Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zh3tYkF9W9B32ZhFXjZlqURTi8w.roa
File: zh3tYkF9W9B32ZhFXjZlqURTi8w.roa (raw, json)
Hash identifier: LuGe5JNnsMIyvni5W1sQYvdwd6Mx268nNPMzIZyt2nI=
Subject key identifier: CE:1D:ED:62:41:7D:5B:D0:77:D9:98:45:5E:36:65:A9:44:53:8B:CC
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01951876F0680BD54BA591E4F9D4CF5BF051
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zh3tYkF9W9B32ZhFXjZlqURTi8w.roa
Signing time: Tue 18 Feb 2025 09:50:02 +0000
ROA not before: Tue 18 Feb 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 31.170.55.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:76:f0:68:0b:d5:4b:a5:91:e4:f9:d4:cf:5b:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 18 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce1ded62417d5bd077d998455e3665a944538bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:98:2c:0f:79:90:7a:97:b2:de:90:cb:1b:
47:b8:f2:0d:19:b5:d1:77:2f:bf:88:7a:4a:32:51:
c4:31:d1:b1:72:44:04:c8:a8:42:3e:77:88:fa:45:
a1:9e:8e:9f:97:61:1b:b4:d1:69:0b:99:47:8c:15:
0a:5d:a6:2d:63:c6:14:ee:b6:7a:5c:11:c8:8b:2a:
b7:40:4a:5e:bb:8b:34:b9:f5:e6:27:19:90:d2:df:
5d:ed:ff:83:d5:d7:5c:45:ca:9d:ab:b5:07:8a:8f:
ad:0b:52:15:c5:71:79:14:3e:c7:25:1f:b5:c6:4b:
c5:fb:a7:02:ce:10:95:3e:f2:70:65:dd:1d:9f:c1:
92:c6:86:68:32:d1:fd:2b:30:79:fb:66:ad:7e:ce:
37:9e:f0:ec:43:37:7d:23:c0:7b:0d:c7:dc:fe:d2:
91:b4:0c:23:b5:4b:16:d1:1b:5f:71:44:df:45:6b:
d1:1b:02:2e:e8:68:86:fb:65:6b:d0:43:9e:b2:85:
30:4e:5f:8f:1e:e5:83:20:6b:e1:b3:90:3c:38:d8:
15:74:cd:6d:03:0c:2b:f4:91:b4:2c:09:08:75:0f:
a4:8e:ca:a5:ca:78:7c:50:16:e0:1b:17:95:1a:65:
67:3e:15:ca:5b:d4:ea:5d:86:da:99:d1:f6:43:f2:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:ED:62:41:7D:5B:D0:77:D9:98:45:5E:36:65:A9:44:53:8B:CC
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zh3tYkF9W9B32ZhFXjZlqURTi8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.145.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
109.203.160.0/24
176.46.134.0/24
176.46.147.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:05:6e:a5:a5:2a:51:93:df:c7:56:43:11:fc:8f:4e:8b:69:
31:48:f6:d8:7d:9e:45:35:41:5a:81:1b:b8:8e:19:5e:1b:e7:
e6:90:9e:2a:f6:43:61:3a:5f:4f:69:c3:35:e0:c3:c8:79:72:
13:c1:c6:2d:90:3c:b5:11:2f:29:05:be:b1:03:d7:45:8e:0e:
b5:27:07:34:d6:34:9d:4b:be:a0:0c:02:f9:9d:56:b1:89:28:
56:ea:5e:a1:d2:c7:ac:59:4f:fc:cc:8f:fd:85:1b:1f:b0:7a:
80:01:96:f8:29:3e:9a:6c:5d:01:2c:ee:40:37:73:1a:ba:23:
f2:68:2c:20:9a:b7:a7:86:00:d1:df:53:a5:65:f9:c9:9b:91:
75:21:27:45:0e:e3:33:fd:75:1d:e7:68:6f:eb:35:a4:ab:46:
20:c5:6e:b8:32:68:2e:06:e2:2e:a0:96:b3:4a:7a:0d:4d:0c:
1f:7a:49:0a:77:fd:48:42:82:57:5d:30:07:2b:c9:0f:29:dc:
78:41:d1:3d:45:bb:12:d7:f7:0e:33:ef:e9:e5:f5:77:0f:23:
f8:ce:3c:fe:f0:95:4f:3b:8c:59:4c:54:5f:78:f1:dc:8e:c1:
54:68:ed:59:59:59:1a:b8:e6:1f:e5:e7:c0:e5:36:3a:ec:c2:
37:3a:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:30:48 2025 by rpki-client