Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yKjhqmh8DPY32xQ3agtE9jTyrCw.roa
File: yKjhqmh8DPY32xQ3agtE9jTyrCw.roa (raw, json)
Hash identifier: aSwz0JdbvrAtR36ktxM65tNj9cun7yPZRCo+MDa7E4Q=
Subject key identifier: C8:A8:E1:AA:68:7C:0C:F6:37:DB:14:37:6A:0B:44:F6:34:F2:AC:2C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01869DAF80F660D453C29DA90B362473A281
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yKjhqmh8DPY32xQ3agtE9jTyrCw.roa
Signing time: Wed 01 Mar 2023 14:59:30 +0000
ROA not before: Wed 01 Mar 2023 14:59:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
93.170.48.0/23 maxlen: 24
93.171.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:af:80:f6:60:d4:53:c2:9d:a9:0b:36:24:73:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 1 14:59:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8a8e1aa687c0cf637db14376a0b44f634f2ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:fe:65:19:1a:a6:72:4a:15:65:03:9e:93:3b:
9a:6a:00:73:dd:9b:7c:68:e6:2e:07:e1:b8:2b:09:
ce:2b:c2:a7:f0:b7:0d:68:16:b0:9c:4f:cb:60:a6:
37:40:19:43:21:69:e9:3d:50:0f:89:41:54:d5:27:
89:f1:8b:80:3d:8a:f7:65:75:c6:e6:38:89:dd:9d:
3a:e0:63:47:ce:fa:41:2a:9d:c5:56:80:c8:d4:1c:
f6:fb:9d:0a:c9:29:14:2a:04:24:25:8e:06:ea:7b:
7f:5c:17:4f:89:27:db:9a:3f:0d:17:19:09:2b:cf:
f7:93:4e:7f:3f:39:4c:64:0b:cd:45:a8:4d:3b:81:
9e:07:cd:0f:24:4f:fd:be:17:b0:60:aa:96:82:df:
86:54:35:40:b2:6d:4e:31:7d:ea:23:5c:ab:a4:2c:
d0:d5:a9:a6:82:03:5e:19:92:b1:06:7c:4d:be:fe:
f5:17:7b:63:1c:23:f7:4a:52:86:f3:5c:2f:4b:dc:
04:cd:f0:62:9f:73:35:39:6c:40:f7:c8:25:16:b9:
f7:75:e0:e3:53:93:e2:54:fc:01:71:c0:b7:ce:24:
89:6c:51:e3:af:e7:fb:6c:24:46:59:e1:11:d7:44:
fc:43:06:64:6a:e4:8f:70:a5:cc:5b:50:2b:76:ac:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A8:E1:AA:68:7C:0C:F6:37:DB:14:37:6A:0B:44:F6:34:F2:AC:2C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yKjhqmh8DPY32xQ3agtE9jTyrCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
93.170.48.0/23
93.171.236.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:1f:e9:35:11:63:31:e7:3d:13:fb:71:f3:c7:58:4c:7f:94:
11:15:bb:e0:09:79:12:f0:2b:b9:ae:c7:17:c9:54:47:ce:75:
b7:03:04:74:aa:8b:50:07:35:e9:4d:de:1c:84:43:5a:5d:e5:
c7:5c:00:de:0e:34:22:3f:b7:9f:82:3e:43:49:80:4b:6a:16:
25:39:43:d7:b1:ee:8a:0f:80:20:06:b0:26:a6:19:2f:d5:5f:
95:9d:60:e4:e0:01:68:d0:dc:cb:0a:a3:c8:58:b6:35:1e:69:
8a:a7:49:d0:6b:c4:74:a1:59:40:c6:9c:43:74:fa:91:f3:9e:
3b:69:fe:c5:24:b2:69:f5:dd:61:4b:8d:80:c9:19:2e:8f:02:
10:9f:94:33:01:a2:04:9f:c6:7a:78:ea:a4:bb:90:d8:5f:2c:
c4:fd:9f:c3:5b:2e:28:f0:06:7f:37:07:7b:57:6f:09:34:a6:
a2:33:0a:95:7a:4a:81:7e:9d:65:71:d5:0e:12:9a:16:19:5b:
48:b9:27:e4:4a:3e:6c:0a:6b:09:cd:b4:d4:8b:81:96:45:db:
52:c0:dd:7f:83:c4:f7:67:3d:61:a2:01:ea:e5:32:c3:7c:2d:
0e:3f:00:4e:76:56:56:11:3c:63:c3:cc:f4:65:29:bb:0f:fc:
25:01:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:06 2025 by rpki-client