Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/oGoznhGGULvRC91CBqbKxYX7z3o.roa
File: oGoznhGGULvRC91CBqbKxYX7z3o.roa (raw, json)
Hash identifier: kQR/VpKelt6fyi6QWfougAVb/d+DQsZD2bRLom49HoU=
Subject key identifier: A0:6A:33:9E:11:86:50:BB:D1:0B:DD:42:06:A6:CA:C5:85:FB:CF:7A
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018BA6392BBD38CD03449A27CA339181820A
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/oGoznhGGULvRC91CBqbKxYX7z3o.roa
Signing time: Mon 06 Nov 2023 20:00:46 +0000
ROA not before: Mon 06 Nov 2023 20:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
91.217.7.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
109.104.135.0/24 maxlen: 24
109.104.134.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.136.0/24 maxlen: 24
109.104.137.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.142.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0f:a880::/29 maxlen: 48
2a0e:3f00::/29 maxlen: 48
2a09:6ec0::/29 maxlen: 48
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 48
2a0e:4f00::/29 maxlen: 48
2a0f:42c0::/29 maxlen: 48
2a0d:4a40::/29 maxlen: 48
2a0e:d4c0::/29 maxlen: 48
2a0d:27c0::/29 maxlen: 48
2a0e:3f01::/48 maxlen: 48
2a0d:42c0::/29 maxlen: 48
2a09:6e40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:39:2b:bd:38:cd:03:44:9a:27:ca:33:91:81:82:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 6 20:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06a339e118650bbd10bdd4206a6cac585fbcf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:43:e6:03:b3:7d:08:4d:c8:82:c9:63:d6:
5b:f5:88:e9:67:8b:80:f9:a1:1b:a4:6d:85:58:93:
64:04:0a:b0:98:6c:e2:03:03:ab:76:81:7e:8f:ad:
c8:fb:67:02:0a:98:ae:f2:d3:9f:5d:d6:9e:79:85:
a2:7f:6c:e4:35:10:03:eb:39:76:fc:ac:c3:38:6b:
51:3f:d8:21:1a:b9:16:7a:a3:6a:4d:14:78:fe:4d:
79:cf:26:b3:cc:63:50:92:58:57:cb:93:64:25:16:
ef:78:95:58:fd:c4:27:70:bc:1c:36:0d:7b:53:7b:
88:4e:a8:06:20:ab:8d:f7:86:be:b6:4a:98:b8:f7:
10:df:77:c3:a9:1f:d9:7b:1c:dc:e0:24:0a:b4:18:
b0:89:ea:40:d4:11:10:79:a8:81:cb:33:7c:5a:6e:
35:51:59:34:03:aa:ce:d6:26:ab:be:dd:6e:8a:9e:
7d:cc:7c:b2:25:38:9d:01:5c:78:3e:0f:e8:e0:2f:
2d:ff:a1:74:6f:9b:b8:03:d9:54:4d:31:d1:53:88:
02:a6:b8:a2:0f:8a:31:00:71:34:61:ee:7b:67:b0:
5f:ba:0b:76:8f:d2:91:9e:3f:b3:2a:d3:86:1e:b1:
84:c6:2f:64:72:2e:71:d2:00:db:b5:ea:4c:9c:09:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:33:9E:11:86:50:BB:D1:0B:DD:42:06:A6:CA:C5:85:FB:CF:7A
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/oGoznhGGULvRC91CBqbKxYX7z3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0/22
91.217.6.0/23
109.74.28.0/22
109.104.134.0-109.104.143.255
109.104.156.0/24
109.104.159.0/24
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a09:6ec0::/29
2a0d:27c0::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:3f00::/29
2a0e:4f00::/29
2a0e:d4c0::/29
2a0f:42c0::/29
2a0f:a880::/29
Signature Algorithm: sha256WithRSAEncryption
87:83:be:1c:5c:fb:09:70:41:22:85:50:6c:4e:31:31:6f:bd:
97:4a:40:a7:98:0f:0e:d2:1d:50:2c:04:6d:ce:ce:90:60:b8:
57:40:23:5e:43:02:19:de:f9:11:65:7e:1f:56:d3:7d:c2:8f:
fa:e6:b7:74:29:fd:ff:0c:db:9e:cd:7c:ee:24:8e:3e:fb:3f:
84:1d:a8:8f:29:f7:58:5c:b0:39:26:10:07:f8:df:e5:67:a8:
7b:7c:8c:ce:7f:d4:97:d9:72:a3:4e:79:24:5d:42:d3:41:3c:
6f:76:a2:13:07:4a:89:f8:b8:ed:ff:ad:1e:84:b8:d7:63:4f:
ea:e3:fa:39:7b:db:07:db:3e:a0:58:ae:17:cc:5d:03:d8:c8:
c9:0f:04:42:24:ee:15:bc:3d:1a:b5:71:94:72:ec:ff:db:89:
b7:8b:e6:11:21:e6:a2:ec:b9:9b:81:48:84:6f:ab:51:12:e2:
fa:07:ee:8b:51:80:d0:fc:48:ef:a8:8a:6d:34:e2:11:aa:44:
b6:a8:24:83:b3:6d:75:e9:a3:05:4d:4d:58:88:12:8b:2c:67:
a3:7a:67:f9:16:f7:28:33:9a:37:81:c7:5f:0f:d2:4e:a1:e0:
c6:71:26:96:37:22:4e:23:fe:0e:14:81:d1:a9:22:26:c3:79:
51:3d:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:32 2025 by rpki-client