Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZeQqDN4vDI4UgO5C2NzMI8_0i8M.roa
File: ZeQqDN4vDI4UgO5C2NzMI8_0i8M.roa (raw, json)
Hash identifier: +V4fYM9aGPgrS6rM2U4W/Jw0Lg548oELrGxhQNINrlw=
Subject key identifier: 65:E4:2A:0C:DE:2F:0C:8E:14:80:EE:42:D8:DC:CC:23:CF:F4:8B:C3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD9FA8AAAD6D93C469AC59A9499DC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZeQqDN4vDI4UgO5C2NzMI8_0i8M.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61372
IP address blocks: 31.148.12.0/22 maxlen: 24
95.47.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d9:fa:8a:aa:d6:d9:3c:46:9a:c5:9a:94:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e42a0cde2f0c8e1480ee42d8dccc23cff48bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:c8:36:5f:f9:4a:35:f9:b1:6d:8b:df:68:
59:e3:1d:b2:b3:f5:2d:3f:3b:7d:a1:46:50:fb:ca:
cd:ef:35:47:4e:60:9d:e7:dd:6a:1a:ac:54:b5:62:
f6:19:06:7f:fc:61:b5:59:a8:b0:89:ca:22:9a:5b:
25:b7:a4:a5:f2:d9:5f:f7:66:f6:b8:23:bf:04:c6:
ab:ef:46:dd:0a:d8:29:06:7c:8c:11:00:37:67:23:
74:f3:f9:1b:cb:cc:78:16:13:58:33:7f:9a:09:1e:
f3:1e:56:fd:f1:4b:33:78:d6:30:4a:f5:95:76:02:
86:10:cb:ac:c2:d5:fd:a0:c4:93:23:6b:7d:ef:94:
4b:87:40:f8:e4:94:01:3e:d4:c5:64:fa:a8:1f:36:
6a:65:5f:91:13:94:0e:f8:ac:89:d3:3b:12:e4:4c:
6f:10:b9:27:a7:f1:ff:78:a3:c8:50:5a:f9:59:c6:
a3:74:94:13:36:85:af:94:ae:f2:67:8a:2b:09:6f:
7b:4d:da:31:de:92:a7:7c:cb:f4:66:12:6d:74:3c:
55:80:45:3d:4c:42:c7:91:56:97:8a:65:8d:ed:28:
e2:db:54:7e:cd:ae:1a:43:6f:c7:61:8b:bb:a9:ce:
15:cd:26:49:46:73:aa:6f:e2:4a:e4:7e:fa:9d:9c:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E4:2A:0C:DE:2F:0C:8E:14:80:EE:42:D8:DC:CC:23:CF:F4:8B:C3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZeQqDN4vDI4UgO5C2NzMI8_0i8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.12.0/22
95.47.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:92:ab:73:a5:f4:fa:d2:7f:35:b3:89:7c:1c:61:b7:11:d8:
7d:1b:08:81:35:42:2c:ee:2d:98:e3:4d:75:69:5a:47:68:46:
63:91:fd:15:68:6f:48:6c:a6:fb:7a:eb:16:55:c5:39:6a:90:
01:6e:45:a3:24:47:ab:e1:26:1d:f4:73:df:b7:98:e4:a1:eb:
01:51:5b:17:5f:44:c7:d0:97:4c:d3:48:e1:00:30:b3:74:59:
78:2d:a6:71:ff:09:02:37:5f:ae:6d:bb:61:9f:c7:62:97:b5:
5e:dc:28:3e:19:9c:a2:0a:5b:f2:a1:7d:8c:f3:b5:08:34:63:
69:26:0e:46:d4:2a:9d:dc:23:b3:fb:6b:a9:cb:96:e8:5e:fd:
a3:a4:cc:52:81:88:c9:e7:c1:3b:f8:8b:21:99:62:9b:a2:bd:
f3:9a:d0:a4:39:6a:4f:0b:f1:2f:aa:89:fe:38:34:a7:48:94:
98:21:bf:e5:a6:1f:fe:4c:39:6a:29:10:26:5b:3b:e6:ad:74:
47:ed:36:2e:31:8d:dc:07:1f:de:0f:06:ce:bc:8c:18:af:85:
54:a6:af:03:41:39:55:35:f5:19:2a:42:e6:74:eb:aa:da:16:
a7:ad:c8:a7:be:a0:b1:6d:6f:0a:ea:fa:06:10:c0:d4:09:ad:
04:53:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:04 2025 by rpki-client