Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/dz91I1-yBDomZKCgnJMlIXc6mMw.roa
File: dz91I1-yBDomZKCgnJMlIXc6mMw.roa (raw, json)
Hash identifier: h+SuLfN4t/LWieY/Z49TQKPFTs4jfsQZc0478UGGyK4=
Subject key identifier: 77:3F:75:23:5F:B2:04:3A:26:64:A0:A0:9C:93:25:21:77:3A:98:CC
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0195C4886C6340C6B77E01C75D755ACAC4F0
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/dz91I1-yBDomZKCgnJMlIXc6mMw.roa
Signing time: Sun 23 Mar 2025 19:43:49 +0000
ROA not before: Sun 23 Mar 2025 19:43:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49683
IP address blocks: 31.25.234.0/24 maxlen: 24
31.25.235.0/24 maxlen: 24
31.25.236.0/22 maxlen: 24
31.25.237.0/24 maxlen: 24
171.22.172.0/24 maxlen: 24
171.22.173.0/24 maxlen: 24
171.22.174.0/24 maxlen: 24
171.22.175.0/24 maxlen: 24
185.44.64.0/24 maxlen: 24
185.44.65.0/24 maxlen: 24
185.44.66.0/24 maxlen: 24
185.44.67.0/24 maxlen: 24
185.85.240.0/24 maxlen: 24
185.85.241.0/24 maxlen: 24
185.85.242.0/24 maxlen: 24
185.85.243.0/24 maxlen: 24
185.116.236.0/24 maxlen: 24
185.116.237.0/24 maxlen: 24
185.116.239.0/24 maxlen: 24
185.122.164.0/24 maxlen: 24
185.122.165.0/24 maxlen: 24
185.122.166.0/24 maxlen: 24
185.122.167.0/24 maxlen: 24
185.168.192.0/24 maxlen: 24
185.168.193.0/24 maxlen: 24
185.168.194.0/24 maxlen: 24
185.168.195.0/24 maxlen: 24
185.184.68.0/24 maxlen: 24
185.184.69.0/24 maxlen: 24
185.184.70.0/24 maxlen: 24
185.184.71.0/24 maxlen: 24
185.189.56.0/24 maxlen: 24
185.189.57.0/24 maxlen: 24
185.189.58.0/24 maxlen: 24
185.189.59.0/24 maxlen: 24
2a0a:2f00:1::/48 maxlen: 48
2a0a:2f00:2::/48 maxlen: 48
2a0a:2f00:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c4:88:6c:63:40:c6:b7:7e:01:c7:5d:75:5a:ca:c4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Mar 23 19:43:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=773f75235fb2043a2664a0a09c932521773a98cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:9e:ae:90:e4:31:c5:b6:02:8c:fe:34:38:
b0:89:71:b5:b9:3c:8a:a1:d7:ab:df:68:cc:23:f8:
8c:5e:97:fd:55:c2:f9:3b:95:7f:aa:e0:8f:d0:63:
63:d9:35:18:2a:0d:c4:65:ce:6b:0d:88:85:c5:6d:
01:31:78:26:ac:b8:ad:e2:c0:99:67:0d:99:37:39:
b7:7d:d7:d3:a8:29:15:05:dd:e6:ea:00:a2:fa:71:
ac:de:a8:9d:3e:af:ff:d7:27:cb:8f:2f:ab:74:0f:
af:49:d5:1f:6b:56:ef:76:41:12:db:a9:d5:54:7a:
10:0a:4d:20:40:69:fd:51:b7:7f:1c:11:a9:71:a7:
29:4e:31:d3:8c:8f:8e:a6:2c:15:00:da:64:e5:39:
ee:13:f2:3a:fd:51:f3:17:fb:07:14:ba:f6:6e:0e:
39:96:d8:c0:7a:99:bb:d3:4f:e5:1f:d3:0e:fa:11:
70:88:bf:c1:78:d4:76:55:41:46:07:21:b6:42:31:
9b:02:ea:41:e6:14:e2:d2:d5:ec:c9:48:f3:62:4c:
40:b1:d2:73:e9:ae:e5:4e:53:f5:9f:b4:a5:55:1f:
b1:d3:11:9a:48:c7:d3:19:82:ce:d2:fa:6b:42:28:
89:9a:3a:01:16:cd:4f:90:79:7b:db:69:08:d1:e2:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:75:23:5F:B2:04:3A:26:64:A0:A0:9C:93:25:21:77:3A:98:CC
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/dz91I1-yBDomZKCgnJMlIXc6mMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.234.0-31.25.239.255
171.22.172.0/22
185.44.64.0/22
185.85.240.0/22
185.116.236.0/23
185.116.239.0/24
185.122.164.0/22
185.168.192.0/22
185.184.68.0/22
185.189.56.0/22
IPv6:
2a0a:2f00:1::-2a0a:2f00:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:78:89:4a:87:60:78:ad:5e:38:f3:51:76:65:78:bb:17:29:
10:91:ff:dd:a2:cf:e3:05:9f:6c:47:a5:37:8b:bf:0e:cf:f6:
75:57:57:e7:93:56:2d:f1:87:ba:0d:4e:ba:8c:75:af:23:10:
b7:63:d7:73:cd:52:a4:2e:b3:a5:df:98:12:dc:d5:4b:fa:d3:
5e:08:45:01:07:0e:4a:c3:8e:88:eb:1a:cc:57:48:cd:f6:c6:
74:2a:c5:6b:85:5f:36:da:2f:d9:36:4d:fe:df:fe:a9:aa:a0:
0b:1a:ff:8f:10:c0:45:46:f0:bf:25:7b:6a:1c:3e:90:a9:30:
4c:9e:4d:36:d0:17:72:a1:21:78:41:c9:17:01:a5:5f:40:39:
8a:e0:92:bc:df:49:87:4c:f3:03:c9:f2:72:62:2a:56:c4:58:
e6:0c:07:ed:01:9d:d5:12:9f:9d:b0:f8:93:e4:3d:c5:10:15:
32:92:22:e7:86:61:37:a2:ad:54:e5:07:f2:1f:aa:f5:b6:c3:
7f:a2:9c:91:65:2a:96:cf:79:1f:cd:55:89:55:72:09:a5:5b:
24:a8:91:38:d0:98:a6:68:a9:11:82:40:0d:ba:a7:f0:18:ff:
7d:b1:09:d5:e1:b6:a5:07:4b:8f:9f:af:e2:a0:8b:ae:17:a0:
08:0d:7b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:11 2025 by rpki-client on console.sobornost.net