Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/RFpVTrHswdAOQi8ZZ5i-XK6Y6xM.roa
File: RFpVTrHswdAOQi8ZZ5i-XK6Y6xM.roa (raw, json)
Hash identifier: J1Gb5n698Sdixxn7CTB9ZCLJ11Be7CQtOOcuCjC6xuQ=
Subject key identifier: 44:5A:55:4E:B1:EC:C1:D0:0E:42:2F:19:67:98:BE:5C:AE:98:EB:13
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01891B6BB3EB84E81A55A0E52B420B188C7C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/RFpVTrHswdAOQi8ZZ5i-XK6Y6xM.roa
Signing time: Mon 03 Jul 2023 11:03:10 +0000
ROA not before: Mon 03 Jul 2023 11:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:6b:b3:eb:84:e8:1a:55:a0:e5:2b:42:0b:18:8c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 3 11:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445a554eb1ecc1d00e422f196798be5cae98eb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:2f:04:6d:2b:59:11:47:b9:b4:89:69:40:
72:96:d4:cf:ca:95:33:74:bc:71:46:24:ab:3c:cc:
1a:e7:14:1e:d9:66:e4:ae:d5:ca:ee:44:70:30:a8:
20:b6:45:af:4d:65:08:ee:66:76:e2:4c:76:ee:e7:
04:f8:ec:b4:4b:e6:d7:3e:c0:38:4a:76:fc:32:12:
35:02:0c:2e:f6:37:6b:ac:ba:6c:22:36:98:01:0c:
54:d4:1f:4d:df:6c:71:fc:12:29:16:98:82:8c:6a:
3a:a5:28:18:17:ac:0f:31:02:55:11:e9:49:4d:ab:
ff:9f:f5:06:29:01:27:e2:30:9c:63:25:02:4a:19:
34:a5:c1:bc:a4:74:53:71:42:ac:b4:6f:6a:10:80:
e2:0b:3f:5c:b5:f8:c9:ac:6a:93:19:d6:85:ba:08:
55:3a:fb:f9:86:b9:64:1a:7b:9b:7e:d1:50:52:69:
2b:79:94:b7:15:bc:8b:d1:5e:15:be:bf:c3:e9:02:
ba:2b:3d:6e:90:65:dd:77:99:1e:ee:64:a5:bf:18:
16:4d:fe:c2:98:73:da:5e:5b:a0:71:92:70:5f:30:
84:07:d9:f4:7f:6a:7b:24:49:63:1f:fd:e9:98:80:
78:e7:a3:b2:40:35:ca:7d:d6:91:21:e4:73:91:cb:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5A:55:4E:B1:EC:C1:D0:0E:42:2F:19:67:98:BE:5C:AE:98:EB:13
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/RFpVTrHswdAOQi8ZZ5i-XK6Y6xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.168.0-109.203.191.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
65:af:a0:5e:a2:48:ff:31:62:15:74:57:93:95:6f:23:5f:ba:
ba:3a:cf:a3:cf:f7:f2:a3:b0:75:2b:b0:7f:d0:5c:b8:41:7e:
d9:c0:14:fd:7a:70:fe:94:e1:c1:78:c7:b4:42:da:c9:0e:ce:
23:d9:a4:e5:f0:80:1e:c5:b3:3d:8c:5c:03:07:e7:54:8b:97:
53:0c:0d:08:85:73:2c:c7:6c:36:e9:e3:34:6e:71:dd:a9:4d:
78:d3:05:e9:2c:92:db:14:57:f9:57:28:62:16:11:00:bf:62:
ef:55:9c:52:be:8a:03:84:9a:5a:12:54:02:eb:c3:54:d0:f1:
a8:05:98:62:31:2b:7d:05:2a:1c:65:f8:76:b7:32:01:7a:00:
7f:48:92:13:e2:66:41:35:7e:2a:f8:7f:20:3f:a7:70:1e:29:
c5:0c:9d:a4:fc:49:c1:d0:8f:29:bd:eb:e6:0d:1c:5a:bd:64:
42:2d:b5:ef:f4:4c:21:c3:95:bb:57:70:78:b9:9e:1c:09:1c:
5b:e7:0f:fb:d0:c9:10:b3:36:ff:aa:99:ed:b2:8e:0b:9a:99:
a4:77:c5:64:77:7f:44:bb:dc:c3:f3:88:6c:d7:d0:c0:2c:58:
63:2c:b4:12:fe:d2:3a:41:db:e0:32:d0:ab:4c:40:7a:0f:32:
57:47:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:38 2025 by rpki-client