Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZU3jSFkDf9DCcdMQaK69VZEJjnc.roa
File: ZU3jSFkDf9DCcdMQaK69VZEJjnc.roa (raw, json)
Hash identifier: xBLI7yebMTtQjPw1aQRxVCLkvU1z31f5ur2IfMg+P/k=
Subject key identifier: 65:4D:E3:48:59:03:7F:D0:C2:71:D3:10:68:AE:BD:55:91:09:8E:77
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FEE1C359D45B94CC6060B576AE0E7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZU3jSFkDf9DCcdMQaK69VZEJjnc.roa
Signing time: Thu 02 Jan 2025 05:49:37 +0000
ROA not before: Thu 02 Jan 2025 05:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203553
IP address blocks: 31.148.175.0/24 maxlen: 24
92.38.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ee:1c:35:9d:45:b9:4c:c6:06:0b:57:6a:e0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=654de34859037fd0c271d31068aebd5591098e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:5e:54:00:f6:c4:7c:b1:36:c9:ab:6b:df:
a3:c5:a9:f1:57:3d:1f:07:84:2e:4c:6e:49:9e:fa:
aa:20:79:85:3b:aa:d0:79:63:b7:e3:f5:89:0f:77:
40:6d:43:0a:f7:03:99:96:33:18:ca:d2:20:de:75:
bf:6e:45:7a:dc:0f:d6:0a:da:f9:af:1f:cb:46:dc:
94:04:ca:51:02:89:a2:de:cb:68:e8:4e:9a:4c:f6:
a1:6a:92:d2:a0:cb:1b:70:a7:09:82:d6:d0:20:f5:
b5:da:6b:ff:90:64:53:a8:32:b4:3f:b7:51:6c:8b:
32:60:f3:9a:f9:a3:5e:71:58:31:01:40:44:3f:08:
a9:e7:d5:d9:3b:b0:11:cb:6d:d4:b7:97:1a:9e:2a:
eb:96:f6:be:29:89:56:7f:a2:88:73:11:64:27:bf:
dd:e4:74:53:44:9d:ae:d1:ce:72:9e:52:bc:92:b2:
c9:6e:c9:e8:8b:9e:36:15:47:c1:7d:14:ba:6e:a5:
20:18:41:2b:66:ff:9a:8b:10:43:d6:ec:bc:65:fa:
c4:d0:6c:b6:b2:ea:ba:58:ef:ea:3c:fe:e4:f3:7a:
e3:48:1a:34:f9:81:91:f1:8b:66:3f:04:7a:7b:4e:
a3:c7:be:4f:e3:c8:fe:1f:0f:ac:d1:66:5e:6a:21:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4D:E3:48:59:03:7F:D0:C2:71:D3:10:68:AE:BD:55:91:09:8E:77
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZU3jSFkDf9DCcdMQaK69VZEJjnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
92.38.5.0/24
Signature Algorithm: sha256WithRSAEncryption
99:48:c9:60:a8:30:4d:78:8e:1a:da:5c:56:5a:98:01:79:a4:
9b:08:b3:59:4f:70:a3:a4:71:cb:35:f1:76:2a:83:75:bc:f6:
f0:87:bc:28:1b:83:26:ca:97:cd:2f:ba:80:e0:5f:16:5b:8d:
46:72:1c:43:45:30:35:d7:ce:44:e8:8a:a5:ee:ea:c8:aa:4f:
c0:46:ff:21:32:13:bd:c3:2b:de:78:84:22:09:fd:90:52:1c:
5d:e0:12:ae:38:ad:65:a6:05:dd:a7:ae:3a:d9:5d:28:0a:1b:
53:60:73:05:4e:e9:03:6d:b1:cd:49:48:9a:0e:4a:ed:47:49:
6d:83:a0:de:7d:12:5c:dc:fc:cb:8b:45:bd:18:f1:b6:af:fe:
59:26:b5:e3:dd:e0:5a:68:0d:7b:34:2f:df:42:4a:fb:7a:21:
b2:77:c3:e0:cb:ed:31:fa:e8:a7:97:d7:07:7a:07:1c:e5:5d:
55:11:4b:a5:c3:a0:46:14:0f:a9:bc:8c:aa:1f:ae:ee:9f:e5:
b2:6c:83:4b:b3:70:6c:ff:64:12:db:84:3f:ef:59:67:26:19:
00:0f:8a:0b:d9:5b:7d:4a:09:c9:f2:a4:80:16:6e:b7:ba:0b:
a7:23:d5:89:3e:03:36:64:c0:52:f5:7d:ed:cd:d7:60:70:ce:
7a:ee:86:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj+4cNZ1FuUzGBgtXauDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTRkZTM0ODU5MDM3ZmQwYzI3MWQzMTA2OGFlYmQ1NTkxMDk4ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjJeVAD2xHyxNsmra9+jxanxVz0f
B4QuTG5JnvqqIHmFO6rQeWO34/WJD3dAbUMK9wOZljMYytIg3nW/bkV63A/WCtr5
rx/LRtyUBMpRAomi3sto6E6aTPahapLSoMsbcKcJgtbQIPW12mv/kGRTqDK0P7dR
bIsyYPOa+aNecVgxAUBEPwip59XZO7ARy23Ut5canirrlva+KYlWf6KIcxFkJ7/d
5HRTRJ2u0c5ynlK8krLJbsnoi542FUfBfRS6bqUgGEErZv+aixBD1uy8ZfrE0Gy2
suq6WO/qPP7k83rjSBo0+YGR8YtmPwR6e06jx75P48j+Hw+s0WZeaiEqFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGVN40hZA3/QwnHTEGiuvVWRCY53MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWlUzalNGa0RmOURDY2RNUWFLNjlWWkVKam5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5SvAwQA
XCYFMA0GCSqGSIb3DQEBCwUAA4IBAQCZSMlgqDBNeI4a2lxWWpgBeaSbCLNZT3Cj
pHHLNfF2KoN1vPbwh7woG4MmypfNL7qA4F8WW41GchxDRTA1185E6Iql7urIqk/A
Rv8hMhO9wyveeIQiCf2QUhxd4BKuOK1lpgXdp6462V0oChtTYHMFTukDbbHNSUia
DkrtR0ltg6DefRJc3PzLi0W9GPG2r/5ZJrXj3eBaaA17NC/fQkr7eiGyd8Pgy+0x
+uinl9cHegcc5V1VEUulw6BGFA+pvIyqH67un+WybINLs3Bs/2QS24Q/71lnJhkA
D4oL2Vt9SgnJ8qSAFm63ugunI9WJPgM2ZMBS9X3tzddgcM567oZm
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:35 2025 by rpki-client