Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BtJDhTqx1wIpqrGlkceeT1nWnJY.roa
File: BtJDhTqx1wIpqrGlkceeT1nWnJY.roa (raw, json)
Hash identifier: koSOMQ1Fq2X823HTfr8SAns7h6fl5NFviTu0NBoBdoI=
Subject key identifier: 06:D2:43:85:3A:B1:D7:02:29:AA:B1:A5:91:C7:9E:4F:59:D6:9C:96
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018B80BFCF8F074C304F6AB933B00F0231A9
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BtJDhTqx1wIpqrGlkceeT1nWnJY.roa
Signing time: Mon 30 Oct 2023 13:22:16 +0000
ROA not before: Mon 30 Oct 2023 13:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.142.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
2a09:6e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:bf:cf:8f:07:4c:30:4f:6a:b9:33:b0:0f:02:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Oct 30 13:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d243853ab1d70229aab1a591c79e4f59d69c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:2d:ea:20:f2:e2:48:99:6e:4e:10:d8:c3:
67:54:42:12:80:96:3b:59:da:71:88:54:30:25:5b:
52:64:7f:68:29:7a:90:7a:cb:2f:f2:b2:54:f5:b6:
d8:06:4f:62:a6:10:11:cc:74:4a:b9:66:e5:c4:77:
a1:07:87:a7:0c:18:9a:e5:21:7e:58:87:d3:7d:0a:
4f:25:54:af:55:d5:9b:a1:05:89:36:f8:27:b1:68:
d9:9c:cc:9b:48:ae:47:b4:da:03:e0:07:69:0e:dd:
e5:36:dc:3b:97:9a:d1:66:f1:f7:c9:d1:c0:30:bb:
37:59:4d:79:7a:38:c7:c2:70:bc:e6:78:7d:02:82:
e8:28:98:41:6b:ed:57:ce:62:37:d7:56:30:ec:67:
f5:75:1e:2e:ec:4e:d5:30:4c:06:d0:14:0a:fb:e8:
22:f8:c5:d1:cb:83:97:75:a7:44:62:a0:39:4c:39:
e6:6e:3c:e3:e8:05:c8:5c:bb:2e:5d:2d:04:cc:32:
4f:5c:71:90:a2:e7:eb:a2:2a:43:95:82:4f:b7:aa:
ae:34:a2:59:bf:eb:9f:3c:c3:c1:32:0d:3f:95:af:
ba:9b:39:9a:d9:ad:48:94:4c:20:ff:49:8c:8b:eb:
c9:98:b5:c7:42:d6:64:82:68:99:e7:c7:02:6e:53:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:43:85:3A:B1:D7:02:29:AA:B1:A5:91:C7:9E:4F:59:D6:9C:96
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/BtJDhTqx1wIpqrGlkceeT1nWnJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0/22
109.74.28.0/22
109.104.134.0-109.104.143.255
109.104.156.0/24
109.104.159.0/24
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:30:42:b9:4f:3f:07:cf:50:cb:35:88:d0:f8:1a:d5:11:12:
30:8a:48:ea:b6:30:84:fa:85:3e:00:13:1b:45:bd:26:5f:05:
4a:18:4c:52:75:36:69:15:04:60:48:31:5f:6c:25:b7:7a:14:
59:47:29:a7:72:e4:f8:26:03:ba:a5:6d:07:ca:7a:e5:ea:e6:
01:f8:bd:1a:0b:6f:ee:3a:83:49:4d:17:db:aa:8d:75:73:ed:
60:4b:08:19:58:66:1a:83:32:60:7f:f7:a8:18:75:19:95:fe:
6f:49:76:ad:09:4c:71:65:6d:c4:6f:9c:c7:6f:f7:86:db:fd:
50:64:fb:c3:f0:00:6f:c7:17:9c:d8:34:d4:67:d5:4a:a4:19:
82:b6:8a:e1:9c:71:df:08:90:fd:be:35:7f:23:75:36:c4:37:
cd:19:e4:ec:68:93:83:95:51:9d:23:3d:14:69:5b:db:f1:45:
e0:83:95:56:85:8c:fc:9a:e5:4f:1e:15:ba:3e:2a:0d:e9:ec:
56:29:a8:6e:32:45:96:07:52:f0:48:9a:0a:ac:65:7f:92:a4:
17:ab:b8:53:98:9d:29:0a:0d:62:ee:32:83:cb:0c:53:96:bc:
f1:9d:92:44:91:c6:e8:17:d1:38:97:24:90:08:d2:f7:84:34:
8f:23:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:53 2025 by rpki-client