Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZP93Evl8r_kCcAA5unGwHs7QsAg.roa
File: ZP93Evl8r_kCcAA5unGwHs7QsAg.roa (raw, json)
Hash identifier: 7PkUEOSRxJ7ZjkE+NvaaQLQmgQwpNWekodLH7qwfq68=
Subject key identifier: 64:FF:77:12:F9:7C:AF:F9:02:70:00:39:BA:71:B0:1E:CE:D0:B0:08
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD95D96512F75EDC786BDB3E0B97D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZP93Evl8r_kCcAA5unGwHs7QsAg.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61312
IP address blocks: 31.148.25.0/24 maxlen: 24
92.38.34.0/24 maxlen: 24
93.170.55.0/24 maxlen: 24
93.170.175.0/24 maxlen: 24
93.171.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d9:5d:96:51:2f:75:ed:c7:86:bd:b3:e0:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64ff7712f97caff902700039ba71b01eced0b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:3b:dc:81:0c:44:46:f4:9e:1a:b4:09:2b:
c9:2d:5f:40:04:78:fe:22:db:c8:85:f7:49:21:05:
67:b1:fe:15:26:0f:ab:f1:c8:5c:ec:ad:08:27:a7:
e5:7e:d6:71:4d:5c:9a:13:a7:64:d8:6f:51:76:65:
ec:a4:0f:af:45:a9:6c:97:2a:ac:27:4f:9c:7d:18:
26:43:f0:f7:56:e8:d1:08:1e:6a:ef:b5:dc:67:eb:
c1:88:25:3f:c9:45:aa:3c:7d:87:49:4c:4e:27:ee:
be:36:9e:c1:a2:74:3f:e4:59:68:a1:c6:ae:30:4d:
54:d6:ce:70:5a:43:e6:33:f8:7f:a2:d3:86:11:6f:
8e:51:cb:3d:4b:17:91:c8:d8:b4:04:a2:39:38:1e:
fd:7d:c0:6a:3f:be:cd:10:cc:1a:67:fb:b4:41:85:
af:6a:ba:51:cd:fd:fb:8b:12:19:ba:e4:ce:a4:33:
b5:53:59:5c:fd:59:78:cc:ff:56:ac:f3:fe:d6:95:
d0:a4:8e:8c:18:cc:f3:89:7d:fc:e8:19:97:85:79:
ac:3d:1d:ab:20:8e:c5:78:b2:da:7e:62:6d:3b:e1:
ef:44:b3:53:69:5b:2c:b0:71:aa:26:16:4c:b3:19:
a2:a7:45:a7:40:01:85:5a:33:a6:a0:4c:23:50:4a:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:77:12:F9:7C:AF:F9:02:70:00:39:BA:71:B0:1E:CE:D0:B0:08
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZP93Evl8r_kCcAA5unGwHs7QsAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.25.0/24
92.38.34.0/24
93.170.55.0/24
93.170.175.0/24
93.171.152.0/24
Signature Algorithm: sha256WithRSAEncryption
93:04:5d:37:d7:e5:4a:45:29:b5:85:8f:dc:0e:07:87:64:84:
e7:17:52:e8:6f:a7:a6:ed:f6:f4:89:6d:0c:01:39:68:b8:3b:
c1:1b:62:38:13:8e:b9:2f:23:50:81:59:1e:20:91:b6:cb:1c:
3b:53:2c:61:44:3e:8c:fb:ff:a9:78:b5:14:f5:0f:7c:db:1c:
1b:2c:a6:25:b2:9e:45:99:21:93:ea:67:bd:ab:52:2c:df:7d:
07:7b:36:1f:c0:01:4d:83:59:93:79:a0:57:a2:0d:75:fc:46:
df:67:e5:3a:03:fe:0f:88:5b:b3:7c:02:f1:e7:a1:35:b8:48:
b9:37:a1:02:6a:65:3b:c5:90:aa:14:77:37:26:e2:e0:83:f5:
da:61:d1:bb:4e:54:54:f9:79:20:af:1a:b5:32:d8:07:2c:28:
53:61:f6:e5:ce:bd:71:4f:8a:c7:49:97:0d:82:06:d0:0d:a4:
a2:9e:5b:a2:48:7a:d2:a7:ec:5d:cf:71:a6:82:c0:85:b7:69:
19:48:2c:00:8d:f1:86:4a:43:b3:2b:e9:31:c5:b1:4e:42:9f:
8c:0a:24:d9:1e:04:3f:80:46:3a:2a:ef:f4:72:c0:3e:59:4b:
82:99:0b:2c:2a:8f:06:bb:53:48:43:8c:17:ac:b5:75:0f:c8:
a2:1d:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:56 2025 by rpki-client