:aa:d7:81:55:f1:11:53:7c:2e:a0:61:1a:bd:2e:92:
e0:33:44:ba:a5:5a:78:d2:65:d7:4c:df:01:19:2c:77:ce:8a:
21:c6:6e:ce:8e:88:9b:81:8f:6a:a4:ed:f3:ee:bd:5c:83:bb:
a2:3b:75:28:ea:bb:0c:9a:bd:6e:d4:7e:28:11:d4:c6:75:cf:
ad:df:18:27:77:71:55:7f:f3:ab:15:0a:e8:91:af:c9:74:25:
7d:c2:cb:bd:48:96:f3:23:a3:a7:e0:01:0d:42:93:f1:a6:dd:
30:2b:76:4a:a9:f8:50:fa:a7:f0:80:e8:14:5a:67:3b:84:e3:
cc:19:a9:87:a3:8d:6b:4e:bf:3a:1d:22:53:b8:0c:50:dc:eb:
81:0b:3b:24:df:00:73:5a:ad:c6:f5:5f:52:66:d5:26:bd:da:
5e:12:df:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:11 2025 by rpki-client