Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/cz9-HncMNG5Us7tqnQs7grVi9m0.roa
File: cz9-HncMNG5Us7tqnQs7grVi9m0.roa (raw, json)
Hash identifier: /0F1eoiKglBJFMkDosk0XIlyHobSxA2oT+umW3DxJb8=
Subject key identifier: 73:3F:7E:1E:77:0C:34:6E:54:B3:BB:6A:9D:0B:3B:82:B5:62:F6:6D
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0193D95B5DDC120A530FF032648CF66BDB07
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/cz9-HncMNG5Us7tqnQs7grVi9m0.roa
Signing time: Wed 18 Dec 2024 10:41:03 +0000
ROA not before: Wed 18 Dec 2024 10:41:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25144
IP address blocks: 31.223.128.0/19 maxlen: 19
31.223.128.0/21 maxlen: 21
31.223.136.0/21 maxlen: 21
31.223.144.0/21 maxlen: 21
31.223.152.0/21 maxlen: 21
45.131.116.0/22 maxlen: 22
45.131.118.0/23 maxlen: 23
46.239.0.0/18 maxlen: 18
62.101.144.0/20 maxlen: 20
81.93.64.0/19 maxlen: 19
81.93.66.0/24 maxlen: 24
81.93.67.0/24 maxlen: 24
81.93.69.0/24 maxlen: 24
81.93.73.0/24 maxlen: 24
81.93.84.0/24 maxlen: 24
81.93.86.0/24 maxlen: 24
81.93.91.0/24 maxlen: 24
81.93.92.0/24 maxlen: 24
89.111.192.0/18 maxlen: 18
89.111.192.0/19 maxlen: 19
89.111.192.0/24 maxlen: 24
89.111.200.0/24 maxlen: 24
89.111.224.0/19 maxlen: 19
89.111.225.0/24 maxlen: 24
89.111.226.0/24 maxlen: 24
89.111.227.0/24 maxlen: 24
89.111.231.0/24 maxlen: 24
89.111.235.0/24 maxlen: 24
89.111.236.0/24 maxlen: 24
89.111.240.0/24 maxlen: 24
89.111.244.0/22 maxlen: 22
89.111.246.0/24 maxlen: 24
89.111.248.0/22 maxlen: 22
94.250.0.0/18 maxlen: 18
94.250.18.0/24 maxlen: 24
94.250.64.0/18 maxlen: 18
109.165.128.0/17 maxlen: 17
185.35.156.0/22 maxlen: 22
185.125.120.0/22 maxlen: 22
217.24.128.0/20 maxlen: 20
2a00:cb00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d9:5b:5d:dc:12:0a:53:0f:f0:32:64:8c:f6:6b:db:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Dec 18 10:41:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733f7e1e770c346e54b3bb6a9d0b3b82b562f66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:1a:62:ad:30:e0:5a:2b:a4:66:c6:a3:7c:
75:a0:8a:2d:4f:24:f1:f3:a1:8f:b8:f8:6c:91:67:
10:94:19:02:ed:c3:d7:44:54:4f:9a:b1:d8:0f:4f:
dc:86:0f:e7:1a:e8:52:bd:79:bd:0d:2f:8a:50:67:
80:bd:e6:ee:de:1b:a1:5b:a9:6a:e3:e2:7b:7d:87:
a9:b3:6c:11:b1:86:f1:fe:df:5d:31:5d:b4:32:3b:
d6:7a:46:a5:c2:fb:ff:a6:9d:89:9c:49:5d:81:dc:
df:42:a5:94:4d:a3:ec:95:8a:55:44:dd:29:b3:b8:
5d:8e:8c:5e:59:99:47:46:9e:e9:0a:e6:f0:16:83:
6f:1c:f2:11:83:f0:ff:3f:fa:17:49:5d:db:2c:36:
1a:83:e3:bc:4e:d3:34:f0:20:52:0d:66:6c:e3:47:
60:a8:e6:d9:06:80:8b:08:12:e0:16:9e:15:2f:88:
ef:04:dc:b6:f0:d2:b0:2b:12:58:3d:c8:a8:f3:f2:
5e:2d:7c:c1:75:bd:d2:9f:a4:22:b4:98:a0:99:17:
d6:31:d3:4c:f4:74:d2:11:2b:84:9b:71:2e:03:29:
9d:3f:1a:29:b7:dd:be:59:ee:08:91:4e:2e:2e:15:
25:e8:8c:7b:33:aa:98:10:9f:a2:e7:65:40:7f:e3:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:7E:1E:77:0C:34:6E:54:B3:BB:6A:9D:0B:3B:82:B5:62:F6:6D
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/cz9-HncMNG5Us7tqnQs7grVi9m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.128.0/19
45.131.116.0/22
46.239.0.0/18
62.101.144.0/20
81.93.64.0/19
89.111.192.0/18
94.250.0.0/17
109.165.128.0/17
185.35.156.0/22
185.125.120.0/22
217.24.128.0/20
IPv6:
2a00:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
b0:3f:2d:ce:43:b1:ab:5b:e6:5b:5d:66:15:d7:bf:57:f5:af:
e2:a8:75:35:52:77:92:75:55:e4:c2:c6:24:d1:33:c0:72:3c:
dd:db:e0:22:7f:f4:4b:d9:2f:3b:50:1d:bf:d5:a5:b1:b8:4c:
4d:9f:0e:95:47:a1:1c:ea:91:43:b1:59:a6:6d:63:ff:ef:c9:
d6:bd:cf:fd:36:2c:29:96:ea:0f:7c:df:43:5d:2d:27:35:92:
00:56:c5:b4:f5:7f:9e:77:fc:81:ad:39:2b:80:fd:d0:0d:71:
e6:be:08:64:5a:99:9a:40:58:a3:a0:83:52:4c:b9:10:67:31:
b5:1f:45:fa:a7:0b:d1:b1:6f:b7:ec:d4:89:c0:af:46:67:56:
fe:6e:cb:9c:2a:16:f3:f9:8f:37:9a:cc:d4:1a:c7:2b:23:a4:
92:45:00:ff:3d:52:06:7f:6e:17:fc:f0:98:a0:ee:cb:7c:bf:
2d:f6:5c:2c:10:13:4e:a7:9e:9a:46:90:38:68:0a:c1:0e:cc:
a7:c2:cc:10:d9:6d:88:aa:17:98:1b:91:9c:9f:a5:89:26:74:
24:f0:cd:a8:19:dc:4b:25:67:79:2c:60:74:d5:b3:e5:85:85:
5c:b3:70:29:42:a1:92:05:51:18:a3:2e:86:b8:df:75:f2:2e:
a2:5d:62:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net