Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7JH3iqVxkXMOasnl12B3-mlr7o.roa
File: x7JH3iqVxkXMOasnl12B3-mlr7o.roa (raw, json)
Hash identifier: FTT8kS+lhORyah+wImequ9AuVeqkVbxP5S3j9V0xGwA=
Subject key identifier: C7:B2:47:DE:2A:95:C6:45:CC:39:AB:27:97:5D:81:DF:E9:A5:AF:BA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2855021D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7JH3iqVxkXMOasnl12B3-mlr7o.roa
Signing time: Sat 01 Jan 2022 16:10:15 +0000
ROA not before: Sat 01 Jan 2022 16:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210519
IP address blocks: 31.148.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676659741 (0x2855021d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7b247de2a95c645cc39ab27975d81dfe9a5afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:13:68:9c:c5:88:da:2b:e4:bb:57:3b:b1:
f8:73:18:a9:8d:e8:ce:6e:77:aa:fd:73:a6:ed:13:
72:bb:38:56:27:51:f1:dd:eb:09:7d:7f:a4:96:14:
6b:20:00:d2:94:64:8c:93:9d:25:8b:db:58:c2:df:
99:df:a8:8f:f1:e0:f3:f9:2b:15:fe:53:26:2a:29:
b9:74:bf:4b:84:9b:75:84:1e:61:25:fa:4d:27:0f:
f4:4e:3c:85:9f:9b:b3:db:2d:67:82:25:d4:ab:c6:
ba:fe:7a:ce:3d:64:bd:99:90:a9:d7:11:58:33:25:
70:25:a4:4e:b6:2c:83:84:00:87:ec:d0:c1:f4:66:
ec:e4:82:d8:34:50:34:78:4d:b8:cd:3f:af:8e:6f:
da:5f:3c:cc:39:bb:32:15:0c:82:7f:bb:27:14:cf:
16:ca:82:13:96:82:c2:b1:e7:d9:b4:14:7c:5f:c8:
ae:0d:17:7a:60:a7:81:24:00:c5:9a:76:ad:f9:7b:
0e:bc:33:4b:30:c0:9d:b2:9c:ac:ca:a1:87:ea:7e:
0f:5a:d4:23:36:a0:e1:8b:1e:e0:dc:6a:5a:d5:f6:
9c:c3:e7:8d:a9:d8:25:99:87:59:fa:b0:5c:a1:ac:
fc:31:a7:48:0b:a3:8a:71:60:08:6a:0f:06:96:1d:
e4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:47:DE:2A:95:C6:45:CC:39:AB:27:97:5D:81:DF:E9:A5:AF:BA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/x7JH3iqVxkXMOasnl12B3-mlr7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.196.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5b:3f:f3:63:a5:6a:80:4e:fd:11:b4:af:d0:bd:cd:4f:05:
16:0d:03:27:b4:78:cd:75:99:fc:e7:01:a7:92:8b:0c:e2:64:
02:25:5c:07:48:c7:7a:62:2b:26:a8:0f:0a:84:1c:61:4f:c2:
da:7c:51:6d:98:50:bd:31:8f:b0:ec:e9:de:61:0e:b5:ae:d3:
49:5a:a5:97:0e:b7:ff:0e:45:98:e2:46:07:e0:90:b9:e5:3c:
77:55:9d:4c:41:62:59:58:56:28:3f:c7:f9:9e:1d:71:e1:f3:
c9:98:2e:e1:40:f6:02:f2:d8:94:2b:65:a6:7f:41:53:56:84:
13:4b:c1:c2:de:84:35:3c:7c:9c:24:07:a9:4a:9a:b7:39:00:
c8:ca:e1:b4:12:68:92:0f:36:49:20:d6:83:3e:b0:c8:db:58:
9d:b7:a5:1e:07:63:fd:81:3a:e0:cf:6e:5e:2c:6c:46:52:58:
69:05:96:ea:d0:c5:29:3c:03:25:7d:7c:63:63:ed:f9:d8:7c:
5a:3d:5f:f2:80:7b:f8:4c:4a:b2:aa:fd:25:e2:ec:28:96:5f:
71:d2:72:da:3e:ae:33:83:17:9d:34:f9:50:f2:82:de:b3:49:
d8:60:f8:63:85:c8:7c:5a:7f:1c:69:a3:35:f4:76:1a:9d:44:
ba:5e:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:35 2025 by rpki-client