Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zGRz9Rz0SKJmxC94qayvz8i6qXk.roa
File: zGRz9Rz0SKJmxC94qayvz8i6qXk.roa (raw, json)
Hash identifier: ztRwRtF1618Ic82vOUTqkwtarOtqNzefYytSFK7V9CE=
Subject key identifier: CC:64:73:F5:1C:F4:48:A2:66:C4:2F:78:A9:AC:AF:CF:C8:BA:A9:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194D569C7A680EE46AFDF49D27D5EEDA31B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zGRz9Rz0SKJmxC94qayvz8i6qXk.roa
Signing time: Wed 05 Feb 2025 09:21:06 +0000
ROA not before: Wed 05 Feb 2025 09:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215787
IP address blocks: 31.13.230.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:69:c7:a6:80:ee:46:af:df:49:d2:7d:5e:ed:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 5 09:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc6473f51cf448a266c42f78a9acafcfc8baa979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:9d:31:e2:55:6d:c2:0d:9c:8e:11:dc:83:
0b:d6:76:05:87:19:69:a2:b1:06:52:d2:d7:b3:d6:
39:4c:7c:9f:54:5d:bc:64:ea:9b:78:4c:02:0c:67:
fe:24:b0:ec:23:f9:a6:13:69:71:a0:12:b1:af:dd:
21:0a:9e:43:50:d9:56:08:94:14:49:10:dc:c2:0c:
54:a1:58:55:27:de:7e:91:0e:85:be:19:83:22:9e:
df:dd:17:c4:c5:f9:ea:00:fe:61:c0:73:62:11:83:
30:6f:5b:4f:c1:42:60:fd:6c:2a:6a:7d:52:b0:ac:
65:10:c4:28:cc:12:ab:ee:0e:4e:48:52:e5:53:e1:
f8:7b:d4:09:16:cf:c2:d0:2a:5c:b7:bd:3c:8d:07:
d9:b7:78:cb:a0:cf:db:94:09:7a:b3:24:ea:11:c4:
7a:34:76:60:45:f1:21:ed:8d:f3:21:b9:55:69:7f:
21:b5:13:6d:7b:80:81:6c:66:37:74:88:74:83:e5:
81:0e:55:ea:c4:29:e6:f8:ce:c4:de:7b:b9:85:b7:
1b:d2:cf:4b:64:ab:98:a9:c0:ea:3c:5e:55:4b:62:
71:d5:75:3b:e5:57:b3:b8:2f:7f:bd:62:f5:f7:e3:
69:be:85:5a:08:fe:78:34:f4:c8:da:5b:85:a8:53:
77:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:73:F5:1C:F4:48:A2:66:C4:2F:78:A9:AC:AF:CF:C8:BA:A9:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zGRz9Rz0SKJmxC94qayvz8i6qXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.230.0/24
85.209.133.0/24
91.200.192.0/22
92.249.48.0/24
94.154.163.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cd:d1:77:6e:fb:5b:91:8b:f6:b0:a5:f3:cf:f5:2c:bf:04:
c3:c9:7d:90:51:b6:3d:36:16:1e:66:f2:ca:f6:ce:34:51:31:
8c:b9:ca:2b:0a:b5:f2:e4:a9:ac:cb:c8:c9:56:e6:03:f1:2c:
ea:89:a3:9a:59:8e:7a:57:2a:4f:a6:f3:b7:11:4d:f0:02:71:
1b:d8:a7:41:51:da:f4:a4:4b:7a:26:d5:35:1f:df:82:78:b9:
a4:38:93:5a:af:4f:ef:e7:45:3c:82:88:9a:95:a8:b9:cf:6a:
7f:e6:83:d8:dd:38:07:55:3d:53:90:6c:ac:3e:11:ec:be:39:
28:85:71:41:54:88:1a:94:06:9e:ae:2d:a8:32:44:cb:f7:99:
a1:68:42:e7:c6:df:41:48:77:16:96:ac:ee:a4:14:d8:65:17:
84:9a:7b:f1:77:78:b8:9b:10:7b:2f:b4:5f:c3:f3:b5:a3:12:
de:99:3c:b6:f8:e1:68:82:62:0a:9d:cb:11:f6:51:97:4b:81:
d6:b4:e1:98:9c:4b:c4:05:b9:90:9e:e6:1f:42:68:a4:f9:5e:
fd:42:4b:b5:c2:69:f9:61:d4:ba:e5:18:0c:ea:8c:b3:6a:b2:
c5:dc:2e:0f:a1:44:a5:3c:2d:26:8c:e5:af:4f:63:4a:61:b6:
4d:d3:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:45 2025 by rpki-client