Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa
File: gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa (raw, json)
Hash identifier: ngODPWQb3vvd7XrB/GBFFEdeU0LiXPVPYCwgvVTHlW8=
Subject key identifier: 82:9C:CD:31:97:30:A3:7E:7E:A1:35:CE:23:79:18:93:78:49:DA:DF
Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial: 0194266AB9D90806DDB51975597660B1FEF3
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa
Signing time: Thu 02 Jan 2025 09:48:36 +0000
ROA not before: Thu 02 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 31.25.92.0/22 maxlen: 22
31.25.92.0/24 maxlen: 24
31.25.93.0/24 maxlen: 24
31.25.94.0/24 maxlen: 24
31.25.95.0/24 maxlen: 24
178.236.32.0/22 maxlen: 22
185.118.13.0/24 maxlen: 24
185.118.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b9:d9:08:06:dd:b5:19:75:59:76:60:b1:fe:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829ccd319730a37e7ea135ce237918937849dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:34:d7:a6:91:e9:fe:e7:9b:9a:0f:ea:1d:
ab:a8:fe:56:51:8f:95:aa:f6:70:19:93:57:76:5c:
c2:6b:f1:71:ea:d8:a5:fa:24:7e:e0:e9:56:10:83:
cc:ef:38:99:ee:b6:82:fd:be:0c:3b:a9:3d:c7:bd:
f1:46:98:d0:f5:b0:6d:40:00:1c:67:be:37:27:f4:
fa:93:7b:6e:0c:71:41:ab:93:33:b3:c6:16:32:07:
a9:98:d4:09:53:48:f9:67:bd:d4:8b:5e:a8:c0:d4:
69:92:c1:1d:38:5d:f0:d8:b8:84:a1:18:3b:76:a1:
7a:30:f8:d3:0b:28:28:44:dc:06:18:2e:7c:0e:e6:
34:d0:77:32:77:7c:54:9b:f3:5e:f6:d4:0e:45:cb:
36:5a:3a:b7:7f:ad:05:eb:fa:24:0a:eb:c3:9d:d9:
90:33:5c:af:fe:0b:c8:89:9f:d6:aa:7f:8d:9d:c3:
e3:5b:d9:26:31:26:09:90:07:43:45:34:33:b6:c6:
bd:29:7d:8e:80:b7:69:e7:11:ec:07:34:40:fe:b2:
4a:bd:de:c9:b5:b3:4a:93:db:7d:49:87:32:a6:e7:
06:7c:c9:1a:17:66:78:4d:77:ca:e8:4e:01:dd:5d:
85:1a:44:c3:e7:67:20:85:64:62:19:80:f8:b0:24:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9C:CD:31:97:30:A3:7E:7E:A1:35:CE:23:79:18:93:78:49:DA:DF
X509v3 Authority Key Identifier:
keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/gpzNMZcwo35-oTXOI3kYk3hJ2t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.92.0/22
178.236.32.0/22
185.118.13.0-185.118.14.255
Signature Algorithm: sha256WithRSAEncryption
5b:5c:d1:30:3e:2c:c0:51:4a:53:bb:a8:c1:f1:96:c2:aa:73:
bb:82:8f:3a:ff:54:9c:e3:a9:30:1a:3b:dc:d7:09:bb:cf:4a:
a7:bf:63:3d:ab:58:59:70:44:65:61:a9:8b:b3:41:14:11:a9:
93:9b:4b:2e:14:eb:63:ac:1a:52:59:26:cd:f2:38:01:8c:64:
3d:bc:21:55:7b:13:49:8b:65:6b:a7:16:c2:39:10:3d:f4:2d:
90:f1:3b:87:41:5e:51:51:1a:3f:f1:22:86:7a:5d:ef:57:3a:
0e:d7:cb:9e:29:ba:2b:e9:cb:a1:e9:cd:95:18:7f:9c:f1:e2:
50:7e:5a:a4:4b:2b:ef:9c:ee:88:98:c7:fb:f4:26:9e:88:eb:
12:2f:2a:06:c7:21:5d:a0:d8:ea:8d:da:eb:3f:3d:9d:5a:e0:
e4:6e:9b:cb:78:2e:b1:b4:ae:08:30:ff:05:99:45:8c:70:1c:
15:8c:46:6e:6c:f4:cc:36:18:52:51:2b:f2:b0:1d:ef:0b:8b:
3d:2c:5f:ae:7e:ba:d7:5e:a4:f7:e5:93:26:92:c1:2b:cb:a8:
c4:97:83:41:07:6f:4a:c6:29:c4:6c:83:9d:2a:b7:c4:4a:26:
c1:55:79:0d:b3:46:8a:54:ac:06:8a:d5:c3:2e:83:14:c5:66:
93:38:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:40:03 2025 by rpki-client