Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ZMwLgKBSrugTXq55ANb0Iule1Qw.roa
File: ZMwLgKBSrugTXq55ANb0Iule1Qw.roa (raw, json)
Hash identifier: qEKlObVBaMsNH+TJQlYXmyZsrxSkxyGr2yCXWDKpvYc=
Subject key identifier: 64:CC:0B:80:A0:52:AE:E8:13:5E:AE:79:00:D6:F4:22:E9:5E:D5:0C
Certificate issuer: /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial: 0193AC4B17DB5153C3C9F04523D7025A1EF6
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ZMwLgKBSrugTXq55ANb0Iule1Qw.roa
Signing time: Mon 09 Dec 2024 16:40:22 +0000
ROA not before: Mon 09 Dec 2024 16:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196845
IP address blocks: 31.10.56.0/21 maxlen: 21
109.108.96.0/19 maxlen: 19
185.108.60.0/22 maxlen: 22
2a02:2428::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:4b:17:db:51:53:c3:c9:f0:45:23:d7:02:5a:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Validity
Not Before: Dec 9 16:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64cc0b80a052aee8135eae7900d6f422e95ed50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:0f:3a:eb:5e:20:49:67:f6:3e:b2:ed:7b:
8b:74:b0:de:af:5b:be:5d:1e:89:aa:71:2f:84:13:
fe:60:70:2b:b8:54:8c:8c:5e:d1:fb:15:79:91:0e:
36:01:85:68:32:1a:b8:aa:33:61:ba:4d:70:c8:24:
18:5b:49:38:02:6b:9b:80:9b:fc:d5:e1:0c:42:4e:
1b:ba:fb:10:92:fb:da:ae:3c:4a:e1:3d:b3:38:e3:
55:8b:8a:c5:51:a8:82:19:0c:bd:67:e3:03:df:61:
18:1e:d5:9b:d8:02:06:7c:94:f5:34:6a:da:71:61:
0e:79:e5:a0:11:de:7a:8a:79:63:96:9e:2b:88:b3:
00:df:f7:87:40:4a:2d:25:e3:e0:eb:6e:c2:b0:15:
5a:fc:9d:d3:38:ac:6d:72:b9:8b:0e:a0:1d:de:f9:
e0:b5:47:02:a6:63:6a:46:d1:db:fb:69:57:b3:7b:
5e:2f:a8:ec:c6:ef:85:02:a2:76:08:09:de:d1:99:
b5:ad:75:b9:04:6c:ec:49:1d:15:d9:7e:16:a6:53:
80:71:d1:db:5f:a1:49:c2:eb:c9:44:d0:48:27:5f:
c7:9e:42:18:c8:56:d6:15:ea:40:94:3d:f9:3e:06:
e7:5f:9c:14:0c:4f:f2:5d:4b:dc:d4:fd:28:0e:91:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:0B:80:A0:52:AE:E8:13:5E:AE:79:00:D6:F4:22:E9:5E:D5:0C
X509v3 Authority Key Identifier:
keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/ZMwLgKBSrugTXq55ANb0Iule1Qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.56.0/21
109.108.96.0/19
185.108.60.0/22
IPv6:
2a02:2428::/32
Signature Algorithm: sha256WithRSAEncryption
28:ff:34:b0:87:62:e6:97:59:19:ed:f5:08:e1:da:5c:d6:4e:
3d:8b:fc:a6:46:d3:34:27:d1:96:bf:bd:e7:3d:de:c6:c7:81:
30:c4:a7:83:a8:1d:2c:e7:ae:a5:a7:d7:40:71:ba:a3:14:36:
ad:84:c4:0f:56:e6:c0:22:d5:e8:1b:0e:a4:82:e9:ce:3d:58:
05:69:94:57:b0:a7:75:b1:47:95:16:6b:f2:b5:4e:71:3d:86:
0a:6d:b0:cb:b8:ba:c0:57:93:24:7a:66:61:1f:f9:0c:5b:e6:
d5:57:88:ad:bf:5e:02:a8:fb:20:33:2b:2e:5b:7c:4d:17:65:
b1:e0:81:9c:72:0d:0c:ba:dd:e8:77:35:44:20:10:f0:bf:92:
69:0a:3b:ce:c7:34:71:57:8f:4c:ca:78:6e:8e:69:72:a2:3d:
61:df:34:28:c4:c9:fe:da:9c:cb:35:f5:c5:c5:c3:94:e1:d3:
a9:8b:cc:d0:1d:b9:44:fa:1c:6f:12:d5:9c:42:d0:03:f3:c2:
db:72:b6:81:98:28:a6:00:c9:47:5a:92:86:32:ed:23:33:3d:
8e:24:b9:18:d7:99:2b:94:d9:9d:46:7c:70:8b:2e:91:87:1b:
66:d0:d5:44:82:08:2b:ff:ec:22:c6:14:38:99:41:84:0a:19:
e8:bc:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:57:13 2025 by rpki-client