Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zLAA5CUhIEdukEthrOgBOAwbyZM.roa
File: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (raw, json)
Hash identifier: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=
Subject key identifier: CC:B0:00:E4:25:21:20:47:6E:90:4B:61:AC:E8:01:38:0C:1B:C9:93
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F6779D92083C62C3BFFDC84BBE810
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zLAA5CUhIEdukEthrOgBOAwbyZM.roa
Signing time: Thu 02 Jan 2025 05:49:02 +0000
ROA not before: Thu 02 Jan 2025 05:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14178
IP address blocks: 31.210.20.0/24 maxlen: 24
162.12.206.0/23 maxlen: 24
194.31.97.0/24 maxlen: 24
194.31.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:67:79:d9:20:83:c6:2c:3b:ff:dc:84:bb:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb000e4252120476e904b61ace801380c1bc993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d6:0c:4c:de:18:94:8b:e2:44:d5:e4:b3:e5:
0f:b9:98:f0:a5:75:aa:9d:2c:af:0b:76:e7:51:0f:
be:10:31:64:f7:7e:f9:9f:cc:a7:73:08:d5:cc:d3:
2b:07:5f:ce:7a:7a:60:a3:0e:1a:ee:62:7e:ec:67:
48:62:a8:34:35:cb:b9:ff:ea:f3:eb:cd:ef:51:d3:
2b:aa:c2:66:f0:e2:0c:82:65:f7:a5:8e:30:22:0c:
31:18:e2:79:e4:f0:82:ac:c9:00:0b:30:02:b3:c9:
cf:26:53:d0:e7:da:99:11:fa:22:d0:01:33:a6:44:
ea:c3:02:05:a6:a4:c0:3e:30:ee:f6:09:0f:fa:40:
60:8b:05:20:9b:b5:48:4c:c2:3b:eb:02:7a:c1:e5:
eb:93:2b:8e:1b:8e:c3:03:48:65:16:fd:dd:94:92:
6d:ac:9b:e6:07:31:ce:ea:f9:d0:51:60:20:81:ec:
96:bf:11:ea:68:f5:0b:f5:9e:a3:5e:7c:52:6c:25:
51:f9:a1:df:b0:1b:be:99:0b:60:05:b6:e9:6c:c7:
65:67:46:ab:61:e0:46:a8:e0:7c:e3:92:cd:f2:f7:
47:79:1d:13:15:0e:82:36:db:f8:b5:40:fa:6a:4b:
8d:05:06:96:22:71:4f:df:57:0e:b8:8a:82:9f:aa:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B0:00:E4:25:21:20:47:6E:90:4B:61:AC:E8:01:38:0C:1B:C9:93
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/zLAA5CUhIEdukEthrOgBOAwbyZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.20.0/24
162.12.206.0/23
194.31.97.0-194.31.98.255
Signature Algorithm: sha256WithRSAEncryption
59:69:ea:d6:11:bb:20:20:e9:1b:f8:3c:6e:fb:a7:8e:c6:a5:
c2:cf:18:bd:f6:bb:84:75:6d:73:c1:8b:2d:3f:20:cc:e2:25:
5c:3b:56:c5:6f:ba:0b:bc:01:16:53:53:f8:5d:c3:d4:b0:c9:
f7:29:b5:6d:69:3f:39:d6:5b:4b:b2:43:14:9d:28:83:f2:16:
d8:43:1b:dd:79:8e:ff:ce:48:03:46:cc:e0:f0:d9:44:0a:e7:
66:04:32:da:8f:46:a6:ed:41:d3:1f:4f:a2:26:99:cf:6d:74:
46:94:b0:2d:7f:3d:de:93:db:c3:3a:d0:9b:60:0a:58:04:ff:
d9:9d:93:1e:b5:e4:7a:4f:66:36:6d:c7:74:a9:49:47:a9:1a:
3d:b7:48:87:7a:56:bb:01:63:7e:9d:32:8f:69:b4:a6:87:cb:
fe:b4:8d:fd:5c:71:97:39:a9:22:77:b6:8b:fd:46:ef:3b:f7:
32:47:7d:95:a8:25:8b:b7:cd:49:ed:09:11:9c:aa:90:a7:de:
da:42:3d:46:cd:e8:3f:df:b3:45:1e:ff:78:4a:5f:37:7f:a2:
ac:01:c8:6f:f0:8d:aa:d2:b1:58:f1:e4:42:5c:b5:ee:c0:c7:
af:c3:b1:06:92:5f:31:3b:ce:a6:87:42:ac:7d:96:ed:11:df:
82:6a:ea:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:15 2025 by rpki-client