Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CjyeoKXmb1fo4S8DuP3z2DgHjXM.roa
File: CjyeoKXmb1fo4S8DuP3z2DgHjXM.roa (raw, json)
Hash identifier: fSbJZAYrskgtcZLRh8r/qc/H9waeQ9urkMOTgot2FMA=
Subject key identifier: 0A:3C:9E:A0:A5:E6:6F:57:E8:E1:2F:03:B8:FD:F3:D8:38:07:8D:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282493F7EB5E0D342E24F338276A18A8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CjyeoKXmb1fo4S8DuP3z2DgHjXM.roa
Signing time: Thu 02 Jan 2025 17:51:13 +0000
ROA not before: Thu 02 Jan 2025 17:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60784
IP address blocks: 31.13.227.0/24 maxlen: 24
37.60.136.0/24 maxlen: 24
87.121.76.0/23 maxlen: 23
87.121.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:93:f7:eb:5e:0d:34:2e:24:f3:38:27:6a:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a3c9ea0a5e66f57e8e12f03b8fdf3d838078d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:98:ac:d1:94:92:be:7c:d4:09:8c:7a:79:
f7:37:34:7b:91:e6:50:a8:be:1d:2e:c8:6f:05:4a:
ac:b4:f3:27:19:dc:ad:f4:b3:c3:34:42:7f:8c:4b:
e5:4b:b5:44:65:f4:92:92:70:86:a5:db:72:d1:24:
cd:e7:76:cf:6a:5c:dd:17:51:03:7a:ab:14:68:30:
87:24:81:df:03:b0:d3:8a:29:35:89:5c:7c:dc:15:
0a:97:3c:68:16:5f:a8:df:8d:21:61:dc:00:05:5e:
0d:12:e9:84:10:df:4e:d4:8e:21:e7:72:9a:53:8a:
44:cf:8d:82:f2:e7:7c:c2:97:d1:ba:da:aa:e8:c6:
4b:8b:eb:98:76:38:af:77:c3:5f:94:3e:de:bb:76:
67:fc:d9:4d:ba:4f:ba:ed:f8:8d:e1:f8:df:14:ff:
1d:03:27:12:94:19:6c:80:36:85:ed:29:44:f4:de:
c4:7c:90:5b:62:a1:1e:3f:b4:70:76:e4:d5:48:56:
7e:25:15:d0:03:0e:1f:e4:a5:69:ed:9b:0b:48:33:
f3:e2:00:24:7c:3e:16:07:44:9c:94:f3:2c:b2:9c:
c1:63:b2:d5:fd:5a:0c:3c:d4:f0:e2:5d:6f:fa:d9:
23:7a:f1:74:95:54:0a:b4:c4:09:80:74:9f:83:b6:
bc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3C:9E:A0:A5:E6:6F:57:E8:E1:2F:03:B8:FD:F3:D8:38:07:8D:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CjyeoKXmb1fo4S8DuP3z2DgHjXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.227.0/24
37.60.136.0/24
87.121.76.0-87.121.78.255
Signature Algorithm: sha256WithRSAEncryption
22:a6:83:f0:53:74:e0:db:99:cb:53:80:fe:eb:ab:20:37:4a:
f2:29:17:7a:39:ca:7c:09:fa:e4:4d:ca:5f:5e:e1:c7:af:19:
7f:24:1d:ab:f8:fb:1b:7e:3c:ea:ea:27:f9:35:71:3f:8f:9e:
52:d8:0e:a6:21:02:76:ba:d3:62:1e:a3:fd:83:0d:ef:c5:68:
67:06:ab:07:bd:df:37:0c:7b:ed:e0:ca:e3:3c:09:8a:2b:fe:
64:45:d6:d3:ba:6c:b7:67:a1:cc:9d:39:b1:c8:93:e3:51:6c:
1f:e1:f9:4a:6b:04:92:06:ed:06:12:e3:37:9d:4d:39:2e:1f:
c0:b9:ed:b1:9b:a6:f8:43:c3:5d:ca:a1:08:e2:86:28:57:11:
ec:e3:9c:40:8b:26:76:9e:f1:f8:d2:71:21:8e:da:95:26:fc:
11:f1:53:bd:64:7a:5f:3e:23:96:c5:21:e0:a5:35:ba:74:89:
e1:da:9d:9b:e2:30:39:c8:39:a2:d6:7f:08:aa:ed:fa:e1:27:
a1:14:53:e1:19:77:c1:11:2a:89:b5:3b:aa:d5:0b:cb:44:49:
2d:39:66:95:f2:c3:ba:6b:f8:24:7b:89:6b:30:30:a0:a4:6c:
37:76:82:af:4d:6c:ec:57:f5:53:98:83:55:eb:b4:9f:36:64:
26:a9:a2:9d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQoJJP3614NNC4k8zgnahioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTNjOWVhMGE1ZTY2ZjU3ZThlMTJmMDNiOGZkZjNkODM4MDc4ZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp6YrNGUkr581AmMenn3NzR7keZQ
qL4dLshvBUqstPMnGdyt9LPDNEJ/jEvlS7VEZfSSknCGpdty0STN53bPalzdF1ED
eqsUaDCHJIHfA7DTiik1iVx83BUKlzxoFl+o340hYdwABV4NEumEEN9O1I4h53Ka
U4pEz42C8ud8wpfRutqq6MZLi+uYdjivd8NflD7eu3Zn/NlNuk+67fiN4fjfFP8d
AycSlBlsgDaF7SlE9N7EfJBbYqEeP7RwduTVSFZ+JRXQAw4f5KVp7ZsLSDPz4gAk
fD4WB0SclPMsspzBY7LV/VoMPNTw4l1v+tkjevF0lVQKtMQJgHSfg7a8FwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAo8nqCl5m9X6OEvA7j989g4B41zMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQ2p5ZW9LWG1iMWZvNFM4RHVQM3oyRGdIalhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAHw3jAwQA
JTyIMAwDBAJXeUwDBABXeU4wDQYJKoZIhvcNAQELBQADggEBACKmg/BTdODbmctT
gP7rqyA3SvIpF3o5ynwJ+uRNyl9e4cevGX8kHav4+xt+POrqJ/k1cT+PnlLYDqYh
Ana602Ieo/2DDe/FaGcGqwe93zcMe+3gyuM8CYor/mRF1tO6bLdnocydObHIk+NR
bB/h+UprBJIG7QYS4zedTTkuH8C57bGbpvhDw13KoQjihihXEezjnECLJnae8fjS
cSGO2pUm/BHxU71kel8+I5bFIeClNbp0ieHanZviMDnIOaLWfwiq7frhJ6EUU+EZ
d8ERKom1O6rVC8tESS05ZpXyw7pr+CR7iWswMKCkbDd2gq9NbOxX9VOYg1XrtJ82
ZCapop0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:40 2025 by rpki-client