Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OigQPlOgWF-D3k5xR2dfFp9xMiM.roa
File: OigQPlOgWF-D3k5xR2dfFp9xMiM.roa (raw, json)
Hash identifier: 17zgDQpXnEqAMgx8wP4T9UadjWZ//FNMNQXIQwfcr1Q=
Subject key identifier: 3A:28:10:3E:53:A0:58:5F:83:DE:4E:71:47:67:5F:16:9F:71:32:23
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246B7A8CEDCDB54EA3D7C2F381F63D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OigQPlOgWF-D3k5xR2dfFp9xMiM.roa
Signing time: Thu 02 Jan 2025 17:51:02 +0000
ROA not before: Thu 02 Jan 2025 17:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29030
IP address blocks: 31.13.200.0/21 maxlen: 21
31.13.242.0/23 maxlen: 23
87.121.65.0/24 maxlen: 24
94.156.20.0/22 maxlen: 22
94.156.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6b:7a:8c:ed:cd:b5:4e:a3:d7:c2:f3:81:f6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a28103e53a0585f83de4e7147675f169f713223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:ef:33:1a:87:00:f3:0a:e5:1f:b3:7b:58:
6e:5d:81:0b:2f:6a:a9:fe:1e:cf:ca:33:17:92:e3:
4a:05:5e:d9:47:45:75:ce:31:ba:da:a0:85:07:d7:
18:25:f3:a7:1b:c4:b5:e9:00:a9:21:bc:4d:bb:a3:
0f:fa:99:dc:2a:20:47:b0:f6:0e:6c:4a:af:ad:04:
fa:7d:64:f2:b9:6a:c9:69:12:3d:5b:df:9d:93:37:
4a:70:45:c7:9a:5e:66:9a:62:8f:3e:e3:8b:93:20:
a4:cd:7a:99:93:ad:f3:41:e9:ee:86:c5:97:91:9c:
3c:af:d8:c7:28:5f:69:58:f2:03:5a:87:69:39:45:
1f:1f:8c:9b:be:3c:72:bb:ca:9a:cf:27:fd:7c:e0:
f7:a7:4f:98:6d:d1:a8:45:35:be:84:3b:10:f9:15:
11:c0:04:10:99:45:bd:24:91:ef:f8:e9:dc:cc:34:
e6:54:d0:08:9a:d1:b3:54:28:ae:e8:bc:be:02:4e:
c6:3f:43:31:47:90:9f:e9:4e:42:c7:ca:52:ab:30:
0e:9a:36:dd:ad:a2:5c:51:3a:9b:82:8e:4a:b6:f7:
6b:89:26:f6:78:cd:7d:4a:49:16:b2:73:23:35:df:
1e:1e:17:41:c9:63:61:2d:78:f6:9b:c7:61:6c:fb:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:10:3E:53:A0:58:5F:83:DE:4E:71:47:67:5F:16:9F:71:32:23
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OigQPlOgWF-D3k5xR2dfFp9xMiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.200.0/21
31.13.242.0/23
87.121.65.0/24
94.156.20.0/22
94.156.244.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c8:f5:ce:5a:a4:c4:a5:e7:15:eb:f6:3c:cd:2f:7f:1c:61:
c1:d4:85:ff:18:64:72:e5:5e:9e:cf:d0:04:b3:c4:95:42:b3:
2c:a2:65:4a:95:cb:34:76:c5:4f:15:f1:9c:e5:18:40:5e:07:
02:8f:12:50:5e:c9:39:ef:a3:da:6f:87:3b:12:e0:a1:e2:f6:
78:8a:d1:03:83:08:a4:6a:ce:62:ae:f9:9f:ee:6d:75:82:a1:
7e:0f:9f:69:a5:4e:6f:57:f6:35:04:20:a2:88:2b:33:70:94:
45:79:a3:20:06:4b:7b:3f:b8:8e:80:31:2a:17:cd:34:e4:bb:
c3:4f:df:2f:43:d9:0a:d5:40:b3:b1:bf:70:53:cb:aa:da:54:
59:c9:7d:9d:30:06:1d:04:4f:74:ed:bc:fe:5e:11:01:04:67:
22:90:cf:69:57:9d:cb:ed:84:8c:a4:c9:ee:a8:cb:95:ed:4b:
91:a8:bf:78:ca:04:d1:f8:2a:5d:0f:40:55:da:81:03:32:54:
fe:85:49:f7:d6:d1:38:54:42:88:6c:90:a5:15:7c:af:19:3e:
02:b8:ef:69:ba:b9:2f:53:53:27:e1:2a:06:91:9b:dc:7c:da:
f0:75:2d:b5:ab:d6:f0:55:99:ea:2e:9d:0e:0d:51:8c:13:97:
51:58:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:48 2025 by rpki-client