Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZq49L_1ThFYuk14GOD8C1eki3w.roa
File: zZq49L_1ThFYuk14GOD8C1eki3w.roa (raw, json)
Hash identifier: it0qms522ZS1/KA0eC7xdr3nPCi+1QCCqpOnvSCzHqw=
Subject key identifier: CD:9A:B8:F4:BF:F5:4E:11:58:BA:4D:78:18:E0:FC:0B:57:A4:8B:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B046D9EB3E7146CDA60174A293A6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZq49L_1ThFYuk14GOD8C1eki3w.roa
Signing time: Thu 02 Jan 2025 17:51:20 +0000
ROA not before: Thu 02 Jan 2025 17:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205175
IP address blocks: 31.13.212.0/24 maxlen: 24
45.81.36.0/24 maxlen: 32
45.91.194.0/24 maxlen: 32
45.91.195.0/24 maxlen: 32
87.121.220.0/24 maxlen: 24
94.156.106.0/24 maxlen: 32
2a00:1728:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b0:46:d9:eb:3e:71:46:cd:a6:01:74:a2:93:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd9ab8f4bff54e1158ba4d7818e0fc0b57a48b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:bb:01:10:5c:5a:7c:75:3e:71:a6:44:0a:
35:0d:59:9f:20:b1:9c:2b:c3:03:d6:46:d9:b1:f7:
0e:a6:9c:5c:14:42:d7:e4:16:3e:37:c9:c6:e1:7a:
d6:72:e9:fe:0b:5a:44:51:96:80:9d:15:28:f1:28:
8f:47:19:cf:48:2c:c2:77:d6:b5:4e:07:ca:ed:17:
09:38:d4:25:9d:f8:21:9c:0b:1e:05:29:a9:e7:d4:
94:14:3b:fc:0e:8f:a8:12:f1:31:15:a7:1b:3a:f0:
b7:b2:ac:0d:d2:97:5f:ff:15:39:a6:fa:ae:26:15:
da:53:84:44:ac:31:93:6d:48:2e:0c:02:f8:a8:29:
cc:0b:dd:0c:38:8e:00:f6:97:22:95:11:2a:57:4b:
b6:60:87:cc:3e:3a:4c:74:81:18:4c:59:d8:96:08:
32:5c:13:a9:10:27:29:5a:33:6d:7e:38:bd:69:77:
5c:45:e6:b3:87:49:68:d9:71:02:e5:45:b6:3a:df:
ad:32:71:86:53:df:23:6a:3d:36:f2:fb:d6:10:60:
c0:9b:06:6b:61:a9:38:f6:b5:68:ca:a4:1e:9b:4f:
07:4c:62:67:bc:10:1b:bc:68:d0:f1:3c:87:97:dd:
75:70:c5:da:3d:d4:d8:10:26:e1:1a:e9:ed:7e:ef:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9A:B8:F4:BF:F5:4E:11:58:BA:4D:78:18:E0:FC:0B:57:A4:8B:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zZq49L_1ThFYuk14GOD8C1eki3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
45.81.36.0/24
45.91.194.0/23
87.121.220.0/24
94.156.106.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
7d:52:c2:bb:4a:23:5a:77:c7:55:59:51:d1:31:5a:54:02:8c:
52:9e:6b:75:0d:b4:ec:82:fb:90:ce:62:87:d9:c5:04:c7:e3:
08:2c:36:b1:3b:05:c7:e3:f0:f2:f9:c2:9f:ff:a3:86:2d:5e:
5a:17:a3:c2:50:bb:a8:2c:46:b1:72:6e:0e:71:97:db:e9:30:
01:98:f2:23:8a:37:74:a0:be:a5:d9:40:08:98:de:d2:fb:61:
4e:cd:c9:a5:aa:17:1f:75:2a:1e:c8:a8:79:a7:83:33:62:ff:
82:b0:dd:51:59:cb:32:2f:c5:d8:e9:5f:72:21:5e:22:61:de:
fe:9a:1c:d9:e1:a7:62:a1:14:e8:e5:16:cc:03:c8:4e:cb:6c:
bc:2b:ae:dc:80:0e:e7:80:40:08:ea:ed:d8:63:41:57:71:51:
e8:9e:2c:af:a8:6a:fd:79:3e:19:46:d7:cb:43:be:06:67:8b:
34:83:b9:c4:85:d6:42:b1:ed:b1:1a:a6:4e:45:d4:44:6e:4e:
7d:e4:74:72:37:96:32:68:01:cf:d7:2b:65:62:59:1c:1f:3f:
ee:e4:a1:a4:46:d8:58:12:a8:69:d0:15:42:24:f1:10:cd:77:
bd:6a:83:e3:3e:51:97:96:76:5a:db:eb:2b:ab:a4:14:ae:36:
63:a8:86:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:29 2025 by rpki-client