Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6M4ijr8p7CDgciHS_dTe5kE8jx8.roa
File: 6M4ijr8p7CDgciHS_dTe5kE8jx8.roa (raw, json)
Hash identifier: m5Vb6j70v8d89eX1OOpxER/oGsGmEd+kVXLlZk+ODx8=
Subject key identifier: E8:CE:22:8E:BF:29:EC:20:E0:72:21:D2:FD:D4:DE:E6:41:3C:8F:1F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0184C2A1979E9FD8D76C114C3C397DD64D79
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6M4ijr8p7CDgciHS_dTe5kE8jx8.roa
Signing time: Tue 29 Nov 2022 09:04:40 +0000
ROA not before: Tue 29 Nov 2022 09:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:a1:97:9e:9f:d8:d7:6c:11:4c:3c:39:7d:d6:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 29 09:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8ce228ebf29ec20e07221d2fdd4dee6413c8f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:0e:bf:d3:db:ae:d8:1e:54:a1:64:c0:70:
eb:0d:63:ff:65:bb:32:57:66:88:1a:98:66:b9:c9:
53:ce:05:c7:7b:1b:9a:3f:63:d5:a0:ff:1d:4a:55:
fe:70:ea:5d:d9:97:9f:48:e3:5b:18:dd:43:e1:83:
af:73:70:3c:f5:48:6e:f3:f5:1c:85:94:85:a7:4d:
9f:20:b6:79:ab:c8:f3:8d:7e:b9:da:62:d4:e9:81:
94:85:bd:1e:7e:7d:b9:0a:a7:35:d4:56:d2:2c:1b:
12:21:3f:eb:3b:b7:83:8d:f4:93:fe:67:f7:3a:ef:
ee:38:06:3c:c9:bb:d6:f9:16:3e:82:54:d3:c3:a7:
25:69:82:4e:bd:55:d8:58:b2:ce:14:d0:5d:03:6e:
4f:df:4d:28:76:1d:e7:58:86:1c:23:ae:ed:b7:d4:
7d:1e:b8:c7:49:bb:ba:46:7f:39:81:67:7c:f7:5f:
76:98:f3:23:28:af:e3:0c:3f:1f:32:9c:8a:f6:f1:
f1:fd:59:13:b6:6d:46:51:05:7f:19:f1:9f:63:5b:
2d:31:6e:5e:e7:47:6c:3b:82:1e:99:bd:2c:88:04:
45:0c:e2:8c:5b:35:9a:40:00:a9:6c:ad:68:09:80:
8a:c2:b4:b0:29:eb:8f:96:62:15:77:04:e5:dd:df:
ea:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:22:8E:BF:29:EC:20:E0:72:21:D2:FD:D4:DE:E6:41:3C:8F:1F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6M4ijr8p7CDgciHS_dTe5kE8jx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
69:25:a2:82:97:e1:b2:cc:f2:b9:98:30:f5:25:aa:f3:4f:f6:
fc:dd:58:bc:9d:14:ec:32:67:e1:30:92:43:ae:08:da:51:1c:
06:ac:c5:6a:b9:da:69:39:6b:32:73:59:c5:5f:c4:29:f3:3f:
bb:bf:29:2b:d7:86:61:15:6c:c8:ad:23:21:87:a0:f8:46:1a:
75:51:2a:8c:23:36:7d:56:04:49:57:18:b1:03:ad:97:ee:81:
62:90:52:bc:fc:55:19:ab:ee:46:b6:3f:5d:ef:fa:b6:d6:b6:
13:b8:e8:9d:58:88:1b:53:5b:00:2b:47:b2:9e:e7:ea:25:eb:
c2:dc:0c:db:ca:36:01:5e:07:cc:48:ba:4a:8c:51:b3:df:f3:
8d:2e:08:dd:14:8a:ce:0a:c9:63:d2:f5:d5:9d:f6:d0:d1:6f:
91:ab:fd:c0:72:8a:d6:b5:92:0a:0c:5a:70:8e:ee:b2:65:48:
3b:41:74:e5:47:83:e8:1e:25:18:c7:ae:f1:d3:0d:cb:1e:4a:
e2:68:c1:23:78:74:12:62:ca:03:52:2d:e6:10:fd:a2:f0:69:
40:d5:1e:92:b3:56:e8:95:19:c5:50:98:d2:66:34:66:ce:33:
90:36:59:ff:9a:18:6c:a2:8a:eb:98:67:04:82:05:71:29:f5:
f0:13:94:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:09 2025 by rpki-client