Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4d1g0dkaPu0iBdb9biPZFuUNTzI.roa
File: 4d1g0dkaPu0iBdb9biPZFuUNTzI.roa (raw, json)
Hash identifier: Deefsje9n1CsJMZPZZrefkRgpiCqgGXC6CYjQHe1pwo=
Subject key identifier: E1:DD:60:D1:D9:1A:3E:ED:22:05:D6:FD:6E:23:D9:16:E5:0D:4F:32
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0196159CFDF0DDCF1F6BD6E2B68531343ACF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4d1g0dkaPu0iBdb9biPZFuUNTzI.roa
Signing time: Tue 08 Apr 2025 13:35:32 +0000
ROA not before: Tue 08 Apr 2025 13:35:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61031
IP address blocks: 31.148.148.0/24 maxlen: 24
31.148.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:9c:fd:f0:dd:cf:1f:6b:d6:e2:b6:85:31:34:3a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Apr 8 13:35:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1dd60d1d91a3eed2205d6fd6e23d916e50d4f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:a9:26:92:f7:cf:b3:33:8d:64:43:39:82:
c2:e3:22:95:bd:32:eb:92:29:a4:13:e3:23:d4:56:
43:60:88:3b:df:ab:ea:ba:dc:92:9c:12:b9:58:0e:
16:69:3a:90:c1:8d:e2:d3:6e:5b:9b:00:8c:90:c2:
0e:66:62:e1:15:e2:0a:7a:c9:77:33:b8:35:f7:43:
07:07:9e:07:d3:b7:10:ea:20:2f:3a:dc:c8:fe:5d:
68:c1:ed:5c:68:fe:e5:aa:ad:b9:d8:a1:c2:a8:d0:
61:c3:54:48:bb:d0:0e:11:9b:25:6b:62:34:b8:9b:
47:b1:77:92:e6:d3:3f:2e:c8:2f:46:c4:67:6a:8e:
a1:ed:43:9a:b4:6b:f3:d7:1f:79:77:9b:c7:69:6d:
03:b7:34:73:33:cf:5d:02:1f:91:3a:7c:76:68:4e:
d8:a1:ff:24:f6:28:22:51:84:f5:76:df:24:18:3c:
e9:4f:f3:2e:90:bf:b0:52:e7:09:0a:c2:84:db:e6:
f9:82:83:24:1e:48:02:84:04:49:c8:49:4e:57:53:
64:bd:2c:90:1f:07:fb:6b:50:77:95:2b:e7:fb:10:
06:95:9a:a8:4d:ce:d6:29:c2:73:fe:35:22:4a:14:
c8:0f:fe:77:ff:65:4a:b9:c5:46:ed:4e:57:4c:a9:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:60:D1:D9:1A:3E:ED:22:05:D6:FD:6E:23:D9:16:E5:0D:4F:32
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4d1g0dkaPu0iBdb9biPZFuUNTzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.148.0/24
31.148.246.0/24
Signature Algorithm: sha256WithRSAEncryption
43:22:a3:f7:8c:eb:45:0c:29:9f:5c:ff:15:64:e0:8c:2e:51:
3d:27:7d:19:d2:7f:4e:af:48:2c:09:f9:fc:aa:0a:14:66:e4:
0a:ed:65:b6:38:3b:fa:b8:df:46:f3:2d:ea:1a:8a:54:fd:75:
1c:47:f9:c5:61:70:c6:6b:ba:07:f9:e3:9d:e8:3b:fe:b1:aa:
a3:7f:1e:6e:f1:18:50:24:89:39:03:13:9b:9d:0b:b1:02:d3:
a6:e4:d5:3c:4d:3b:d6:3d:ba:bb:13:c7:ee:be:56:88:61:58:
b3:13:a9:bf:23:d1:5a:06:50:0a:31:6d:bf:70:2f:29:39:75:
cb:41:a2:2e:bc:11:2b:3c:b4:11:36:7b:39:e8:38:19:62:77:
a3:d0:f5:ed:f2:66:ee:4f:c5:4c:65:b6:f0:66:14:8e:23:db:
23:11:7a:9f:c8:f1:f5:57:44:b1:d5:4b:0c:81:2d:3b:d2:2d:
5f:e2:39:75:c0:74:b6:cc:d4:09:ce:4e:38:58:cd:f6:83:66:
97:14:ae:e4:e6:57:44:bd:94:8b:e2:53:9f:9a:1e:5e:5f:cc:
cc:96:91:10:5f:27:cf:9c:e6:13:a7:69:01:f7:a1:27:b2:66:
95:7a:94:23:66:74:df:e5:cb:4f:6a:cf:e4:b7:f2:73:f4:b3:
2d:da:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net