Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z3GQUrax-FXTmhOxiDlPpP9v2S4.roa
File: Z3GQUrax-FXTmhOxiDlPpP9v2S4.roa (raw, json)
Hash identifier: lUd3K3lgymWOxI+HsoYAsl3C0IRZ5F6oXc5UYdYTjUs=
Subject key identifier: 67:71:90:52:B6:B1:F8:55:D3:9A:13:B1:88:39:4F:A4:FF:6F:D9:2E
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244510C9D260FF099FB2D8925783C128
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z3GQUrax-FXTmhOxiDlPpP9v2S4.roa
Signing time: Wed 01 Jan 2025 23:48:13 +0000
ROA not before: Wed 01 Jan 2025 23:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27176
IP address blocks: 5.172.181.0/24 maxlen: 24
37.77.146.0/24 maxlen: 24
193.142.242.0/24 maxlen: 24
193.142.249.0/24 maxlen: 24
193.192.1.0/24 maxlen: 24
193.192.15.0/24 maxlen: 24
213.170.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:10:c9:d2:60:ff:09:9f:b2:d8:92:57:83:c1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67719052b6b1f855d39a13b188394fa4ff6fd92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:f8:8b:7a:2a:dc:d4:3d:03:af:5c:01:e5:
d4:44:d7:76:e1:6c:87:70:8e:8f:b2:a9:eb:29:4e:
5d:40:d3:47:cf:01:4f:82:61:d7:7d:89:e4:e0:f8:
c8:a9:40:fe:47:03:0a:42:f3:3d:9a:ab:50:0d:a5:
f1:a5:6c:7e:1c:14:8a:57:d1:a6:70:bd:3b:21:13:
79:78:0a:61:7a:2a:99:00:bc:c8:9b:03:18:d3:4b:
a0:cf:dc:3c:e9:88:2a:5e:1c:43:d7:2c:bc:1e:53:
e1:5c:26:6b:a0:d6:79:f4:5b:45:02:62:12:0e:7e:
a5:91:42:97:76:bf:bb:9d:d4:26:58:3f:0c:a7:9f:
2d:fd:39:be:32:61:4e:94:08:02:50:64:ed:f2:a3:
64:e2:de:9c:3c:96:3d:70:0a:34:e1:08:a0:b8:27:
c2:f6:2d:82:c9:1c:25:23:78:2d:62:b7:40:79:ea:
8c:14:2e:91:51:1c:ed:2f:c6:fd:b2:a9:26:55:98:
ac:bc:fd:e3:68:64:39:0a:0d:aa:ea:dc:2c:f3:97:
e7:ea:e3:43:84:52:2d:97:97:c8:72:c2:a1:e3:e7:
5b:f6:21:b9:09:a1:89:d1:cd:fe:96:8d:d2:ca:74:
7d:41:14:d5:1f:fa:4e:6d:7d:73:16:4f:0a:10:e1:
cf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:71:90:52:B6:B1:F8:55:D3:9A:13:B1:88:39:4F:A4:FF:6F:D9:2E
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Z3GQUrax-FXTmhOxiDlPpP9v2S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.181.0/24
37.77.146.0/24
193.142.242.0/24
193.142.249.0/24
193.192.1.0/24
193.192.15.0/24
213.170.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:fd:e3:71:34:90:55:53:4d:34:01:24:bb:f5:3a:b4:e1:f9:
2c:29:e3:e1:e3:c0:79:2d:95:71:9a:e3:dc:ee:48:9c:51:86:
12:cf:77:22:23:0f:c4:1c:c9:d9:29:d1:a0:72:92:52:d1:63:
ac:e1:48:79:ef:a3:63:58:59:a0:d0:49:d6:b4:d5:13:3f:37:
61:6c:b8:cd:32:b1:37:6f:e8:ad:4d:60:5f:4a:ce:e1:0e:46:
37:6a:cb:08:b2:10:81:1c:66:d6:f5:50:ec:99:d8:7a:2e:32:
73:aa:5d:e1:5f:0e:3a:83:1f:5d:d1:97:03:5b:df:45:b1:14:
28:1f:43:4b:c4:e9:43:c5:25:37:30:35:c7:4a:0f:73:6c:9a:
31:25:23:3c:80:94:4d:1a:c1:d0:23:00:8e:1b:e7:bd:f8:db:
42:f2:9a:ae:30:54:00:6d:40:c2:dd:0a:67:09:11:a3:3e:f3:
7b:44:07:8d:4d:08:f8:80:b5:58:7f:19:93:d6:c4:7e:67:58:
60:32:50:c9:fd:b6:d7:8a:18:dc:03:30:ca:1e:2e:a2:86:23:
8f:49:62:da:e2:8e:99:da:36:43:95:1c:a0:6a:2d:29:55:13:
47:b3:2f:f5:26:95:f5:2d:1b:56:80:c6:8b:e2:84:ed:82:3f:
f3:30:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:55 2025 by rpki-client