Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NXk6sdjCsb8OHSUzguznqgY3UdM.roa
File: NXk6sdjCsb8OHSUzguznqgY3UdM.roa (raw, json)
Hash identifier: ec9QGna09NUTOL/1DLey0hA1YF+eLP4Wj5O5EFHlk98=
Subject key identifier: 35:79:3A:B1:D8:C2:B1:BF:0E:1D:25:33:82:EC:E7:AA:06:37:51:D3
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 07D54574
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NXk6sdjCsb8OHSUzguznqgY3UdM.roa
Signing time: Wed 04 May 2022 16:50:50 +0000
ROA not before: Wed 04 May 2022 16:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 94.74.137.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131417460 (0x7d54574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 4 16:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35793ab1d8c2b1bf0e1d253382ece7aa063751d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:9d:bf:93:fb:db:73:c3:3d:92:4a:27:87:
cf:05:fa:a0:b7:c2:64:74:60:e4:b9:54:c2:c1:6d:
7c:15:03:20:3e:f5:af:1b:60:2f:cc:de:3e:0a:b9:
d1:47:28:92:39:e9:6c:c6:7d:43:f4:ae:04:2b:f6:
44:3d:82:32:f5:2d:2b:de:2e:78:69:7d:ba:a3:23:
6c:b0:7c:38:2c:03:51:0f:25:5b:7b:52:3d:c1:12:
b4:7f:a1:b6:e1:03:fe:3f:59:5e:50:89:e2:98:28:
7c:17:13:3f:55:39:bd:e9:70:35:a6:cc:2e:80:ec:
6b:d8:1e:0a:32:85:f0:99:84:0c:e3:22:60:b1:ac:
f9:02:5b:c8:91:37:43:e1:19:8e:f7:87:44:db:92:
78:bc:60:b0:e8:26:26:93:d8:3a:08:a3:9d:b6:b2:
93:12:aa:eb:1f:4e:f4:2e:e7:e4:63:e8:3a:e4:d3:
ca:e5:cd:e1:94:f2:89:c7:f9:39:32:31:e3:81:c5:
80:22:c9:7e:cd:80:50:79:50:5f:58:0f:5f:cb:c3:
ad:df:61:ad:ea:20:96:21:b4:bd:a1:9f:e4:eb:39:
56:b2:70:ab:27:c4:81:a3:3a:27:37:0e:cf:2b:00:
83:89:e7:d0:3e:5c:bf:cb:50:52:1a:72:b4:e7:11:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:3A:B1:D8:C2:B1:BF:0E:1D:25:33:82:EC:E7:AA:06:37:51:D3
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NXk6sdjCsb8OHSUzguznqgY3UdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.137.0/24
94.74.169.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e3:68:0a:f8:99:9d:ba:ba:e8:19:fe:a4:58:8d:f3:e2:cd:
c9:52:e1:1c:6b:ae:4c:b0:cf:8d:32:c1:ee:8e:39:44:2b:e7:
bb:cf:04:46:af:9c:67:88:2d:06:b0:5d:a8:ff:96:95:37:07:
b8:c0:a8:15:63:79:36:f0:b5:52:1c:74:1c:40:19:90:14:7a:
76:6b:c6:6a:01:30:73:48:b5:3a:c9:4b:9f:1c:5c:f4:f8:25:
83:68:33:7e:12:e6:08:1f:d9:3b:3f:02:76:46:7e:be:0a:38:
8e:98:c7:b0:be:d4:5f:71:b8:e7:25:de:e2:72:15:00:6e:8f:
91:0b:82:e8:d2:32:5e:63:17:5b:9e:7d:f5:0f:7f:d1:b8:d7:
b6:28:13:50:07:08:80:3a:ae:09:b0:77:fe:c3:f8:80:79:45:
fe:fe:32:38:82:67:9d:48:02:96:ac:96:52:12:27:56:58:91:
de:fb:8c:cb:9d:9e:93:02:65:a1:43:82:42:5f:f3:98:c5:05:
91:d5:0b:2a:f3:f0:e6:5a:4f:cc:41:9d:c0:48:16:3c:83:b5:
9a:50:37:38:d9:c2:b3:43:40:d1:19:08:ab:45:d7:41:07:c5:
fb:ef:a5:01:b8:41:9d:02:d2:80:f8:34:1d:7f:40:f2:04:55:
d9:63:08:7d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB9VFdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NjA0NzVlYmU3ZjA3ZDc0MTUzY2IxY2NhMzM4YzE2ZDgwMWY0NWY3MB4XDTIyMDUw
NDE2NTA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzU3OTNhYjFkOGMy
YjFiZjBlMWQyNTMzODJlY2U3YWEwNjM3NTFkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANvenb+T+9tzwz2SSieHzwX6oLfCZHRg5LlUwsFtfBUDID71
rxtgL8zePgq50UcokjnpbMZ9Q/SuBCv2RD2CMvUtK94ueGl9uqMjbLB8OCwDUQ8l
W3tSPcEStH+htuED/j9ZXlCJ4pgofBcTP1U5velwNabMLoDsa9geCjKF8JmEDOMi
YLGs+QJbyJE3Q+EZjveHRNuSeLxgsOgmJpPYOgijnbaykxKq6x9O9C7n5GPoOuTT
yuXN4ZTyicf5OTIx44HFgCLJfs2AUHlQX1gPX8vDrd9hreogliG0vaGf5Os5VrJw
qyfEgaM6JzcOzysAg4nn0D5cv8tQUhpytOcRmskCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQ1eTqx2MKxvw4dJTOC7OeqBjdR0zAfBgNVHSMEGDAWgBTWBHXr5/B9dBU8
scyjOMFtgB9F9zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFnUjE2LWZ3ZlhRVlBMSE1vempCYllBZlJmYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjgvNTJlYmFlLWUwMDYtNDc3OC1hYzNjLTQ5NmY4ZWJiMmQ2MS8x
L05YazZzZGpDc2I4T0hTVXpndXpucWdZM1VkTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgv
NTJlYmFlLWUwMDYtNDc3OC1hYzNjLTQ5NmY4ZWJiMmQ2MS8xLzFnUjE2LWZ3ZlhR
VlBMSE1vempCYllBZlJmYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAB+qNwMEAF5KiQMEAF5KqTANBgkq
hkiG9w0BAQsFAAOCAQEAcONoCviZnbq66Bn+pFiN8+LNyVLhHGuuTLDPjTLB7o45
RCvnu88ERq+cZ4gtBrBdqP+WlTcHuMCoFWN5NvC1Uhx0HEAZkBR6dmvGagEwc0i1
OslLnxxc9Pglg2gzfhLmCB/ZOz8CdkZ+vgo4jpjHsL7UX3G45yXe4nIVAG6PkQuC
6NIyXmMXW5599Q9/0bjXtigTUAcIgDquCbB3/sP4gHlF/v4yOIJnnUgClqyWUhIn
VliR3vuMy52ekwJloUOCQl/zmMUFkdULKvPw5lpPzEGdwEgWPIO1mlA3ONnCs0NA
0RkIq0XXQQfF+++lAbhBnQLSgPg0HX9A8gRV2WMIfQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:07 2025 by rpki-client