Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u-MUB88JIzu6dlUj6FaLEpG_dUA.roa
File: u-MUB88JIzu6dlUj6FaLEpG_dUA.roa (raw, json)
Hash identifier: Hu07UGJnhoXPV9n866lHj+eO+YnmYNWv12tQuIdJ4Lk=
Subject key identifier: BB:E3:14:07:CF:09:23:3B:BA:76:55:23:E8:56:8B:12:91:BF:75:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27E5395A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u-MUB88JIzu6dlUj6FaLEpG_dUA.roa
Signing time: Sat 01 Jan 2022 16:09:04 +0000
ROA not before: Sat 01 Jan 2022 16:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59738
IP address blocks: 31.148.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669333850 (0x27e5395a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbe31407cf09233bba765523e8568b1291bf7540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:ef:39:3a:3d:e0:aa:dd:5a:bc:bd:c7:96:
5c:c2:27:58:24:b2:2c:67:3d:f9:38:fa:90:d3:c6:
64:41:64:a9:e4:ba:ca:77:d9:03:47:27:6a:e3:fc:
11:4e:b1:e1:4f:64:3b:15:b4:4d:59:75:03:30:d7:
4a:8f:49:1a:5d:38:b1:ea:a8:84:f2:54:06:74:59:
d2:64:93:ce:bb:d8:95:64:aa:2a:7e:c0:c9:f9:e5:
4d:4b:81:eb:a6:cd:0c:ce:1b:27:a2:17:2b:bd:4c:
c4:eb:bd:bb:b1:5e:f4:ec:a8:02:47:0a:7c:e3:07:
6f:da:b5:86:b6:b4:95:8a:a8:de:b5:1b:58:37:4d:
9d:16:6a:71:19:51:c6:b9:e3:1e:d0:c8:13:2f:18:
69:76:01:3b:51:af:67:a6:2c:05:fe:1e:93:7d:26:
f0:82:20:68:78:89:9a:d1:23:d1:7b:7d:69:c4:f3:
14:c8:b4:7f:da:43:3a:75:39:c8:02:ec:6d:98:b8:
b5:3d:ba:e6:d9:e8:96:90:9a:82:09:71:58:4c:7e:
81:6f:e2:5c:9c:de:27:77:3c:96:43:37:b7:34:39:
91:e4:01:c7:b5:b5:f2:8f:88:94:60:98:16:11:d0:
f0:aa:4f:eb:26:86:42:86:e9:22:40:b6:d6:6c:23:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E3:14:07:CF:09:23:3B:BA:76:55:23:E8:56:8B:12:91:BF:75:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/u-MUB88JIzu6dlUj6FaLEpG_dUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:35:0c:79:19:8d:cc:12:52:df:d4:c0:79:c2:d2:b6:b7:c4:
12:0d:55:27:86:43:39:68:4a:b8:b5:6a:44:f7:f5:8e:bb:83:
3c:67:51:17:d8:b4:d8:f0:b9:3e:98:fe:90:60:5c:a2:04:9e:
2b:3f:c7:b1:f8:fc:52:ce:2c:d5:35:17:1c:07:22:ce:04:30:
07:f3:bc:00:28:e7:70:c2:16:d0:09:0d:59:31:5d:3e:c6:8f:
73:52:55:e8:d6:0b:34:63:4d:db:fe:20:e4:3f:ce:71:b9:1b:
fb:0f:3e:a1:35:7a:c3:f3:45:19:a2:0b:20:4c:6a:ad:fc:0b:
94:a1:e7:e3:0d:65:ca:7f:02:df:3c:d3:ef:58:ca:05:cf:58:
36:26:84:f5:dd:21:c7:c3:02:9d:07:c2:01:28:82:78:00:d4:
7b:71:e1:b3:c6:0a:e6:c9:0f:b4:8b:7f:f2:88:f5:37:79:cc:
bf:3b:1e:b1:c5:cb:85:e5:63:ff:17:5e:ae:90:c9:41:c0:ef:
7a:53:6b:6b:3c:b9:81:0a:5c:50:da:82:66:cf:30:79:85:6a:
24:6d:f2:5e:ae:59:a4:6c:0a:2b:c9:c4:6f:26:be:57:53:7b:
b8:ac:cc:a3:22:42:89:6c:1c:69:d5:66:c2:fc:37:e9:ee:c1:
0f:9c:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:27 2025 by rpki-client