Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JTHMlPj1H45Cvk17QzQeRmfqoS8.roa
File: JTHMlPj1H45Cvk17QzQeRmfqoS8.roa (raw, json)
Hash identifier: KFJgu5AMjwLzZXffJt/QO4W9lsrb2q19Sh1+psWxVEg=
Subject key identifier: 25:31:CC:94:F8:F5:1F:8E:42:BE:4D:7B:43:34:1E:46:67:EA:A1:2F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01868819269BA8D1F53A62D35B4D84728863
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JTHMlPj1H45Cvk17QzQeRmfqoS8.roa
Signing time: Sat 25 Feb 2023 10:23:15 +0000
ROA not before: Sat 25 Feb 2023 10:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
94.74.128.0/18 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.190.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:88:19:26:9b:a8:d1:f5:3a:62:d3:5b:4d:84:72:88:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 25 10:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2531cc94f8f51f8e42be4d7b43341e4667eaa12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:af:1e:d5:73:51:4a:b6:b8:db:05:fb:f7:
24:99:cf:55:36:73:71:bf:a8:9d:43:85:7a:ff:34:
fd:c0:eb:76:2b:9a:32:7e:b1:b2:ae:c4:52:c3:a1:
c3:86:4e:9e:46:2a:f5:6f:10:9b:f8:e8:90:1a:42:
3b:83:cb:3d:c6:98:c9:21:0f:9c:3f:81:be:cf:55:
03:7a:f9:2e:aa:ec:36:fe:1a:98:d2:8a:3e:16:29:
be:11:1d:9c:bc:d6:59:f0:5a:8e:c3:c2:72:a3:c3:
c5:4a:b8:35:f0:f8:13:6e:a9:f5:11:90:31:3a:3f:
77:b0:f9:d7:05:21:5f:08:0e:c1:11:ab:65:af:25:
bc:8e:e7:8b:85:7f:68:db:2b:51:78:67:b5:86:d0:
5d:41:81:9b:88:dc:f0:b6:d3:94:94:5e:36:e7:80:
ab:88:b0:b3:0d:d5:f8:5e:dd:f9:bc:64:ab:6c:42:
2b:85:32:9b:76:df:3b:f2:db:3f:ad:cc:e9:12:fd:
4c:65:06:c3:01:61:e2:85:18:3e:a4:d7:1b:70:b8:
31:d6:50:f8:2e:a6:bd:5f:fc:60:d3:05:0c:33:69:
7b:ac:3f:6c:3c:86:9f:3d:63:17:1d:73:48:f4:38:
1b:7c:aa:1b:96:24:a0:0c:5b:a0:c6:d1:c0:e3:f8:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:CC:94:F8:F5:1F:8E:42:BE:4D:7B:43:34:1E:46:67:EA:A1:2F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JTHMlPj1H45Cvk17QzQeRmfqoS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.146.0/24
37.49.148.0/24
37.49.151.0/24
94.74.128.0/18
109.203.160.0/19
176.46.133.0-176.46.135.255
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:e9:18:62:4c:1f:52:88:0f:26:e5:99:bb:f8:76:71:c6:ad:
69:f8:a0:5b:72:9c:f5:bd:d2:28:bc:27:bc:81:64:36:4d:63:
6a:76:51:00:e3:5f:2c:d8:00:20:d4:32:e8:4f:9f:e2:01:92:
42:df:c6:46:57:30:b8:25:df:45:df:1a:36:e3:fb:ca:02:40:
d9:52:86:1e:85:ca:ff:61:69:c8:d0:f2:16:fe:c2:44:26:63:
6a:e4:95:4b:8f:e4:d4:b5:74:4e:37:5e:cf:d5:cb:6d:c0:09:
6f:18:5f:ab:05:32:79:70:0a:38:0c:15:ca:57:e4:58:63:1b:
ec:00:59:76:d1:49:10:38:48:3f:10:d0:8b:aa:4d:29:07:1f:
a4:ca:5e:cb:bb:a0:21:20:0f:0e:da:5b:40:12:39:22:53:c8:
80:bb:bc:b9:9e:53:1c:4c:5f:b5:80:f4:ea:4f:b4:41:c2:d1:
80:94:e9:42:c0:8e:1d:48:22:50:59:b6:26:5b:ae:0a:1d:90:
ae:c8:a3:43:a0:f9:86:59:dd:1b:6a:61:98:bd:33:e3:b1:43:
1f:3d:96:a9:f0:c6:b2:05:30:8d:ae:de:be:87:f7:c5:ab:60:
59:7a:48:d5:c0:ba:04:2a:a8:d5:2f:ae:da:f5:f6:a2:16:33:
8a:85:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:49 2025 by rpki-client