Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xtrYHXEw68EoW5s_c-Q9BBdHO48.roa
File: xtrYHXEw68EoW5s_c-Q9BBdHO48.roa (raw, json)
Hash identifier: h9LyVD1lGtV7YC5tCNZOeliu4easG3TlGH6R6cJvW/8=
Subject key identifier: C6:DA:D8:1D:71:30:EB:C1:28:5B:9B:3F:73:E4:3D:04:17:47:3B:8F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC84B52E3D4C8525EF919D15A0F9D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xtrYHXEw68EoW5s_c-Q9BBdHO48.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58347
IP address blocks: 31.148.248.0/23 maxlen: 24
93.170.5.0/24 maxlen: 24
95.46.159.0/24 maxlen: 24
95.47.36.0/22 maxlen: 24
95.47.234.0/23 maxlen: 24
95.47.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c8:4b:52:e3:d4:c8:52:5e:f9:19:d1:5a:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6dad81d7130ebc1285b9b3f73e43d0417473b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:af:2a:66:89:6c:04:bf:ec:c9:ad:cd:ff:
8a:7e:9b:03:8f:16:2f:b4:f4:de:79:14:75:c7:71:
f0:31:e9:6d:7e:aa:c2:45:27:ba:db:d2:4f:9d:d8:
90:34:17:2e:f7:5b:c0:09:28:63:bd:cb:2e:18:3a:
87:08:56:ef:3b:8c:7f:1c:ed:cc:ac:2a:3f:25:74:
38:b6:09:93:67:6f:85:54:92:3e:f5:b0:43:4d:d9:
bb:61:c7:35:bb:12:01:0c:64:44:90:66:d5:1a:b3:
10:7e:6b:4c:67:19:fa:05:e9:bc:9d:65:1f:4b:e1:
1e:6f:fc:0e:95:6b:ca:98:d7:d4:dd:7e:1f:a5:08:
2f:e2:88:23:17:0f:eb:b7:c8:a7:3f:14:67:53:43:
44:0e:43:f0:7d:d2:28:89:f6:49:03:13:d2:90:f6:
db:a2:06:9c:7e:b6:7c:6b:00:ae:73:96:61:e9:46:
6d:ed:2f:3d:e4:6a:a1:97:39:cf:0a:f2:84:0f:fb:
05:c2:76:27:6c:f3:8b:d6:66:84:77:2f:a8:58:d2:
d8:17:d3:e1:ea:40:e1:2b:26:8d:a1:7b:1f:4e:7e:
f3:ac:3b:a4:98:66:32:00:2d:66:25:38:00:9a:5b:
30:80:5c:d0:36:ac:ee:1c:dd:85:d1:1b:13:d9:97:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DA:D8:1D:71:30:EB:C1:28:5B:9B:3F:73:E4:3D:04:17:47:3B:8F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xtrYHXEw68EoW5s_c-Q9BBdHO48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.248.0/23
93.170.5.0/24
95.46.159.0/24
95.47.36.0/22
95.47.234.0/23
95.47.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:55:24:7f:79:f6:1f:d1:e1:13:67:bc:1d:ae:47:09:11:
dc:b4:02:6e:2f:17:e0:ea:b5:13:ec:95:23:b8:f2:62:c3:31:
9e:fb:c5:e7:db:df:5c:78:4a:e2:a0:15:51:0a:9d:7e:5a:99:
ef:11:32:9b:30:63:5c:f7:10:29:ca:4e:04:a6:47:e1:29:34:
78:47:f1:af:4e:18:aa:6a:dd:2d:aa:cd:06:10:00:a7:25:08:
9d:a1:12:19:3b:11:00:a1:7b:ff:1c:dc:a7:74:90:a1:a6:3d:
e4:cb:03:e4:74:dd:03:ba:98:35:20:1e:a8:2f:a3:79:3b:17:
ed:aa:68:50:6a:41:0e:5b:04:66:85:5e:63:bf:5f:d5:7a:90:
59:49:d5:b1:24:1f:3e:b7:6a:6e:cf:af:ae:08:ad:e8:18:fd:
82:ad:2d:95:52:0b:26:37:5a:f1:4f:06:50:4c:e5:46:c5:94:
75:fa:48:8e:45:b4:55:2b:f4:7b:04:d3:d3:23:68:e8:59:29:
a2:0b:7c:84:48:b4:ec:f1:8f:5f:1a:3f:30:f4:85:a5:56:fa:
16:5a:77:ac:94:23:ae:7e:e4:1b:5b:c3:ff:3d:27:de:00:c8:
a4:a8:66:d6:16:e3:b0:1f:50:f5:78:12:c5:8d:55:24:9e:08:
2c:c4:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:52 2025 by rpki-client