Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xHzmv1bln7E00LA2QiDuljHwVyg.roa
File: xHzmv1bln7E00LA2QiDuljHwVyg.roa (raw, json)
Hash identifier: jbWlPxeyl52p5sLbVa30h15ZUHf7bt4tysmXcd4R/W8=
Subject key identifier: C4:7C:E6:BF:56:E5:9F:B1:34:D0:B0:36:42:20:EE:96:31:F0:57:28
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD57F4021C0BC202D4D87796A70C6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xHzmv1bln7E00LA2QiDuljHwVyg.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61031
IP address blocks: 31.148.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d5:7f:40:21:c0:bc:20:2d:4d:87:79:6a:70:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c47ce6bf56e59fb134d0b0364220ee9631f05728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:05:86:2b:d6:d2:03:7a:24:a0:36:69:4d:
77:3b:d1:ad:47:3a:d1:74:3b:32:67:ef:74:73:4c:
20:6d:0b:1d:05:a9:e9:d1:19:75:95:b0:31:6d:37:
92:78:bd:7f:2e:48:9b:f9:2a:7f:69:03:35:bf:51:
66:01:48:5e:e4:b5:bc:37:14:fc:58:fc:4f:78:ef:
3d:53:24:d8:3a:4a:47:a3:e7:5e:27:ed:ee:05:c7:
6a:b6:5b:19:9e:25:7b:4e:c9:5f:26:00:03:fd:3f:
2b:25:c0:89:60:89:c1:02:2e:6a:fe:8e:60:f7:1e:
11:9e:03:c5:39:86:dc:9f:d9:6a:23:f4:c8:14:c4:
00:01:53:f1:8d:25:d6:ac:8d:10:2e:18:d1:91:0f:
ee:7b:3c:3f:a2:4f:2e:2d:7d:98:9e:3d:66:16:82:
ec:46:bb:3e:46:7d:60:3c:69:b7:69:21:6a:84:f9:
00:e2:ca:a6:4c:f7:a2:e7:70:ae:bb:1e:bf:4c:af:
c3:b8:0f:48:31:23:fe:02:38:a9:17:cf:ca:33:d3:
d3:d9:d4:ec:bd:a8:d9:50:1a:23:27:91:67:cc:9d:
65:ba:a5:00:d9:32:3e:4f:85:d1:58:d2:d9:9b:24:
b1:9e:e0:6d:6b:5b:01:bf:a5:12:17:d1:59:39:02:
b2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:E6:BF:56:E5:9F:B1:34:D0:B0:36:42:20:EE:96:31:F0:57:28
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xHzmv1bln7E00LA2QiDuljHwVyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.148.0/24
Signature Algorithm: sha256WithRSAEncryption
75:89:cd:36:98:9d:4c:d0:2e:7b:0f:32:7b:8a:b3:03:64:85:
26:74:b3:3c:8f:54:2b:54:60:13:e7:12:02:f9:82:d7:4f:f4:
fc:e4:a2:56:a6:90:15:0f:c9:9a:de:c3:b3:5a:1b:6f:06:4d:
b5:b3:2d:aa:cd:34:58:eb:ee:64:51:3f:c5:e8:5f:c7:dd:f7:
7f:d9:08:38:7f:38:7b:bd:85:b8:32:ee:65:cf:da:eb:a2:6f:
af:98:52:65:43:51:cc:01:7f:54:de:96:04:1c:37:5d:92:40:
4a:85:75:c1:8a:7b:f3:1a:64:fd:b9:9e:d5:5e:fd:83:25:17:
cb:de:45:23:3d:25:3c:34:c3:25:c9:bc:76:80:85:f9:e4:34:
73:6b:05:02:15:72:9e:c2:56:00:53:9a:20:2a:13:79:4f:b1:
90:cf:05:c8:eb:1e:ac:ec:5c:48:d0:3a:ee:db:09:ee:26:ac:
58:29:53:00:e6:25:be:02:53:30:43:22:3c:c9:b4:b8:a0:75:
fc:8d:18:7d:b7:a9:1f:ba:0d:db:d3:ff:8c:ec:ea:3d:38:5f:
70:ec:3d:0f:47:ea:6e:11:91:1f:1f:4b:d4:f4:24:b0:76:11:
82:21:d1:23:ee:08:1d:db:29:cd:45:3f:70:f3:af:9b:7d:8e:
70:79:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:12 2025 by rpki-client