Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Pz7NU6STR9TIDQ04UMXmoKPVjro.roa
File: Pz7NU6STR9TIDQ04UMXmoKPVjro.roa (raw, json)
Hash identifier: Tmbo0CXGhGsx59/rnH0CK8F7805oDqYjgNQgtncuY5w=
Subject key identifier: 3F:3E:CD:53:A4:93:47:D4:C8:0D:0D:38:50:C5:E6:A0:A3:D5:8E:BA
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01942747FCAECC6596E1F08312ABA6B56397
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Pz7NU6STR9TIDQ04UMXmoKPVjro.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 31.42.191.0/24 maxlen: 24
194.61.54.0/24 maxlen: 24
194.61.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fc:ae:cc:65:96:e1:f0:83:12:ab:a6:b5:63:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3ecd53a49347d4c80d0d3850c5e6a0a3d58eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:8e:79:6f:d5:f5:45:14:f7:93:33:7c:0d:
e2:2f:84:81:99:77:94:02:b7:91:8f:c2:9e:10:35:
42:40:72:90:6b:78:16:81:6c:4f:e2:c1:76:38:b3:
6c:20:1e:4d:85:c1:52:2d:12:19:ad:8b:df:99:97:
e2:0c:12:f1:78:2e:ff:09:6b:0d:08:ca:e1:0d:b5:
6b:ea:22:3a:84:d6:a2:83:db:25:f7:80:36:6d:a2:
64:a2:75:22:35:94:5e:56:1a:c5:24:74:fc:28:b8:
14:66:68:2a:31:58:f9:7e:11:68:23:ef:d7:56:c9:
64:4e:39:02:cd:a8:94:3c:e7:09:e4:e7:d3:26:93:
da:5f:66:aa:5f:72:64:0d:c8:56:78:e0:3c:00:78:
6d:03:cd:57:26:c4:2b:d4:4c:b3:15:2e:a6:b0:9c:
8d:f9:26:cd:e0:8e:a7:ca:b9:20:57:72:76:c0:da:
b5:90:c0:d9:b4:6a:f1:70:68:da:d0:0b:eb:b1:0e:
aa:83:6f:81:b4:e7:db:02:7c:a7:f9:58:8e:2e:54:
92:94:75:04:41:6f:2b:ed:c6:34:7d:46:d2:54:ea:
20:57:a4:09:64:3a:c1:79:5c:0d:9f:26:fa:f1:ad:
f3:a8:10:5b:c1:db:9d:15:73:c8:72:5e:00:d8:c5:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:CD:53:A4:93:47:D4:C8:0D:0D:38:50:C5:E6:A0:A3:D5:8E:BA
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/Pz7NU6STR9TIDQ04UMXmoKPVjro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.191.0/24
194.61.54.0/23
Signature Algorithm: sha256WithRSAEncryption
85:18:21:03:c0:4a:31:c9:d3:26:7c:45:24:67:32:92:12:79:
26:34:69:23:c4:a6:de:6b:0b:7f:eb:43:f3:fe:68:0c:2a:77:
91:5c:9f:b9:79:ae:e7:f6:e4:c6:a4:b2:6b:9a:df:0c:fb:d2:
09:08:26:fd:5b:e6:2f:69:2b:fd:c8:a6:be:ed:cb:ae:6e:fd:
a0:e7:c5:1d:fb:19:04:fb:1d:21:6c:2b:39:48:56:e4:9a:2d:
be:87:38:66:79:f0:6b:45:ce:f6:8f:4d:f6:ce:3d:3f:6d:9c:
73:4f:65:a7:3d:7b:58:07:cc:82:d4:19:b4:cc:2e:c8:56:16:
60:4e:cd:f5:24:0e:0c:e1:c8:e7:0b:91:e6:bc:a5:c5:96:c7:
e4:30:95:ba:4d:12:79:08:9e:d6:0c:41:f1:0c:c7:90:60:a0:
62:1d:8f:24:61:26:ae:d4:3b:37:a0:dd:c8:4e:9d:e3:06:d7:
40:0f:0c:82:03:ac:d3:d1:4f:2c:ca:b2:04:d2:1a:22:18:7f:
62:48:3d:a2:10:c2:bf:f2:c2:62:b7:d0:b4:3e:86:ef:69:18:
73:23:f2:63:db:e5:5b:28:d4:a1:e2:a9:4f:b5:6b:d3:ac:e3:
24:90:f9:4e:43:12:90:81:ba:a5:bb:62:07:eb:44:ff:10:d0:
77:3c:97:43
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnR/yuzGWW4fCDEqumtWOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjUwMTAyMTM1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjNlY2Q1M2E0OTM0N2Q0YzgwZDBkMzg1MGM1ZTZhMGEzZDU4ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5OOeW/V9UUU95MzfA3iL4SBmXeU
AreRj8KeEDVCQHKQa3gWgWxP4sF2OLNsIB5NhcFSLRIZrYvfmZfiDBLxeC7/CWsN
CMrhDbVr6iI6hNaig9sl94A2baJkonUiNZReVhrFJHT8KLgUZmgqMVj5fhFoI+/X
VslkTjkCzaiUPOcJ5OfTJpPaX2aqX3JkDchWeOA8AHhtA81XJsQr1EyzFS6msJyN
+SbN4I6nyrkgV3J2wNq1kMDZtGrxcGja0AvrsQ6qg2+BtOfbAnyn+ViOLlSSlHUE
QW8r7cY0fUbSVOogV6QJZDrBeVwNnyb68a3zqBBbwdudFXPIcl4A2MWGNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD8+zVOkk0fUyA0NOFDF5qCj1Y66MB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvUHo3TlU2U1RSOVRJRFEwNFVNWG1vS1BWanJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyq/AwQB
wj02MA0GCSqGSIb3DQEBCwUAA4IBAQCFGCEDwEoxydMmfEUkZzKSEnkmNGkjxKbe
awt/60Pz/mgMKneRXJ+5ea7n9uTGpLJrmt8M+9IJCCb9W+YvaSv9yKa+7cuubv2g
58Ud+xkE+x0hbCs5SFbkmi2+hzhmefBrRc72j032zj0/bZxzT2WnPXtYB8yC1Bm0
zC7IVhZgTs31JA4M4cjnC5HmvKXFlsfkMJW6TRJ5CJ7WDEHxDMeQYKBiHY8kYSau
1Ds3oN3ITp3jBtdADwyCA6zT0U8syrIE0hoiGH9iSD2iEMK/8sJit9C0PobvaRhz
I/Jj2+VbKNSh4qlPtWvTrOMkkPlOQxKQgbqlu2IH60T/ENB3PJdD
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:32:40 2025 by rpki-client