Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/rzgytveLNvuOFB1P42grRqzKspo.roa
File: rzgytveLNvuOFB1P42grRqzKspo.roa (raw, json)
Hash identifier: /OYgIzhZx8IoJrXB+qq8SFzexdOd724xyqoUlN1FVag=
Subject key identifier: AF:38:32:B6:F7:8B:36:FB:8E:14:1D:4F:E3:68:2B:46:AC:CA:B2:9A
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019425FC67859736B667B794487E5622C0C4
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/rzgytveLNvuOFB1P42grRqzKspo.roa
Signing time: Thu 02 Jan 2025 07:48:06 +0000
ROA not before: Thu 02 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50012
IP address blocks: 31.129.232.0/24 maxlen: 24
31.129.233.0/24 maxlen: 24
31.129.234.0/24 maxlen: 24
31.129.235.0/24 maxlen: 24
31.129.251.0/24 maxlen: 24
213.5.192.0/24 maxlen: 24
213.5.193.0/24 maxlen: 24
213.5.194.0/24 maxlen: 24
213.5.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:67:85:97:36:b6:67:b7:94:48:7e:56:22:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Jan 2 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3832b6f78b36fb8e141d4fe3682b46accab29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:5b:36:a7:f2:bf:87:1f:07:0a:e2:3c:98:
ab:2a:45:cf:ad:ea:07:34:65:8a:2f:61:0f:8c:9c:
53:1c:cf:fa:41:84:24:ee:5d:4d:27:f1:4b:6a:a0:
bb:0a:fe:7d:35:7f:1b:8b:c0:54:fe:b6:53:ab:be:
11:69:64:4a:26:a0:9c:b6:ab:ac:40:26:9b:fe:5a:
c4:18:a6:5f:dd:14:ab:ab:54:ea:42:cd:9c:1f:cd:
a7:9d:d8:30:24:0a:a9:f1:5e:46:f3:2b:2c:9e:80:
e3:a4:ae:a0:34:d5:57:8c:e9:4b:be:44:93:0a:18:
a1:d4:cf:e2:28:dd:9c:79:89:ff:19:4f:95:47:56:
f6:ad:09:18:a7:b7:cf:2e:1c:22:85:f9:76:e3:72:
4f:7e:c8:b5:cf:6f:0a:a5:6f:42:04:75:2f:af:42:
a7:c0:4d:0e:ea:dd:14:7a:fd:8c:0c:38:b5:87:ef:
b7:5c:f2:72:a8:11:ee:e7:77:4d:e6:bc:04:91:40:
7b:cb:46:27:0a:a1:56:de:c9:c8:5f:1e:86:17:5c:
a5:c0:c7:b8:ed:29:e4:03:f2:b6:ae:c0:2c:6a:63:
2f:5a:e4:73:c7:7d:43:53:7e:b0:c8:63:10:a4:09:
7e:03:da:36:12:31:ec:ae:d9:2b:b9:29:38:b7:24:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:32:B6:F7:8B:36:FB:8E:14:1D:4F:E3:68:2B:46:AC:CA:B2:9A
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/rzgytveLNvuOFB1P42grRqzKspo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.232.0/22
31.129.251.0/24
213.5.192.0/22
Signature Algorithm: sha256WithRSAEncryption
50:45:d1:bd:96:9c:99:e4:ae:61:11:a4:3a:5d:6f:c1:42:5c:
db:03:5e:8e:c3:0f:3f:da:6d:d2:6e:1f:b0:6d:f3:2f:e0:e6:
19:82:f5:83:6f:84:9e:4a:87:a1:71:db:1d:f4:16:7a:72:49:
ea:ba:1f:96:8d:7d:12:2f:2c:74:10:e3:eb:05:e3:b2:e6:8f:
d1:7e:f0:67:93:3d:c2:c3:36:92:9e:16:de:0a:99:f7:49:03:
3f:52:29:3c:64:1a:b8:e7:0c:c8:23:e7:24:3e:17:76:00:d7:
d4:8a:03:ac:17:6b:19:0d:aa:dc:52:7a:b6:9a:26:30:68:14:
e0:f9:7f:19:3e:67:ea:4b:4b:39:ea:4f:54:e3:5b:b3:55:ea:
89:5f:63:d6:89:4f:6c:08:bf:a0:ed:3c:29:8e:eb:b6:63:5b:
43:6a:9b:93:e7:dc:a7:93:ab:3b:4f:56:2c:99:ac:1b:94:99:
24:b5:53:1a:1c:d6:07:e7:ec:94:f1:27:d6:02:fc:f7:8a:9b:
da:4b:c4:1d:cc:87:32:d3:5f:f3:ba:66:84:f6:12:c0:5f:06:
fa:0a:f7:27:e2:09:eb:06:7e:38:d9:3e:3e:28:9b:f4:2f:b0:
42:88:ca:c7:1f:e8:0b:80:6f:6f:34:1a:9a:e1:64:0c:30:83:
26:a3:40:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQl/GeFlza2Z7eUSH5WIsDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjUwMTAyMDc0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjM4MzJiNmY3OGIzNmZiOGUxNDFkNGZlMzY4MmI0NmFjY2FiMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM5bNqfyv4cfBwriPJirKkXPreoH
NGWKL2EPjJxTHM/6QYQk7l1NJ/FLaqC7Cv59NX8bi8BU/rZTq74RaWRKJqCctqus
QCab/lrEGKZf3RSrq1TqQs2cH82nndgwJAqp8V5G8yssnoDjpK6gNNVXjOlLvkST
Chih1M/iKN2ceYn/GU+VR1b2rQkYp7fPLhwihfl243JPfsi1z28KpW9CBHUvr0Kn
wE0O6t0Uev2MDDi1h++3XPJyqBHu53dN5rwEkUB7y0YnCqFW3snIXx6GF1ylwMe4
7SnkA/K2rsAsamMvWuRzx31DU36wyGMQpAl+A9o2EjHsrtkruSk4tyQVxwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK84Mrb3izb7jhQdT+NoK0asyrKaMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvcnpneXR2ZUxOdnVPRkIxUDQyZ3JScXpLc3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCH4HoAwQA
H4H7AwQC1QXAMA0GCSqGSIb3DQEBCwUAA4IBAQBQRdG9lpyZ5K5hEaQ6XW/BQlzb
A16Oww8/2m3Sbh+wbfMv4OYZgvWDb4SeSoehcdsd9BZ6cknquh+WjX0SLyx0EOPr
BeOy5o/RfvBnkz3CwzaSnhbeCpn3SQM/Uik8ZBq45wzII+ckPhd2ANfUigOsF2sZ
DarcUnq2miYwaBTg+X8ZPmfqS0s56k9U41uzVeqJX2PWiU9sCL+g7Twpjuu2Y1tD
apuT59ynk6s7T1YsmawblJkktVMaHNYH5+yU8SfWAvz3ipvaS8QdzIcy01/zumaE
9hLAXwb6Cvcn4gnrBn442T4+KJv0L7BCiMrHH+gLgG9vNBqa4WQMMIMmo0AY
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:44 2025 by rpki-client