Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wv1ri2rgArkblEg8pewvt4pBb5w.roa
File: wv1ri2rgArkblEg8pewvt4pBb5w.roa (raw, json)
Hash identifier: l0sx6pX6uzbDVBkPSihXAGxEz+lVxb332VOh6oaqs0w=
Subject key identifier: C2:FD:6B:8B:6A:E0:02:B9:1B:94:48:3C:A5:EC:2F:B7:8A:41:6F:9C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCD01C9140F9FF38DCD5C2D366A88
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wv1ri2rgArkblEg8pewvt4pBb5w.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59738
IP address blocks: 31.148.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:01:c9:14:0f:9f:f3:8d:cd:5c:2d:36:6a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2fd6b8b6ae002b91b94483ca5ec2fb78a416f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:87:5a:cf:62:53:8a:d0:e7:35:12:21:31:
da:ea:15:3f:67:6e:ce:5b:68:cf:3d:e4:45:96:14:
44:1d:86:c6:09:01:de:0c:ae:7b:cf:bc:4e:be:4a:
e3:0f:ae:7f:e8:bf:63:1b:e0:62:8f:7b:dc:f1:9e:
3f:0a:d4:5e:cf:a9:5a:30:fa:15:f1:95:a7:da:7c:
9f:ad:11:06:01:7f:87:26:56:35:dc:05:f5:8a:35:
b5:ff:a2:46:e4:9a:69:d5:ad:52:22:b4:2e:2f:9a:
14:ef:85:41:34:f6:a2:57:57:f6:f0:71:1e:f9:9a:
17:1d:22:58:ad:48:9c:7d:69:ea:af:bb:15:6e:87:
16:1a:39:21:7e:b8:58:9b:a8:0e:68:1c:4e:8c:4e:
36:a4:3d:9d:62:c4:f6:93:f8:71:98:2e:00:73:ca:
0b:88:c2:e4:45:3a:d9:29:24:47:7b:1d:c6:e1:f7:
59:d1:c8:42:8f:3b:76:62:19:c1:f8:4f:a5:1a:e0:
d3:46:33:2b:91:da:88:a2:a9:f3:1c:f5:c8:58:13:
b0:19:14:97:55:01:92:26:2f:6b:b6:64:9a:81:8b:
ee:20:a5:77:e8:db:88:f5:34:4c:df:1d:56:e4:8a:
f5:27:e9:78:d8:88:23:99:29:5c:4a:15:42:a3:3d:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FD:6B:8B:6A:E0:02:B9:1B:94:48:3C:A5:EC:2F:B7:8A:41:6F:9C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wv1ri2rgArkblEg8pewvt4pBb5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:38:2b:b6:c4:bb:a0:2f:ba:b8:cb:d2:81:75:48:d6:89:c4:
ad:ad:41:b8:fc:23:ac:a0:fd:5d:e4:d4:92:36:cc:8e:2b:f6:
b1:51:f7:7d:0e:ee:d4:0a:a1:af:ab:ca:a2:4d:e2:bf:1a:c6:
74:b9:65:c6:5b:08:78:12:3d:b6:4e:80:2d:ae:fc:a8:d1:d3:
65:c7:b2:d1:d5:82:96:13:ca:e7:c4:17:0f:08:2c:05:19:ea:
48:70:30:75:23:fb:3d:b0:5d:e2:db:d0:7b:28:70:7b:95:42:
a0:ab:5e:78:f9:4f:31:84:4e:37:c8:77:eb:de:b1:aa:8b:d8:
b1:5c:da:a8:5b:cb:87:44:e5:ed:51:de:2e:b4:7c:9d:23:69:
51:d9:c9:ec:c0:1b:eb:36:e5:74:e0:09:ff:98:3e:f8:21:5d:
40:09:fc:5b:48:52:d8:6d:cb:3a:e3:88:ca:30:29:e8:35:73:
c8:da:ee:e8:d7:07:fc:a5:cd:26:37:44:3f:be:11:47:a0:01:
78:fb:bc:51:da:c6:71:97:9a:82:a4:d4:30:36:48:83:bd:01:
ab:75:f0:2b:6d:78:9f:1c:4d:fd:eb:45:94:38:dc:1b:32:08:
27:6b:a8:38:52:0e:ee:e4:5d:b6:07:40:2e:b6:8f:23:20:c2:
3f:97:6a:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj80ByRQPn/ONzVwtNmqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmZkNmI4YjZhZTAwMmI5MWI5NDQ4M2NhNWVjMmZiNzhhNDE2ZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ6HWs9iU4rQ5zUSITHa6hU/Z27O
W2jPPeRFlhREHYbGCQHeDK57z7xOvkrjD65/6L9jG+Bij3vc8Z4/CtRez6laMPoV
8ZWn2nyfrREGAX+HJlY13AX1ijW1/6JG5Jpp1a1SIrQuL5oU74VBNPaiV1f28HEe
+ZoXHSJYrUicfWnqr7sVbocWGjkhfrhYm6gOaBxOjE42pD2dYsT2k/hxmC4Ac8oL
iMLkRTrZKSRHex3G4fdZ0chCjzt2YhnB+E+lGuDTRjMrkdqIoqnzHPXIWBOwGRSX
VQGSJi9rtmSagYvuIKV36NuI9TRM3x1W5Ir1J+l42IgjmSlcShVCoz3KnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFML9a4tq4AK5G5RIPKXsL7eKQW+cMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvd3YxcmkycmdBcmtibEVnOHBld3Z0NHBCYjV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QGMA0G
CSqGSIb3DQEBCwUAA4IBAQCbOCu2xLugL7q4y9KBdUjWicStrUG4/COsoP1d5NSS
NsyOK/axUfd9Du7UCqGvq8qiTeK/GsZ0uWXGWwh4Ej22ToAtrvyo0dNlx7LR1YKW
E8rnxBcPCCwFGepIcDB1I/s9sF3i29B7KHB7lUKgq154+U8xhE43yHfr3rGqi9ix
XNqoW8uHROXtUd4utHydI2lR2cnswBvrNuV04An/mD74IV1ACfxbSFLYbcs644jK
MCnoNXPI2u7o1wf8pc0mN0Q/vhFHoAF4+7xR2sZxl5qCpNQwNkiDvQGrdfArbXif
HE3960WUONwbMggna6g4Ug7u5F22B0Auto8jIMI/l2qG
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:44 2025 by rpki-client