Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fWHk44fNAdaq2oBd17KssVan6O8.roa
File: fWHk44fNAdaq2oBd17KssVan6O8.roa (raw, json)
Hash identifier: O5MiVZUJeGxCKZW5hqbwtuLnylQdW5p9lRLN9e74Jw4=
Subject key identifier: 7D:61:E4:E3:87:CD:01:D6:AA:DA:80:5D:D7:B2:AC:B1:56:A7:E8:EF
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183D5DB363E89838513F1DEC081BE8A7469
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fWHk44fNAdaq2oBd17KssVan6O8.roa
Signing time: Fri 14 Oct 2022 09:37:36 +0000
ROA not before: Fri 14 Oct 2022 09:37:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:db:36:3e:89:83:85:13:f1:de:c0:81:be:8a:74:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 14 09:37:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d61e4e387cd01d6aada805dd7b2acb156a7e8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:e6:22:e6:fa:b3:d2:68:d4:ed:3e:fe:d9:
50:38:54:5e:85:43:e1:16:3c:f7:08:e6:47:44:c3:
dc:b4:11:64:29:0d:75:4f:25:19:2c:73:93:cd:6c:
32:41:da:8f:5a:a6:ae:18:c2:60:ff:8e:6f:7c:e6:
7d:9d:ba:37:c8:f2:66:8d:51:48:b1:5c:30:92:19:
ff:a6:6c:3c:5a:00:91:e3:91:b2:c9:44:f1:ee:b1:
4e:b3:19:af:fa:80:d8:0c:4e:1a:69:ea:5a:69:ba:
f5:e9:80:aa:7b:78:31:1e:89:37:61:24:ff:51:26:
a1:c1:a4:41:a4:25:63:e1:26:54:db:47:b4:72:19:
34:09:fb:a1:72:46:03:a7:f0:dd:5b:97:53:e1:ca:
c1:cd:24:ee:94:9f:d2:e9:39:75:9b:ca:dd:0b:28:
31:d0:0c:d4:9a:d7:fd:b3:7c:9f:e1:48:3b:fe:7e:
b6:3d:36:6f:7c:af:8b:59:62:a1:ed:d0:e0:98:59:
eb:52:ad:e7:ce:23:2a:dd:b3:9a:77:9b:b8:7d:23:
c5:f5:1f:bf:32:83:67:69:1e:85:8b:5b:cc:12:f0:
f0:79:06:8a:a4:f7:07:a7:ef:15:1b:72:28:98:d8:
33:e6:3c:2e:e0:14:93:4d:38:01:17:e1:2f:27:e0:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:E4:E3:87:CD:01:D6:AA:DA:80:5D:D7:B2:AC:B1:56:A7:E8:EF
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/fWHk44fNAdaq2oBd17KssVan6O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
84:07:b9:a8:0e:9d:35:ad:dd:c3:ae:ae:27:a9:74:1c:3a:ca:
6c:a5:1d:56:46:ab:6a:17:4f:00:a6:41:ac:d2:fa:19:58:a2:
8f:99:a8:b5:b7:e3:2e:35:b4:8b:7b:8d:85:bb:a1:4d:d6:c7:
8a:98:05:12:09:f6:11:23:89:08:fa:69:e6:25:a0:aa:ca:c4:
b2:11:5c:34:fa:12:98:e6:69:29:cb:ee:13:02:82:fb:99:c0:
8b:42:7d:19:c4:59:c0:a6:5c:5a:0c:f6:73:65:6c:9b:03:05:
94:52:bf:42:11:8f:4e:4b:5a:13:0e:41:7a:43:ad:2f:aa:fe:
fc:67:c6:6c:78:d2:d4:06:6c:d0:95:4f:08:11:c2:d4:61:c2:
1a:96:e4:3b:ea:d2:3e:31:91:49:6e:fb:08:84:7e:e1:02:c5:
04:8b:46:76:ae:75:0c:85:19:a3:fd:45:c4:e8:80:49:7a:a0:
4c:b2:4e:2d:92:80:8e:c0:9b:84:3a:8f:34:5f:2f:f0:0b:8e:
59:a8:02:05:fa:1e:31:73:e5:07:6f:fe:c6:f3:5c:45:c8:61:
09:c5:ab:66:ff:09:17:31:a9:73:37:ac:9a:8d:6a:df:e8:34:
b7:1f:99:b9:00:d1:43:88:13:4c:b8:da:44:74:99:39:a7:cd:
33:d5:75:6d
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYPV2zY+iYOFE/HewIG+inRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjIxMDE0MDkzNzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDYxZTRlMzg3Y2QwMWQ2YWFkYTgwNWRkN2IyYWNiMTU2YTdlOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S/mIub6s9Jo1O0+/tlQOFRehUPh
Fjz3COZHRMPctBFkKQ11TyUZLHOTzWwyQdqPWqauGMJg/45vfOZ9nbo3yPJmjVFI
sVwwkhn/pmw8WgCR45GyyUTx7rFOsxmv+oDYDE4aaepaabr16YCqe3gxHok3YST/
USahwaRBpCVj4SZU20e0chk0CfuhckYDp/DdW5dT4crBzSTulJ/S6Tl1m8rdCygx
0AzUmtf9s3yf4Ug7/n62PTZvfK+LWWKh7dDgmFnrUq3nziMq3bOad5u4fSPF9R+/
MoNnaR6Fi1vMEvDweQaKpPcHp+8VG3IomNgz5jwu4BSTTTgBF+EvJ+CBAQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFH1h5OOHzQHWqtqAXdeyrLFWp+jvMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvZldIazQ0Zk5BZGFxMm9CZDE3S3NzVmFuNk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEH6owAwQG
XkqAAwQFbcugAwQFsC6AAwQCuSKgMA0GCSqGSIb3DQEBCwUAA4IBAQCEB7moDp01
rd3Drq4nqXQcOspspR1WRqtqF08ApkGs0voZWKKPmai1t+MuNbSLe42Fu6FN1seK
mAUSCfYRI4kI+mnmJaCqysSyEVw0+hKY5mkpy+4TAoL7mcCLQn0ZxFnAplxaDPZz
ZWybAwWUUr9CEY9OS1oTDkF6Q60vqv78Z8ZseNLUBmzQlU8IEcLUYcIaluQ76tI+
MZFJbvsIhH7hAsUEi0Z2rnUMhRmj/UXE6IBJeqBMsk4tkoCOwJuEOo80Xy/wC45Z
qAIF+h4xc+UHb/7G81xFyGEJxatm/wkXMalzN6yajWrf6DS3H5m5ANFDiBNMuNpE
dJk5p80z1XVt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:33 2025 by rpki-client