Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/quNy3LKIZVnYSnoCCKS1IQBQJLo.roa
File: quNy3LKIZVnYSnoCCKS1IQBQJLo.roa (raw, json)
Hash identifier: cidrrtgE9TilsbJ+VOlxQh5Xw+MbQaDrdNyiqddzdhI=
Subject key identifier: AA:E3:72:DC:B2:88:65:59:D8:4A:7A:02:08:A4:B5:21:00:50:24:BA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018AB2C2AE419A861FE10820FB7BEA11B8F9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/quNy3LKIZVnYSnoCCKS1IQBQJLo.roa
Signing time: Wed 20 Sep 2023 13:23:37 +0000
ROA not before: Wed 20 Sep 2023 13:23:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56361
IP address blocks: 95.46.172.0/22 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
31.148.40.0/21 maxlen: 24
31.148.56.0/21 maxlen: 24
31.148.192.0/22 maxlen: 24
31.148.104.0/21 maxlen: 24
93.171.36.0/22 maxlen: 24
93.171.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:c2:ae:41:9a:86:1f:e1:08:20:fb:7b:ea:11:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 20 13:23:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae372dcb2886559d84a7a0208a4b521005024ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:f8:52:de:ab:15:7a:60:1c:24:dc:75:bb:
8a:5b:9b:75:03:e9:da:97:bc:0e:dc:84:98:1e:a7:
f8:67:55:c1:22:8b:61:87:bc:4e:0d:91:7f:c2:a2:
90:97:7d:91:e9:5c:59:67:77:85:56:ea:2a:d0:4a:
98:f3:92:89:4e:24:5b:90:d0:3b:63:9d:1d:d1:f8:
c5:af:10:a6:ac:c3:3a:62:56:b6:ab:27:1d:80:fa:
a0:90:f8:98:58:cc:ad:2e:0f:42:75:5f:2e:9d:01:
c2:c7:d1:ca:1a:8f:75:c5:41:ee:f3:60:97:ac:c2:
89:5a:cb:a9:38:93:4e:f5:c0:98:19:fd:db:0e:82:
c5:57:bf:3f:6b:70:ac:63:a7:19:1a:0e:c2:3b:ae:
97:4e:e6:e8:00:8b:a9:bd:98:47:9b:f0:52:49:9a:
e2:ae:23:4a:89:1b:62:83:3f:b6:d5:dc:6a:64:2a:
7f:4f:e6:c9:d2:82:41:c9:f1:3f:d0:26:ee:d9:d6:
9d:66:9e:92:61:7c:1e:1e:fb:04:c0:a9:fb:22:2a:
8c:9f:6e:44:f3:86:dc:80:ec:13:6c:14:2e:16:4c:
9d:a2:f0:b4:1a:7d:08:b1:ac:08:45:e8:34:f2:c8:
a0:4b:ad:05:42:ab:1d:08:62:54:97:7a:82:ac:28:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E3:72:DC:B2:88:65:59:D8:4A:7A:02:08:A4:B5:21:00:50:24:BA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/quNy3LKIZVnYSnoCCKS1IQBQJLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.40.0/21
31.148.56.0/21
31.148.104.0/21
31.148.192.0/22
93.171.34.0-93.171.39.255
95.46.166.0-95.46.175.255
Signature Algorithm: sha256WithRSAEncryption
17:3d:e6:ee:7a:21:e1:5f:1c:28:8f:61:2f:7b:c3:96:f2:f5:
54:8b:bc:5d:2f:b2:96:fc:69:e3:ec:d8:dc:14:8b:8b:17:78:
a6:6b:27:99:fc:30:00:4e:6a:75:f0:1f:49:fa:ad:4f:9b:f9:
4a:3c:06:df:65:44:c1:4a:2f:ca:5f:1a:d8:38:ff:36:19:de:
2a:1f:21:56:90:37:40:31:bc:62:12:fd:e3:db:a8:38:8f:a3:
35:a7:69:1a:2f:97:32:fc:44:cb:03:9e:f0:20:de:13:5d:da:
25:38:36:dd:2c:da:74:68:30:b6:c8:f0:b4:6b:f6:20:07:a3:
b6:91:91:a5:1c:47:03:13:a4:52:7f:8f:b8:20:34:28:b6:0e:
82:b1:06:dc:51:f0:2c:1e:d9:af:95:60:f6:2d:1c:d5:16:9b:
b1:11:02:03:d0:ad:22:83:d8:2c:e4:ff:c9:48:ad:f8:10:90:
3e:a1:a4:1e:e5:2b:8f:77:7e:9f:6f:33:4e:0a:b2:fb:5f:4e:
c2:c4:70:d7:7a:d9:a7:bf:a8:40:b9:0b:fd:d2:3d:e6:d1:ed:
fb:87:9c:19:d1:86:59:d0:97:76:a5:0f:61:f6:67:38:72:d9:
6e:76:4b:ed:ef:19:ef:e4:7f:7f:7e:7f:d6:ba:2e:06:ca:38:
fb:78:84:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:50 2025 by rpki-client