Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bXy9lSDM6X2ZZtzRjWkvQ7_Bvo4.roa
File: bXy9lSDM6X2ZZtzRjWkvQ7_Bvo4.roa (raw, json)
Hash identifier: ddwoiaUeDpAkJKHtrseHRyD14E9uj73utKpiEjs0ERU=
Subject key identifier: 6D:7C:BD:95:20:CC:E9:7D:99:66:DC:D1:8D:69:2F:43:BF:C1:BE:8E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018837A255C5B1A88FDBC939B621F5B1F0BF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bXy9lSDM6X2ZZtzRjWkvQ7_Bvo4.roa
Signing time: Sat 20 May 2023 05:29:25 +0000
ROA not before: Sat 20 May 2023 05:29:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:a2:55:c5:b1:a8:8f:db:c9:39:b6:21:f5:b1:f0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 20 05:29:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d7cbd9520cce97d9966dcd18d692f43bfc1be8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:41:b0:f5:b2:1b:4d:d6:33:ca:fc:d3:60:
fc:77:62:a5:8b:f7:31:32:b4:ed:35:f9:f7:7f:dd:
43:3c:cd:95:ba:5d:58:12:5b:43:e5:fc:27:17:bd:
a9:b7:ab:6e:e6:01:a0:91:fa:db:22:c9:4c:cf:9d:
a6:36:9f:90:a7:b4:03:16:85:6d:63:72:02:ce:8b:
7f:54:ed:86:7a:1a:21:00:26:13:8d:9c:8d:bd:2f:
56:2d:c4:c2:d8:35:f0:36:a5:25:bc:22:8d:55:af:
64:45:aa:1b:34:b1:79:eb:09:82:9d:50:34:eb:de:
c7:8c:03:78:92:d5:0b:9e:9d:89:34:b2:97:91:3c:
31:ef:6e:90:08:e4:c3:b1:f0:89:c0:4b:53:c6:0d:
93:98:d4:16:8a:54:db:0b:33:1e:8c:c9:85:5d:ed:
b0:ef:20:9e:50:25:30:6f:c6:85:27:a0:2a:a9:e3:
e6:7f:06:11:d5:26:56:c8:8f:d6:bb:1b:3d:e4:0b:
b2:d4:e3:62:f2:68:47:45:93:51:69:88:0c:11:da:
24:0f:4d:36:30:74:33:6d:e7:7a:e2:1d:5a:16:52:
e6:86:d4:81:19:d6:dc:7d:3d:3a:af:c5:99:2e:4e:
c9:14:1f:66:b6:84:26:06:59:87:aa:10:e3:15:ca:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7C:BD:95:20:CC:E9:7D:99:66:DC:D1:8D:69:2F:43:BF:C1:BE:8E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/bXy9lSDM6X2ZZtzRjWkvQ7_Bvo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.144.0/20
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:68:79:1a:ea:31:15:bd:ca:f5:7f:dc:10:40:bf:65:5d:db:
47:24:4e:84:3d:1f:27:22:b2:cf:45:25:b9:db:f9:9e:21:de:
a6:29:dc:85:95:e4:f4:a8:43:41:42:b2:e0:d5:e5:e3:95:b6:
9c:e4:37:bf:2f:61:a7:03:99:a5:af:0d:eb:82:cd:37:5d:00:
80:b7:69:75:2b:eb:e6:fb:de:46:c6:be:ac:b8:85:86:4c:9b:
b2:7b:ea:23:ee:09:26:98:cd:3d:70:bd:5d:eb:ba:1a:d5:46:
bf:70:05:46:13:58:39:ec:73:5f:86:55:37:f7:94:07:bb:ff:
91:aa:07:97:be:0f:13:36:98:68:7b:de:05:23:b5:04:7d:74:
c7:16:06:5a:a9:f7:c7:48:b5:1b:9a:3b:51:77:79:0a:c0:be:
0d:8d:5f:51:5d:a2:71:a2:c5:d1:fe:bb:03:fd:dc:3e:4d:fc:
54:15:eb:5e:9e:ef:b3:ba:51:4e:f0:ad:1e:4c:aa:7a:ba:ec:
c5:a3:61:c9:7f:92:a4:94:50:62:b9:44:29:e6:59:9c:66:a2:
32:c8:92:63:13:65:f2:b0:b7:b8:b0:29:61:2b:3d:89:76:c3:
96:53:70:7a:b7:9e:23:af:23:9f:12:22:be:58:bc:a6:1c:cc:
0b:27:83:e3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYg3olXFsaiP28k5tiH1sfC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwNTIwMDUyOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDdjYmQ5NTIwY2NlOTdkOTk2NmRjZDE4ZDY5MmY0M2JmYzFiZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArstBsPWyG03WM8r802D8d2Kli/cx
MrTtNfn3f91DPM2Vul1YEltD5fwnF72pt6tu5gGgkfrbIslMz52mNp+Qp7QDFoVt
Y3ICzot/VO2GehohACYTjZyNvS9WLcTC2DXwNqUlvCKNVa9kRaobNLF56wmCnVA0
697HjAN4ktULnp2JNLKXkTwx726QCOTDsfCJwEtTxg2TmNQWilTbCzMejMmFXe2w
7yCeUCUwb8aFJ6AqqePmfwYR1SZWyI/Wuxs95Auy1ONi8mhHRZNRaYgMEdokD002
MHQzbed64h1aFlLmhtSBGdbcfT06r8WZLk7JFB9mtoQmBlmHqhDjFcrrswIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFG18vZUgzOl9mWbc0Y1pL0O/wb6OMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvYlh5OWxTRE02WDJaWnR6UmpXa3ZRN19Cdm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEH6owAwQG
XkqAAwQFbcugAwQEsC6QAwQCuSKgMA0GCSqGSIb3DQEBCwUAA4IBAQBuaHka6jEV
vcr1f9wQQL9lXdtHJE6EPR8nIrLPRSW52/meId6mKdyFleT0qENBQrLg1eXjlbac
5De/L2GnA5mlrw3rgs03XQCAt2l1K+vm+95Gxr6suIWGTJuye+oj7gkmmM09cL1d
67oa1Ua/cAVGE1g57HNfhlU395QHu/+RqgeXvg8TNphoe94FI7UEfXTHFgZaqffH
SLUbmjtRd3kKwL4NjV9RXaJxosXR/rsD/dw+TfxUFetenu+zulFO8K0eTKp6uuzF
o2HJf5KklFBiuUQp5lmcZqIyyJJjE2XysLe4sClhKz2JdsOWU3B6t54jryOfEiK+
WLymHMwLJ4Pj
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:55 2025 by rpki-client