Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qZWMr7ksgMPzj5-fSc86OzIn8Qc.roa
File: qZWMr7ksgMPzj5-fSc86OzIn8Qc.roa (raw, json)
Hash identifier: 0ROczfLdtANzRrVIdxaDWkUPqFXZa3GtmzkxQscHDhg=
Subject key identifier: A9:95:8C:AF:B9:2C:80:C3:F3:8F:9F:9F:49:CF:3A:3B:32:27:F1:07
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019519EC7B64C52508A670817AB66C7A364D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qZWMr7ksgMPzj5-fSc86OzIn8Qc.roa
Signing time: Tue 18 Feb 2025 16:38:03 +0000
ROA not before: Tue 18 Feb 2025 16:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35004
IP address blocks: 31.148.149.0/24 maxlen: 24
93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
95.46.212.0/22 maxlen: 24
95.47.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:ec:7b:64:c5:25:08:a6:70:81:7a:b6:6c:7a:36:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 18 16:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9958cafb92c80c3f38f9f9f49cf3a3b3227f107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:31:31:4d:38:23:2e:66:a6:ec:03:a2:f9:
5b:79:86:53:eb:d2:e0:25:4f:2c:88:11:2a:b7:c8:
9a:ac:b1:57:fa:fb:28:33:85:b0:27:3f:d9:e5:4f:
7e:8e:8d:27:a6:e3:43:3a:ec:92:3c:4f:58:d5:b4:
7f:6a:53:32:50:de:d2:b8:52:a4:14:66:a6:e5:98:
67:98:38:14:03:a4:78:73:e6:17:ed:92:5e:4d:86:
5b:22:32:f5:b7:fb:52:08:4f:f7:76:a5:5c:a3:b5:
2a:0f:94:23:89:bf:26:1c:de:a2:d5:0e:d5:cf:8e:
e8:ef:03:41:4c:c8:a9:19:a2:17:09:66:fa:dc:f7:
00:1b:c7:d1:c1:c4:8a:96:ce:46:f3:1a:f8:fb:62:
03:20:ee:4b:b3:88:b5:0d:d1:45:ce:0f:30:19:b6:
e6:9e:a0:65:f0:8b:f8:72:f7:5c:f8:16:ce:b6:8a:
48:12:42:b2:fa:b0:e7:b2:c4:16:37:76:23:7b:02:
63:94:12:4d:f5:ba:f8:a4:4d:c6:36:47:61:70:98:
13:75:d7:00:a7:d7:28:4c:09:11:70:7d:a9:c2:21:
8e:da:82:3a:3a:0d:be:4d:52:41:b5:c9:20:d0:7b:
74:e9:a8:0a:62:4f:b8:37:db:d0:9b:51:85:cd:cd:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:8C:AF:B9:2C:80:C3:F3:8F:9F:9F:49:CF:3A:3B:32:27:F1:07
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qZWMr7ksgMPzj5-fSc86OzIn8Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.149.0/24
93.170.116.0/22
95.46.212.0/22
95.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7f:6a:07:ff:05:71:13:68:a6:98:7f:a9:dd:45:8c:44:4c:
29:18:eb:5a:82:93:f2:89:9a:1e:e2:c2:79:da:c1:e9:cb:d7:
3e:a0:b6:4d:f4:9f:4a:a9:18:bb:ec:22:49:90:b4:c5:10:8c:
42:8c:1c:26:9a:ad:25:e0:3f:2a:f0:52:e8:35:15:93:cb:dd:
26:c1:8c:e0:c2:9e:b9:29:92:ff:ab:ff:15:fa:7a:43:d4:08:
6b:15:a6:d3:81:17:f6:fe:ad:0d:f6:fb:3e:f2:f4:96:4a:72:
1d:d9:45:01:5d:a6:92:b2:3f:ff:51:e9:49:49:c1:5d:25:d3:
02:d1:cf:18:08:5b:88:a7:8e:aa:3a:d5:d1:b1:0e:2f:58:14:
0b:23:6e:44:d3:dd:73:3b:4b:81:b2:df:2e:d9:14:1f:1c:af:
90:84:84:72:7e:61:da:fc:72:44:62:a3:15:2e:45:86:62:6a:
c7:a7:d6:5c:d8:d8:25:25:12:e2:04:01:ca:ec:a2:11:1b:de:
e8:02:29:ea:07:95:a5:32:ed:ce:c7:63:91:82:43:f4:c1:2a:
a3:2d:25:46:68:78:b6:98:ca:1d:5b:83:7a:83:31:96:40:24:
8b:c9:16:ec:a2:73:97:88:d3:45:73:3f:77:4c:31:dd:a7:dc:
92:1b:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:21 2025 by rpki-client