Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P-sdQn--LPIPaactA_-BbzjIRec.roa
File: P-sdQn--LPIPaactA_-BbzjIRec.roa (raw, json)
Hash identifier: tzMqMU4nnxEH1Tb2msaeXPcQJ/Vo4XV/RcTr8uhRRPs=
Subject key identifier: 3F:EB:1D:42:7F:BE:2C:F2:0F:69:A7:2D:03:FF:81:6F:38:C8:45:E7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018455CE3E3D1DA11EA7AF23F37AB8001B65
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P-sdQn--LPIPaactA_-BbzjIRec.roa
Signing time: Tue 08 Nov 2022 05:54:50 +0000
ROA not before: Tue 08 Nov 2022 05:54:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:ce:3e:3d:1d:a1:1e:a7:af:23:f3:7a:b8:00:1b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 8 05:54:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3feb1d427fbe2cf20f69a72d03ff816f38c845e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:6a:1b:6c:6c:47:34:3e:68:24:8e:56:8d:
b6:f7:93:5a:0e:1c:88:1a:76:9e:74:8d:31:5e:99:
17:71:76:a2:99:48:14:27:e9:d2:b5:69:7a:f4:1a:
73:e2:6d:ae:e5:8f:87:96:5b:cc:34:02:d0:fc:b8:
b8:82:28:35:13:b4:d5:e2:dd:27:09:15:49:68:2c:
7d:34:1d:69:9d:3a:cc:c3:8e:79:83:a8:c4:1b:ae:
12:6e:7d:99:17:e3:d5:9f:b0:16:62:23:fd:3e:69:
4d:f8:f8:8d:f8:a9:c4:42:a3:38:61:2a:c4:02:4d:
de:a5:27:91:99:77:5d:16:68:16:ad:a4:f0:92:ed:
4d:6c:68:0b:81:5a:9f:aa:27:aa:a0:c4:c2:f4:af:
76:9a:28:e8:f9:74:d1:81:fa:db:39:aa:45:c6:42:
20:65:1f:c6:be:5c:54:aa:b2:44:48:d5:0a:6b:dd:
2b:49:63:1b:0c:48:95:fb:24:67:e7:69:f4:28:42:
2c:ed:e1:89:e3:83:e0:60:60:c1:73:9f:06:6e:45:
00:aa:43:9d:1f:10:07:7d:3e:91:28:63:d6:a3:93:
29:ab:eb:df:cb:d4:da:e9:65:2d:3d:ca:68:ce:82:
54:1b:e5:a0:ef:b0:df:bd:97:8e:d0:f8:28:31:f6:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:1D:42:7F:BE:2C:F2:0F:69:A7:2D:03:FF:81:6F:38:C8:45:E7
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/P-sdQn--LPIPaactA_-BbzjIRec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:66:40:de:49:d5:12:04:e6:aa:d8:a5:b5:1c:3c:fb:90:2d:
32:e2:be:ec:08:c1:ce:86:40:c1:ba:49:2a:01:1b:f6:b5:23:
12:33:6c:8b:c9:fb:20:39:b9:49:9e:5f:75:b5:81:e0:e7:6a:
ea:87:e0:7a:f2:0f:ef:07:47:76:34:5e:de:10:c0:62:d4:c5:
21:37:42:05:11:4a:f0:48:73:12:90:0c:39:5f:6a:4a:30:32:
19:f2:3e:04:36:fb:cd:f0:9b:45:b4:49:aa:8f:5b:39:f2:f1:
ba:95:32:2c:04:99:88:cd:03:fd:26:e5:e0:15:40:04:dd:40:
f1:29:5f:e0:b0:30:e6:49:f8:41:63:08:03:51:95:96:fa:05:
c8:c0:96:32:15:3d:15:c7:a6:7c:ae:65:9c:80:3a:d3:6a:d4:
74:b2:30:dc:14:26:41:dc:72:44:bf:56:80:c6:23:b6:9e:95:
1c:05:2d:ac:0b:17:4d:d9:31:5f:df:e1:6d:34:94:d4:31:3d:
6a:16:22:4d:ec:3b:83:1d:87:e3:34:10:00:23:3a:35:cf:37:
31:74:23:01:8f:19:ae:1d:d3:c5:bc:80:3e:7c:ce:44:17:d0:
5c:3d:9a:06:21:d3:1b:f1:ca:cc:de:cd:87:a3:a1:62:84:2c:
9d:63:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:24 2025 by rpki-client