Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VEenGTgcOc7jfYN-2JcQQaEpcQc.roa
File: VEenGTgcOc7jfYN-2JcQQaEpcQc.roa (raw, json)
Hash identifier: C73ovP+NcqQcbgw8Zz4wLMQIhnx4e/pmeWgR/GSdgCI=
Subject key identifier: 54:47:A7:19:38:1C:39:CE:E3:7D:83:7E:D8:97:10:41:A1:29:71:07
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01845261293545980772A7A1C13EA720571E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VEenGTgcOc7jfYN-2JcQQaEpcQc.roa
Signing time: Mon 07 Nov 2022 13:56:50 +0000
ROA not before: Mon 07 Nov 2022 13:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.168.0/23 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:61:29:35:45:98:07:72:a7:a1:c1:3e:a7:20:57:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 7 13:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5447a719381c39cee37d837ed8971041a1297107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:f3:f9:7b:d0:41:9e:a5:b6:1f:c4:c5:6d:
38:b6:98:1e:ff:1a:50:f2:a4:b3:fc:fb:74:d6:92:
6d:19:a1:f9:65:51:b3:be:51:2b:8c:08:71:47:cf:
f5:59:9b:fd:b8:a9:e0:23:c9:3d:26:b7:04:28:bf:
2c:b5:12:8f:32:02:95:ef:8d:ac:c2:49:d9:41:c8:
ff:22:66:6f:4d:94:00:1c:6c:93:74:ef:f8:d4:3c:
1f:5d:d8:5f:5e:86:1d:e8:69:76:d4:50:f2:a9:70:
33:ab:21:fe:38:56:33:82:29:67:94:34:a7:43:8b:
e2:d6:54:e9:a6:3b:87:2b:80:60:d8:b1:08:70:7e:
3d:01:be:76:78:82:07:62:69:3c:a7:79:d6:47:f5:
aa:d1:c3:14:06:6b:4e:ea:46:38:8d:7e:e4:a1:86:
e2:47:74:7d:b2:5a:04:b3:b1:ce:b9:42:39:ff:5f:
4d:2d:49:b0:9f:d3:4a:91:f6:64:c6:41:5c:14:fb:
6c:1d:11:57:6b:bc:d7:23:d4:e1:4b:5b:71:ae:da:
97:4e:fb:c8:c1:44:c0:21:a4:64:13:57:4a:83:dd:
eb:48:ec:ad:49:77:2c:fe:b8:b5:f9:cc:75:d8:da:
7a:74:ac:41:e6:65:e0:7e:99:c4:98:43:e1:18:16:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:47:A7:19:38:1C:39:CE:E3:7D:83:7E:D8:97:10:41:A1:29:71:07
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VEenGTgcOc7jfYN-2JcQQaEpcQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
52:f2:5b:0f:19:34:ca:49:78:08:1d:25:92:d5:9a:b7:a4:d7:
17:a4:37:12:22:b5:b4:7e:7f:94:32:ee:df:a3:cf:a4:24:fd:
82:3c:62:8a:6e:03:cb:22:0b:61:5e:1b:08:2c:f5:1e:be:13:
bf:1e:9c:4c:2b:97:66:8c:44:df:02:b6:40:dc:dc:43:5b:ed:
3a:c7:7d:09:fa:9c:62:4a:42:b5:32:71:aa:62:70:91:45:32:
63:3a:c2:15:95:c0:f7:ed:cf:5e:34:1e:29:55:01:2d:1c:e4:
cd:3f:84:a2:e8:d5:5f:0b:6d:11:93:56:be:34:06:2c:d0:b9:
1b:a8:ed:d8:57:b1:33:f2:f3:e5:54:d8:1e:a0:db:c1:7c:02:
6e:ac:c2:98:dc:5c:74:4f:b4:fc:52:f1:69:a2:9b:07:b5:70:
27:d7:6f:b5:52:db:cc:db:43:ef:df:99:4b:47:62:28:ec:f2:
4b:14:a3:a5:28:33:a3:da:76:57:c5:a7:26:df:c1:2a:a5:62:
29:b7:7a:3c:1e:08:b2:2b:5b:86:cb:c5:6e:ac:9f:67:2e:72:
f1:d5:ad:2b:8e:28:4a:3c:7c:9d:6b:08:e5:55:c8:83:d7:ce:
5b:33:51:a3:32:b7:72:84:a3:c5:43:3f:eb:63:96:9c:e5:6c:
6d:56:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:34 2025 by rpki-client