Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PbPPv3haXc3ugSrHQ3aGDryNm8I.roa
File: PbPPv3haXc3ugSrHQ3aGDryNm8I.roa (raw, json)
Hash identifier: v96G0AGoI+gEm3y4PcE6ocH3Yep9F9DGD0Xkz108Lw0=
Subject key identifier: 3D:B3:CF:BF:78:5A:5D:CD:EE:81:2A:C7:43:76:86:0E:BC:8D:9B:C2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01847AC816ACF2BF5C277CA8944788965F51
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PbPPv3haXc3ugSrHQ3aGDryNm8I.roa
Signing time: Tue 15 Nov 2022 10:14:04 +0000
ROA not before: Tue 15 Nov 2022 10:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:c8:16:ac:f2:bf:5c:27:7c:a8:94:47:88:96:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 15 10:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3db3cfbf785a5dcdee812ac74376860ebc8d9bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:6f:bb:2a:33:ca:05:dd:a2:4a:9f:0f:fd:
a5:88:c7:15:06:c4:1e:1c:0e:8b:4a:e1:0d:7c:13:
b9:05:50:a8:4b:5c:42:48:21:d8:1d:f8:27:79:04:
e1:b1:00:1b:f0:4e:ac:87:7f:25:d5:41:51:12:1f:
92:82:d3:49:1e:d6:66:55:09:02:45:78:c9:38:79:
36:ff:16:fb:70:ff:e7:d2:66:85:e4:22:d4:b7:92:
86:c0:70:73:71:1a:60:af:b2:d3:5d:0f:d4:62:3a:
cc:75:79:f0:ce:47:03:79:c3:7e:08:72:50:24:2f:
0b:e5:9a:f4:37:53:f4:cf:a8:7b:48:3f:d2:aa:6c:
09:a5:c5:1b:ea:2f:8d:44:fc:c9:f2:5f:9e:4b:dc:
6b:8f:49:6f:ee:dd:67:ca:35:43:8a:66:59:e7:0d:
29:54:9a:30:b1:5f:29:45:51:9b:31:96:c5:78:23:
b8:00:38:c8:75:e3:25:19:e1:fa:ac:8f:df:7e:ac:
c4:1b:c8:ca:53:35:d9:d0:ef:6b:58:96:38:66:37:
21:02:e1:27:93:f8:d9:e6:b1:7d:4b:71:7b:b8:70:
30:34:bb:ab:42:61:43:88:d0:3e:d6:4a:fd:8a:aa:
51:6c:7e:c9:5f:db:78:15:59:25:ca:4e:85:22:9b:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:CF:BF:78:5A:5D:CD:EE:81:2A:C7:43:76:86:0E:BC:8D:9B:C2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/PbPPv3haXc3ugSrHQ3aGDryNm8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.148.0/22
94.74.137.0/24
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/22
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
109.203.164.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b3:fd:e7:b2:6c:78:0f:3f:1a:89:09:a5:c1:2f:77:f2:d5:
72:59:3a:82:e6:78:0e:0a:3f:77:bf:64:a0:87:8c:e4:13:51:
95:26:00:9d:5e:06:6a:05:dd:20:57:a0:e7:b7:ce:8d:63:67:
83:73:b5:56:6a:47:21:e0:3c:1b:e4:7a:71:81:54:a4:4c:15:
59:f4:f6:94:f8:73:05:13:f6:af:83:ae:9e:ad:a2:90:f5:15:
21:e3:f2:6f:59:8c:66:21:55:18:76:a0:e0:df:38:1c:05:ae:
b2:c2:4e:cb:b1:af:6f:ab:ad:7d:a1:22:4a:da:b5:f9:b2:24:
f0:b2:71:23:8e:eb:3b:a1:73:e1:9f:38:4a:9e:5e:7f:67:92:
35:e1:58:01:62:11:06:3b:a0:78:ae:e0:6e:6b:dc:4f:9a:40:
40:9d:f7:75:34:a8:86:d3:ce:8c:a3:53:83:04:6c:38:4e:d9:
37:3a:ee:de:dd:91:a9:c8:3d:a8:d1:e8:6f:6b:2a:aa:31:26:
6a:e3:c2:04:fd:59:e1:82:cc:1b:3d:79:5a:55:04:58:51:ce:
e7:76:e6:ca:50:1f:01:83:07:f3:0e:21:10:89:29:1b:39:4a:
2b:d4:f0:f2:52:da:91:50:b4:a5:a3:09:e8:72:d1:e2:cc:41:
4e:7e:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:54 2025 by rpki-client