Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjHG-DLdd1vjH0gWC1ZHw7JsI7E.roa
File: EjHG-DLdd1vjH0gWC1ZHw7JsI7E.roa (raw, json)
Hash identifier: Sl/XlPYONcJiEzY6A+s8auxlj2w4AY+KKrzVtnI+RHc=
Subject key identifier: 12:31:C6:F8:32:DD:77:5B:E3:1F:48:16:0B:56:47:C3:B2:6C:23:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194CFD4A4B4AA45AAE00D496963B6DE6A38
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjHG-DLdd1vjH0gWC1ZHw7JsI7E.roa
Signing time: Tue 04 Feb 2025 07:20:07 +0000
ROA not before: Tue 04 Feb 2025 07:20:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205175
IP address blocks: 31.13.212.0/24 maxlen: 24
45.81.36.0/24 maxlen: 32
45.91.194.0/24 maxlen: 32
45.91.195.0/24 maxlen: 32
87.121.220.0/24 maxlen: 24
2a00:1728:31::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:d4:a4:b4:aa:45:aa:e0:0d:49:69:63:b6:de:6a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 4 07:20:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1231c6f832dd775be31f48160b5647c3b26c23b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:33:92:42:03:b3:d5:f9:63:0a:47:9e:11:
29:e2:18:09:47:8a:f6:b2:f9:c2:ce:05:77:9a:be:
33:c3:07:19:c8:12:93:63:04:1c:80:69:0b:66:1a:
0a:4f:e0:80:37:36:1a:70:5d:a0:7d:8f:34:65:f8:
5c:18:fa:b5:dd:8f:cb:a9:45:a5:63:a9:2c:8d:bd:
99:fc:83:ac:aa:98:63:24:79:97:f3:bb:f5:47:06:
1c:72:e8:e7:d5:f2:97:d1:d5:0f:b6:c5:b6:f6:33:
4f:f5:2d:33:3d:8f:68:16:5d:cd:21:07:6c:e3:94:
08:d4:e4:35:94:fc:c3:8a:1d:07:c9:ed:8e:73:b3:
5d:4d:32:06:ac:b6:06:b8:09:e0:4a:2f:bb:0a:ba:
e6:dc:50:b0:1c:16:9c:d3:ee:f1:35:61:d0:a1:cf:
f8:d0:e5:b4:47:8c:c5:a6:d2:73:ee:2c:3c:ea:44:
06:be:84:c5:a6:29:47:75:eb:3d:5c:67:30:4e:9c:
50:d2:4e:cc:86:f9:70:bc:0e:31:4c:0d:42:3f:a7:
8c:88:9a:4d:b0:bc:46:b3:aa:db:e3:65:51:e5:ec:
15:4e:bd:cf:89:d4:a7:6d:d2:b2:ee:3b:4e:df:10:
65:30:18:70:8f:d3:87:05:e3:ba:76:b4:46:1d:84:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:31:C6:F8:32:DD:77:5B:E3:1F:48:16:0B:56:47:C3:B2:6C:23:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjHG-DLdd1vjH0gWC1ZHw7JsI7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.212.0/24
45.81.36.0/24
45.91.194.0/23
87.121.220.0/24
IPv6:
2a00:1728:31::/48
Signature Algorithm: sha256WithRSAEncryption
69:96:3f:3b:94:1d:35:f8:dd:38:3a:f0:cb:15:65:8b:82:d6:
85:7d:27:44:f1:c2:5d:4d:b8:ae:eb:c4:88:4d:59:68:86:8c:
78:f3:dd:d3:ac:b8:7b:43:6c:bd:8a:85:6a:78:00:23:bf:21:
03:15:f8:86:7e:98:2c:70:cf:40:88:ac:f0:48:70:23:97:84:
77:20:e2:9e:f3:91:51:7f:4e:32:d0:f1:f0:28:88:9f:88:c8:
f1:08:e1:90:3e:44:5b:d1:31:25:46:60:65:9a:8b:05:2b:61:
49:56:1c:bc:bf:9e:1f:29:ba:77:da:ae:a1:83:84:6e:72:d9:
06:fe:d5:9f:4a:37:ee:63:ed:8c:17:85:95:a9:80:ff:6c:ef:
a9:d2:6d:8e:45:21:b9:6b:08:4e:7d:cc:38:d2:fe:ab:e6:e2:
5e:e2:da:23:04:e4:c6:3c:2b:83:67:a2:64:a3:1b:50:a2:1f:
fb:ed:f2:fc:24:46:b7:3c:a0:bd:5b:d8:23:29:ca:ad:06:90:
e0:7f:de:11:32:47:02:ac:82:4f:f0:50:0d:08:10:29:05:d7:
98:e7:ba:aa:bb:f8:03:da:6b:59:22:9a:77:ff:8c:44:c4:4b:
93:dc:4d:5c:73:be:87:e4:26:66:a9:a7:1f:c5:ad:76:92:2c:
6d:e8:36:9b
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZTP1KS0qkWq4A1JaWO23mo4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjA0MDcyMDA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjMxYzZmODMyZGQ3NzViZTMxZjQ4MTYwYjU2NDdjM2IyNmMyM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKUzkkIDs9X5YwpHnhEp4hgJR4r2
svnCzgV3mr4zwwcZyBKTYwQcgGkLZhoKT+CANzYacF2gfY80ZfhcGPq13Y/LqUWl
Y6ksjb2Z/IOsqphjJHmX87v1RwYccujn1fKX0dUPtsW29jNP9S0zPY9oFl3NIQds
45QI1OQ1lPzDih0Hye2Oc7NdTTIGrLYGuAngSi+7Crrm3FCwHBac0+7xNWHQoc/4
0OW0R4zFptJz7iw86kQGvoTFpilHdes9XGcwTpxQ0k7MhvlwvA4xTA1CP6eMiJpN
sLxGs6rb42VR5ewVTr3PidSnbdKy7jtO3xBlMBhwj9OHBeO6drRGHYQ0EQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFBIxxvgy3Xdb4x9IFgtWR8OybCOxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRWpIRy1ETGRkMXZqSDBnV0MxWkh3N0pzSTdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAHw3UAwQA
LVEkAwQBLVvCAwQAV3ncMA8EAgACMAkDBwAqABcoADEwDQYJKoZIhvcNAQELBQAD
ggEBAGmWPzuUHTX43Tg68MsVZYuC1oV9J0Txwl1NuK7rxIhNWWiGjHjz3dOsuHtD
bL2KhWp4ACO/IQMV+IZ+mCxwz0CIrPBIcCOXhHcg4p7zkVF/TjLQ8fAoiJ+IyPEI
4ZA+RFvRMSVGYGWaiwUrYUlWHLy/nh8punfarqGDhG5y2Qb+1Z9KN+5j7YwXhZWp
gP9s76nSbY5FIblrCE59zDjS/qvm4l7i2iME5MY8K4NnomSjG1CiH/vt8vwkRrc8
oL1b2CMpyq0GkOB/3hEyRwKsgk/wUA0IECkF15jnuqq7+APaa1kimnf/jETES5Pc
TVxzvofkJmappx/FrXaSLG3oNps=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:09 2025 by rpki-client