Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dOOeJ3ImgHkdW3Ks0c9JdxkG3t8.roa
File: dOOeJ3ImgHkdW3Ks0c9JdxkG3t8.roa (raw, json)
Hash identifier: dCVYaH37QUwHfuAxjrJG/J9bYH2DD+YiViAsuSfhv7M=
Subject key identifier: 74:E3:9E:27:72:26:80:79:1D:5B:72:AC:D1:CF:49:77:19:06:DE:DF
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01856ED4CDE4DA516AEC1730D25D7ACA5B31
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dOOeJ3ImgHkdW3Ks0c9JdxkG3t8.roa
Signing time: Sun 01 Jan 2023 19:35:18 +0000
ROA not before: Sun 01 Jan 2023 19:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58224
IP address blocks: 109.203.172.0/22 maxlen: 24
109.203.168.0/22 maxlen: 24
109.203.176.0/22 maxlen: 24
109.203.184.0/21 maxlen: 24
109.203.180.0/22 maxlen: 24
94.74.152.0/22 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cd:e4:da:51:6a:ec:17:30:d2:5d:7a:ca:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 1 19:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74e39e27722680791d5b72acd1cf49771906dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:a9:e3:e1:bb:31:e6:0d:6a:56:19:24:5f:
85:ac:91:07:25:01:d6:27:b3:a7:ff:e8:40:7b:ad:
84:06:64:e8:db:fd:06:f9:d0:fb:6c:3a:85:d8:3a:
1b:17:66:40:29:75:ea:e0:a9:25:f9:11:40:ab:a5:
83:60:be:ee:6a:75:40:32:e6:3a:40:75:5d:3d:9a:
75:0b:38:7e:39:41:18:f3:9d:0a:09:86:8f:f6:12:
f8:d6:d5:a3:d2:15:03:89:13:08:ac:4d:14:a2:a9:
89:ba:55:c9:eb:2d:e4:28:f1:e3:ab:4b:69:9d:2a:
67:29:1c:b5:bb:ee:cb:5b:bd:2f:aa:88:dc:7c:d8:
1b:3e:95:85:da:e1:99:c5:6b:c4:d9:46:6e:a5:82:
72:0d:90:91:5d:5f:05:b1:61:f4:21:ba:57:28:ec:
f6:d7:ff:f7:33:27:9b:51:e4:20:1d:42:c3:84:1d:
ac:ca:43:42:9c:43:2f:28:a3:ae:1b:8f:b7:c8:d5:
01:1b:4f:1c:33:71:50:b9:b6:12:ee:a1:75:6e:6e:
f3:f0:45:f7:07:0f:16:a0:b7:0d:ec:eb:89:5e:96:
81:59:53:72:66:22:47:ea:5f:b0:0c:e5:4b:c1:ad:
a8:64:83:af:06:77:79:bd:a9:15:a1:67:52:fb:7b:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:9E:27:72:26:80:79:1D:5B:72:AC:D1:CF:49:77:19:06:DE:DF
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dOOeJ3ImgHkdW3Ks0c9JdxkG3t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.152.0/22
109.203.168.0-109.203.191.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6f:2c:20:5b:48:4a:8f:83:39:7c:d5:58:70:a0:5c:de:10:
4a:48:bd:f2:53:44:3c:d5:0d:d6:18:db:19:4c:74:5c:aa:63:
77:ca:c3:f5:00:64:e2:83:24:a0:7b:66:56:14:ad:57:5a:82:
50:5f:a2:fe:8e:d8:69:18:be:44:40:71:86:ef:24:e8:d9:7a:
8b:85:11:7b:52:7a:1d:a1:03:2c:46:31:73:68:17:9f:a1:f2:
bd:7f:aa:27:ee:98:08:59:94:5a:fd:61:57:67:dd:b2:1b:e6:
2c:79:0d:b8:2b:ad:46:7d:e6:a8:22:0e:0d:8c:ec:e2:2a:de:
1e:68:d6:a9:f5:8a:62:f9:ca:0f:b8:b9:aa:c6:be:ae:26:88:
5c:40:7f:44:09:db:e5:ee:fd:c2:f1:9d:5c:3f:26:a0:62:9e:
7a:bb:65:40:08:42:8f:62:2f:9c:00:84:24:54:f8:65:32:b3:
a9:cb:9e:26:72:7e:bd:f4:85:bf:5b:40:41:46:01:7d:a7:c7:
22:cc:76:fd:26:aa:3b:db:db:a8:bd:75:cd:db:7f:bf:c1:3f:
ef:6f:82:0b:d0:8a:53:92:4a:4e:85:91:a5:f6:37:21:26:75:
8e:39:5f:e1:a6:af:a8:d7:f2:b0:08:15:30:53:e8:25:87:bc:
a5:d9:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:33 2025 by rpki-client