Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Mo8sMZlPD67y7LS3AGdWIgMumGg.roa
File: Mo8sMZlPD67y7LS3AGdWIgMumGg.roa (raw, json)
Hash identifier: aVfcMuCGZBDGrgpBarCmiD1lGsBJ4zoWOZnwSfAsCCU=
Subject key identifier: 32:8F:2C:31:99:4F:0F:AE:F2:EC:B4:B7:00:67:56:22:03:2E:98:68
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01843271827F5A527098A941D64E0F0768C5
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Mo8sMZlPD67y7LS3AGdWIgMumGg.roa
Signing time: Tue 01 Nov 2022 09:06:50 +0000
ROA not before: Tue 01 Nov 2022 09:06:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
37.49.144.0/22 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.168.0/23 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:71:82:7f:5a:52:70:98:a9:41:d6:4e:0f:07:68:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 1 09:06:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=328f2c31994f0faef2ecb4b700675622032e9868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:27:c7:ff:9a:fb:76:27:28:af:14:7a:be:
4f:70:b6:9c:28:d0:9e:09:4f:5c:76:8b:e0:58:a2:
b7:d5:49:26:e3:68:25:e2:5c:70:57:64:4e:99:16:
c9:c7:99:ee:53:ae:06:d6:06:14:a0:46:f7:1c:29:
cd:6e:8e:de:25:6a:24:37:26:e4:00:79:b8:6d:d2:
ce:fa:46:62:34:50:c8:1a:62:5a:d6:16:d3:28:74:
fe:b8:9e:88:36:5b:2f:d3:f2:45:18:a0:40:44:a6:
e4:6f:95:e5:c3:d3:6e:d9:36:f4:b7:0c:f7:e8:c4:
85:80:9d:7c:d7:78:ad:88:0f:ce:ad:3c:ad:3b:0b:
fe:85:fd:4d:23:20:aa:c6:23:3c:7d:e6:09:27:12:
2f:d9:26:46:8c:cd:7d:c2:79:87:02:2d:f9:b1:25:
08:60:75:68:34:a3:47:4e:aa:df:70:f6:a3:ab:77:
b3:5b:27:2c:50:81:1a:61:ee:7d:83:ff:98:d5:5c:
7b:23:d0:7f:23:42:e0:22:74:80:22:ca:62:46:80:
3b:b7:e1:a7:4b:e0:00:8b:a3:02:42:22:a4:0e:d1:
56:c4:85:fd:c7:f8:66:1e:c7:37:83:e3:52:0f:c1:
1e:7b:38:9e:6f:7b:d0:f6:f0:b0:04:e2:7d:a9:47:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8F:2C:31:99:4F:0F:AE:F2:EC:B4:B7:00:67:56:22:03:2E:98:68
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Mo8sMZlPD67y7LS3AGdWIgMumGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.144.0/22
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
80:60:cc:0f:a3:4c:be:c3:9c:d2:82:01:2a:8a:58:82:b6:18:
2d:9c:f2:ee:cb:da:11:7a:42:7a:d0:e9:d2:8c:67:1a:42:e1:
52:ad:bd:04:71:62:39:19:b5:93:4c:de:d2:3b:c6:20:95:dd:
32:1d:7e:d4:57:e5:a7:25:ce:89:b4:7b:ee:1d:3c:cd:ae:7d:
27:1d:96:ca:54:27:d5:bf:a1:f5:02:ba:c7:b6:20:8d:d1:7c:
e7:20:ce:ad:da:a6:4f:38:db:fd:b3:54:e4:1d:73:28:04:a5:
f8:07:44:7a:00:38:be:8c:16:8b:8b:67:df:a9:b5:da:42:4a:
84:1c:fa:44:35:b3:da:a9:1e:39:98:58:6a:3e:96:a8:4a:44:
29:51:4b:c6:3a:e1:60:93:72:70:11:d1:fd:6c:11:65:a0:b6:
2d:72:1e:dc:82:a8:79:ee:04:0e:32:98:dc:2d:bc:28:7b:5c:
a9:1b:44:d7:8d:3d:61:03:a4:1b:08:d9:6d:10:85:f3:fc:6d:
76:a0:bc:61:28:ce:2f:36:e6:dd:c4:f3:7e:7b:54:a0:a9:98:
0c:ae:d8:84:ec:1e:71:b2:62:23:a4:b8:5b:78:05:a6:76:a6:
98:dd:b9:af:53:80:a6:8c:a5:ee:26:0c:12:ec:d5:65:54:cc:
9f:a9:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:29 2025 by rpki-client