Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Zm2JfyTeERhBzYDvk2afv74vdbg.roa
File: Zm2JfyTeERhBzYDvk2afv74vdbg.roa (raw, json)
Hash identifier: DReIJihceDuNN6dZJ5Ov64xgQFbw1n7eH/LcP0/n+IA=
Subject key identifier: 66:6D:89:7F:24:DE:11:18:41:CD:80:EF:93:66:9F:BF:BE:2F:75:B8
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0194228D174B04450993ABADD39831B6274A
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Zm2JfyTeERhBzYDvk2afv74vdbg.roa
Signing time: Wed 01 Jan 2025 15:47:39 +0000
ROA not before: Wed 01 Jan 2025 15:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:17:4b:04:45:09:93:ab:ad:d3:98:31:b6:27:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jan 1 15:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666d897f24de111841cd80ef93669fbfbe2f75b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:c4:20:a2:80:7b:cd:ba:19:bb:ed:58:e0:
99:76:a3:b5:59:45:01:04:39:d6:95:91:7f:c2:6e:
bf:45:42:dc:a8:d0:fb:39:86:15:1f:b6:1d:9c:5f:
17:83:b3:22:1b:66:cb:b2:94:33:75:e0:8e:44:45:
92:e5:81:ad:17:87:d1:57:69:0b:78:a5:b9:5d:1b:
06:56:e4:62:27:04:5e:8b:d1:17:59:a6:15:10:b9:
fa:2c:b5:67:f7:1a:62:7d:26:e2:01:24:ca:a8:d3:
d7:a3:e7:e2:03:23:ca:39:ce:dd:e2:e5:23:d8:cd:
5e:0c:00:8c:e0:68:07:ba:fd:89:de:4f:09:3b:b4:
6a:c7:78:2d:07:33:5b:6e:68:73:a5:a5:20:69:6a:
25:82:62:4c:d9:2c:3c:ed:62:d4:24:e6:66:0f:bb:
d1:ac:01:da:9c:a3:4d:30:f3:84:ae:93:90:19:ae:
0b:01:04:0a:c6:c9:8f:1d:d7:49:a4:11:c7:ad:86:
25:98:28:e5:69:6f:68:70:5d:cc:ae:2c:ff:71:0f:
e1:ba:87:ee:c7:51:ef:64:0a:61:3a:d5:8b:bb:78:
0e:b6:35:4e:95:1d:6f:3e:2c:97:6d:da:b3:21:ac:
09:3f:83:91:96:3a:9d:17:f2:3e:fa:a8:d8:26:26:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6D:89:7F:24:DE:11:18:41:CD:80:EF:93:66:9F:BF:BE:2F:75:B8
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/Zm2JfyTeERhBzYDvk2afv74vdbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:02:b0:27:20:b4:f4:1c:df:28:1a:2e:de:b5:af:61:a2:11:
a6:28:7b:ee:0f:e4:23:93:70:36:1d:fb:38:31:b2:a9:19:62:
0e:87:64:0b:3f:4a:8f:51:ce:04:54:09:68:e2:2a:c9:3d:15:
0a:0d:22:a4:59:70:40:5f:ba:d4:13:87:3b:cf:6c:a5:31:67:
34:50:05:f4:d6:22:50:75:ca:78:95:af:70:de:2e:05:8e:8d:
74:ae:68:0f:a6:b2:b6:52:06:22:22:dc:e1:1b:6d:46:64:79:
32:65:c7:cc:da:85:7c:59:9f:2e:13:ba:93:e3:51:81:c0:65:
af:2a:d7:4a:5e:52:df:41:6f:b5:50:4f:ab:1c:95:63:88:87:
2f:30:ba:36:36:b9:34:cf:85:98:6d:e1:76:51:ad:22:e7:6c:
b5:07:e6:4c:58:37:19:0c:89:ee:50:2f:d1:fe:65:eb:5d:9d:
97:00:d7:98:66:e9:7c:b6:63:d6:be:af:12:ef:53:1d:9e:a9:
e9:c8:c9:6e:c7:11:bf:39:4e:13:e7:66:bd:c3:e8:2c:f6:18:
5b:b9:c6:46:f2:62:6e:4d:de:54:e2:2b:dd:86:78:b6:ce:44:
dc:04:1b:a0:67:7d:be:2c:92:3c:cb:a7:ea:c3:11:44:e5:df:
9e:fa:56:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:08:32 2025 by rpki-client