Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/zWl0OQbHcQuSOVmOTU94KNYRq64.roa
File: zWl0OQbHcQuSOVmOTU94KNYRq64.roa (raw, json)
Hash identifier: RuTEt+BRsDcUCINNupx+8yA8vGqJO6PcYMOcNMZWYxQ=
Subject key identifier: CD:69:74:39:06:C7:71:0B:92:39:59:8E:4D:4F:78:28:D6:11:AB:AE
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC6B66E214221E896417AFEE14FB6
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/zWl0OQbHcQuSOVmOTU94KNYRq64.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25098
IP address blocks: 31.40.196.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
188.119.68.0/22 maxlen: 22
212.107.4.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:b6:6e:21:42:21:e8:96:41:7a:fe:e1:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd69743906c7710b9239598e4d4f7828d611abae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:48:39:ce:23:76:3f:97:1d:06:c6:2a:7b:
dd:86:58:b9:0d:65:a0:99:ba:32:7e:88:85:da:9a:
db:d4:d4:00:8d:98:fe:35:54:2c:fa:b2:4c:d1:bc:
1e:36:63:56:d7:41:e4:77:b2:a3:0b:57:47:e6:20:
82:97:5a:04:8d:c3:a9:a0:1c:10:2a:1e:66:3a:35:
15:46:fe:5a:ea:26:ca:35:c3:b6:15:1c:7d:3f:ba:
a4:d4:c0:06:0e:d4:6e:50:63:78:6c:10:42:dd:2c:
fa:a1:f4:e3:b7:a2:18:3b:64:6c:ff:37:b7:b4:6d:
ff:91:02:f0:a0:dc:f2:ec:49:6b:08:ef:c6:73:3c:
34:59:29:c1:93:b3:b8:2f:36:95:69:6f:2c:a2:2d:
b7:2a:dc:00:05:e6:52:67:cf:4a:18:75:e8:3a:54:
e2:bd:95:04:23:77:39:db:a0:2d:75:70:fb:e2:0d:
80:ec:b3:88:d6:84:ec:29:39:93:a5:44:cc:84:cf:
1f:6e:e9:48:34:a1:69:8a:71:82:76:f7:0f:27:de:
95:53:77:5b:f6:ba:2b:68:da:51:d6:7b:29:a2:18:
32:78:d1:b2:49:40:30:c1:ba:73:06:1d:81:8e:0f:
ad:fe:7d:53:59:5a:e4:5e:e7:42:d9:c5:b6:6c:6e:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:69:74:39:06:C7:71:0B:92:39:59:8E:4D:4F:78:28:D6:11:AB:AE
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/zWl0OQbHcQuSOVmOTU94KNYRq64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/22
85.8.144.0/22
188.119.68.0/22
212.107.4.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
29:d6:b3:59:9f:cb:b4:01:46:49:b2:44:47:0f:42:ba:16:e1:
85:71:8a:7b:bb:88:1e:c9:6b:8a:e4:f1:ec:cf:28:15:88:bf:
36:d0:80:84:7e:65:eb:fd:cd:14:c1:45:1f:f2:4c:e3:46:b4:
f6:1b:2e:87:a4:04:91:8a:93:f7:20:18:81:e9:00:54:39:2d:
71:89:12:13:89:98:a1:e3:33:91:fb:c0:b8:a6:15:ea:7c:e5:
f0:92:8b:53:40:32:30:22:9f:94:83:80:e0:9f:c0:b5:f3:04:
80:a3:2b:c0:59:0d:c7:d5:ac:2c:d7:cd:97:38:1d:39:28:e0:
b8:1b:7e:54:d1:6e:15:c5:d3:34:5c:cd:e2:fc:92:d3:a0:7e:
7a:6c:ea:b2:12:54:a0:01:2a:a6:6a:7d:15:a7:37:b8:66:0f:
6c:6b:34:0d:5a:5e:47:62:64:89:05:ea:54:d0:2b:a9:60:18:
1f:b6:01:95:c4:fc:ad:2a:9c:cc:49:b0:d4:23:45:62:cb:14:
ad:9a:4b:92:ee:86:01:06:d6:a4:0b:a2:d9:ef:e7:72:9b:3a:
e8:29:97:9d:7f:2f:ac:ec:33:1c:a5:de:67:a2:a8:39:43:35:
0d:01:44:76:e1:27:7b:fb:22:2a:56:7e:93:71:74:c6:4a:54:
10:e4:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:33:58 2025 by rpki-client