Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3cmiag-OFPHODxLb1KMirqc2FN4.roa
File: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (raw, json)
Hash identifier: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=
Subject key identifier: DD:C9:A2:6A:0F:8E:14:F1:CE:0F:12:DB:D4:A3:22:AE:A7:36:14:DE
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA662C939C4E0BBED5A7F0A48825C6
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3cmiag-OFPHODxLb1KMirqc2FN4.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48806
IP address blocks: 31.222.252.0/24 maxlen: 24
37.72.134.0/24 maxlen: 24
62.3.22.0/24 maxlen: 24
62.204.39.0/24 maxlen: 24
91.242.251.0/24 maxlen: 24
91.246.35.0/24 maxlen: 24
109.107.151.0/24 maxlen: 24
146.19.46.0/24 maxlen: 24
146.19.66.0/24 maxlen: 24
146.19.153.0/24 maxlen: 24
146.19.158.0/24 maxlen: 24
176.126.125.0/24 maxlen: 24
185.76.148.0/24 maxlen: 24
193.3.163.0/24 maxlen: 24
193.3.186.0/24 maxlen: 24
193.35.229.0/24 maxlen: 24
194.104.133.0/24 maxlen: 24
212.18.123.0/24 maxlen: 24
212.23.194.0/24 maxlen: 24
217.114.33.0/24 maxlen: 24
217.114.36.0/24 maxlen: 24
217.119.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:66:2c:93:9c:4e:0b:be:d5:a7:f0:a4:88:25:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddc9a26a0f8e14f1ce0f12dbd4a322aea73614de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:cb:13:d1:cf:26:48:25:cf:6a:eb:ba:04:
5e:06:77:5d:c0:45:3f:32:db:66:16:17:e8:78:55:
db:97:8c:8a:d8:fc:d2:27:fa:06:df:6d:2b:4d:36:
39:70:73:e8:86:15:ff:84:07:80:62:62:f7:01:7b:
20:11:02:58:ae:c3:71:b5:07:5f:53:48:fc:e8:3c:
47:e9:ae:04:3e:29:1f:7f:35:62:2f:f0:c9:c2:75:
25:a5:7e:94:fb:76:cb:cf:22:60:de:3d:64:cf:a5:
ac:e1:31:76:95:c0:e2:7e:7a:37:25:e8:b5:31:af:
c4:71:76:82:6a:21:a1:df:e7:60:03:7f:6a:8f:2d:
69:18:8e:e7:b8:96:a7:4a:a9:33:ee:12:e4:70:5c:
a1:32:b7:b6:08:b9:9c:24:30:75:5f:a0:32:29:43:
96:45:f4:58:46:7f:fe:17:bb:5f:67:90:bc:05:08:
77:c0:62:8f:6a:dc:6d:07:15:63:e5:4e:88:21:9e:
a8:9e:8a:b4:8e:b5:0e:ce:a8:a8:24:5a:e1:2f:15:
cc:81:13:87:c5:8f:ba:5c:0b:e4:1c:39:f5:22:20:
7a:3b:d6:35:0b:b1:5f:64:f3:2d:8b:a1:a8:71:e6:
be:d0:c2:46:59:1d:84:ce:8e:11:ea:90:a2:97:a2:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C9:A2:6A:0F:8E:14:F1:CE:0F:12:DB:D4:A3:22:AE:A7:36:14:DE
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/3cmiag-OFPHODxLb1KMirqc2FN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.252.0/24
37.72.134.0/24
62.3.22.0/24
62.204.39.0/24
91.242.251.0/24
91.246.35.0/24
109.107.151.0/24
146.19.46.0/24
146.19.66.0/24
146.19.153.0/24
146.19.158.0/24
176.126.125.0/24
185.76.148.0/24
193.3.163.0/24
193.3.186.0/24
193.35.229.0/24
194.104.133.0/24
212.18.123.0/24
212.23.194.0/24
217.114.33.0/24
217.114.36.0/24
217.119.133.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b5:4a:11:05:0f:2b:1b:20:2e:ca:c9:b9:9a:7f:c8:4f:8b:
fc:31:f0:6b:ac:ea:bf:bc:a2:56:59:55:9a:c8:84:52:98:44:
07:7a:a7:21:d4:40:e9:61:34:17:57:7f:85:b5:80:51:5a:d7:
5b:7c:3d:5d:87:68:a0:87:70:73:ae:42:3e:28:de:69:b5:ae:
f6:b4:49:e9:75:62:a4:7b:af:53:94:5b:6d:fd:d2:82:a5:3d:
c3:30:cd:24:04:df:83:2a:4a:30:17:60:52:b9:10:c1:ab:61:
e5:9e:56:d5:0c:a6:bc:5b:73:0c:6a:a9:a7:47:6b:18:5d:c4:
4d:02:77:2c:a1:6f:8d:20:0c:2c:30:3f:f1:4b:d4:d2:8c:02:
29:d6:18:96:05:79:02:ef:1a:e6:fb:84:47:a2:31:8f:bd:a0:
88:65:9b:e0:e9:b3:e2:44:de:2f:0f:03:b9:8c:a2:74:7a:3c:
9b:07:96:36:a9:43:56:1d:74:12:d7:53:89:cd:df:c9:61:64:
36:c7:60:0c:c4:ea:fc:67:9c:d2:24:34:71:49:2e:cd:06:87:
9e:2d:84:64:7c:29:97:88:d2:3f:cc:a3:30:ab:13:fd:4b:e4:
2a:6a:78:fe:53:9a:3c:a8:ea:07:af:43:79:0e:7c:ed:e4:8b:
43:e4:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:39 2025 by rpki-client