Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SStFXnp6Mzn3xNbCVl5LDR_jWa0.roa
File: SStFXnp6Mzn3xNbCVl5LDR_jWa0.roa (raw, json)
Hash identifier: FOn+NCQszl5OfmBjT6/2s3ls+T8YU0lAF/XJ4k/MbgY=
Subject key identifier: 49:2B:45:5E:7A:7A:33:39:F7:C4:D6:C2:56:5E:4B:0D:1F:E3:59:AD
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D4951E48F47849637A744C02B2082014D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SStFXnp6Mzn3xNbCVl5LDR_jWa0.roa
Signing time: Sat 27 Jan 2024 05:08:40 +0000
ROA not before: Sat 27 Jan 2024 05:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.187.0/24 maxlen: 24
94.74.190.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:51:e4:8f:47:84:96:37:a7:44:c0:2b:20:82:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 27 05:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=492b455e7a7a3339f7c4d6c2565e4b0d1fe359ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:4c:17:71:c6:80:4d:b6:5a:50:95:1a:3c:
d8:3d:63:8e:52:3e:88:27:85:6a:0e:8a:52:1a:6c:
09:bf:07:e4:36:4e:30:25:4e:cc:3e:a0:df:55:20:
c0:d1:cc:d4:57:67:2f:52:8d:de:67:d0:8e:df:e6:
a9:4b:ac:75:69:fd:e7:2e:c1:8b:98:83:fa:cb:7c:
30:12:af:b2:e2:e4:03:c9:bd:92:b6:d6:d1:24:07:
9b:3c:8b:23:9b:d6:b1:91:aa:e7:8d:bb:d1:9f:e8:
8c:c7:4f:1a:fd:c5:91:b9:74:57:9c:a6:68:54:93:
97:73:95:1a:bb:c8:f8:74:31:0d:ca:64:9a:d4:3e:
b1:fe:87:dc:90:03:83:f5:9c:fe:dc:c1:de:f2:37:
46:0d:39:48:9c:a4:66:b4:02:a9:f8:f6:b2:b3:cd:
34:b3:73:ee:19:6b:25:68:c1:67:04:e4:10:88:7f:
6e:ab:ad:f1:bd:f4:bc:5d:33:d0:e3:06:5c:8a:82:
e4:4f:9c:e4:81:8d:b1:0c:57:7b:45:a4:a5:89:07:
88:4f:9b:47:54:92:3f:2e:fb:a0:8b:1a:bb:ad:d6:
ca:c9:aa:f8:f2:e7:e7:a6:a5:25:42:02:e5:e4:b7:
02:a7:9d:9c:ce:6e:0b:9a:f5:0a:fe:0e:33:c0:37:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:45:5E:7A:7A:33:39:F7:C4:D6:C2:56:5E:4B:0D:1F:E3:59:AD
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SStFXnp6Mzn3xNbCVl5LDR_jWa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.166.0/24
176.46.136.0/24
176.46.138.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:05:e5:b1:4a:4b:3e:60:e4:02:62:3f:f1:b2:de:65:43:02:
82:75:31:2f:83:54:c3:de:77:4d:be:99:bf:2d:80:9b:ea:2b:
12:17:8c:af:43:76:07:c3:7c:3f:77:e5:06:12:16:0c:2b:a8:
43:fe:6e:12:0d:fa:b8:04:ac:00:4d:40:ca:8c:f9:e9:7c:b9:
b9:01:60:66:1b:29:94:bc:2f:24:85:6c:4c:5f:f7:26:85:4e:
86:9e:b0:5b:d7:78:74:8c:78:d9:c0:95:79:da:9e:79:84:64:
b4:45:d6:67:17:d4:f3:29:ad:48:d6:a2:6c:22:22:a5:11:f4:
fa:db:cc:3d:4b:a2:8a:2e:62:87:21:3d:9f:2c:ac:5a:16:b7:
a9:d8:7a:e3:f2:71:4e:63:38:56:50:53:bc:05:5c:29:f6:9e:
46:b5:36:54:34:c7:9c:6a:92:de:bf:96:65:07:8c:db:f7:5c:
b1:9f:68:2f:e5:5d:38:a2:84:22:9f:88:74:c1:8a:ea:c1:c9:
1d:82:73:81:3e:9a:fa:f1:8d:4d:d2:dc:c0:dd:20:92:48:00:
9d:d8:72:c4:df:9f:04:97:f1:ef:be:cf:18:55:f3:05:90:8b:
da:4c:6d:24:37:2b:46:c1:76:3d:97:b9:72:c7:3a:6a:08:5c:
5a:e4:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:39 2025 by rpki-client