Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa
File: ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa (raw, json)
Hash identifier: fwgZ3FgELKfh9d5JZWpb+7kZ9OlNjMIWIM8CDC2wbXE=
Subject key identifier: 64:07:8B:02:3C:AD:2F:B4:77:78:2C:52:46:EA:32:1C:DE:BF:EE:6C
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0195A8A264B4FC8218478747D9FC1B055299
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa
Signing time: Tue 18 Mar 2025 09:42:49 +0000
ROA not before: Tue 18 Mar 2025 09:42:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48014
IP address blocks: 31.41.33.0/24 maxlen: 24
2001:3787::/32 maxlen: 32
2a12:4040::/29 maxlen: 29
2a12:4045::/32 maxlen: 32
2a12:4047::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:a2:64:b4:fc:82:18:47:87:47:d9:fc:1b:05:52:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 18 09:42:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64078b023cad2fb477782c5246ea321cdebfee6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:26:1a:80:3f:96:ab:11:50:7c:da:1e:a4:
9f:a4:4d:d3:42:cc:fd:9c:2f:5c:76:c3:ee:42:56:
22:ac:9e:1c:f9:48:7b:06:d4:0f:97:18:e1:b8:b0:
d0:bf:a6:68:a2:f9:0b:19:7f:81:4f:5a:44:14:3f:
26:58:47:46:96:a4:a5:75:3a:73:7d:40:ec:24:21:
7c:df:59:07:57:08:e0:29:04:c7:b2:e1:0e:a8:eb:
4c:e6:61:9b:da:4f:47:c7:b9:58:f5:5a:1b:65:f4:
79:a2:fe:fa:76:34:bf:6f:76:60:08:2a:27:bb:88:
c5:e0:0b:b4:1d:fd:f4:e9:bb:5f:0f:d8:44:5e:4d:
05:34:2f:3f:13:82:80:e9:0d:56:2e:d9:45:ae:c0:
27:90:10:ae:0b:0d:5e:c0:73:60:2e:ae:d2:f6:62:
29:6b:fa:4a:49:29:90:79:c1:9e:97:8e:3a:86:5a:
d2:55:4c:a5:9f:1c:c5:42:78:9a:71:2f:f4:46:ee:
a1:10:35:1e:fa:30:c3:55:f9:89:72:b0:e7:09:25:
e8:9f:3c:dd:64:d4:50:e8:77:f7:e4:06:20:c2:2e:
4b:e2:e5:de:ff:00:e0:69:99:2e:f3:1b:54:12:e8:
34:f6:3c:b1:da:04:73:84:de:6b:96:a6:0a:44:54:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:07:8B:02:3C:AD:2F:B4:77:78:2C:52:46:EA:32:1C:DE:BF:EE:6C
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/ZAeLAjytL7R3eCxSRuoyHN6_7mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.33.0/24
IPv6:
2001:3787::/32
2a12:4040::/29
Signature Algorithm: sha256WithRSAEncryption
68:3d:61:c7:b7:22:0e:68:55:42:09:87:66:d9:f7:ea:e3:8f:
9e:7a:b2:ac:08:55:30:a9:92:9f:ab:74:30:68:ae:85:a0:40:
0c:97:6d:1c:a3:9f:16:72:58:fd:7d:c9:9d:f6:52:ef:fc:af:
c1:f8:31:0c:58:0e:08:6f:ec:fb:d5:b8:5a:5a:d5:65:51:91:
51:bf:84:fb:22:92:ac:88:d3:5f:0e:6f:28:c4:39:b9:43:92:
6b:59:bc:cb:36:62:86:1c:99:73:ca:df:19:f5:5f:6b:59:56:
d6:79:43:0a:0c:52:1e:79:e2:52:5f:e4:78:c1:d1:7b:36:88:
52:58:a9:53:27:6c:7a:c0:67:1e:78:29:1d:67:e8:8d:ac:88:
36:80:8c:85:21:9a:c1:17:8a:e2:c9:2f:8e:60:d0:22:ff:2e:
fb:a9:4d:90:df:01:46:27:65:13:b6:a1:ba:45:68:65:d2:d1:
b7:0b:ca:b8:4e:2d:8e:89:c8:8f:7b:6e:c3:a9:c6:36:3c:10:
b6:53:36:23:7d:3f:53:5b:7f:60:fa:6c:fd:3f:88:ea:8c:30:
fe:e0:64:26:ae:55:f3:b2:de:89:0b:28:1f:bf:1b:9a:b6:2f:
f3:63:3f:67:5b:b6:54:2a:57:64:cc:64:22:46:7b:c5:c8:18:
14:ac:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:30 2025 by rpki-client