Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/g_N8kBGedDCd54V_uhm6C56VokU.roa
File: g_N8kBGedDCd54V_uhm6C56VokU.roa (raw, json)
Hash identifier: HZj9ZGzB+J5fInM/k899hb7KWlSmwRUsIkO0KgT6ChA=
Subject key identifier: 83:F3:7C:90:11:9E:74:30:9D:E7:85:7F:BA:19:BA:0B:9E:95:A2:45
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018FB8EE18B3EB1DCD71E4837ED78FEBB570
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/g_N8kBGedDCd54V_uhm6C56VokU.roa
Signing time: Mon 27 May 2024 07:22:42 +0000
ROA not before: Mon 27 May 2024 07:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:ee:18:b3:eb:1d:cd:71:e4:83:7e:d7:8f:eb:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 27 07:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83f37c90119e74309de7857fba19ba0b9e95a245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:f9:29:1c:91:42:48:34:2f:a9:3d:81:0b:
75:d7:ba:d2:1c:81:a3:ba:72:04:bd:b8:66:b4:88:
83:0c:04:83:d8:c5:21:66:2d:9d:e2:72:16:23:1a:
d7:ac:23:81:04:15:f0:1f:99:22:f8:4a:18:00:c5:
c3:52:63:0d:ca:92:58:ec:ef:49:e7:8d:03:7b:dc:
c3:70:f1:11:c6:53:b8:40:fe:dd:ba:a8:c4:9d:c3:
a8:27:16:9e:77:f7:f9:39:c6:dd:5c:25:04:fc:a5:
51:31:43:95:6b:ae:23:47:4c:ac:96:b1:c9:fa:d0:
35:c6:c8:15:b3:9e:24:91:a0:a1:c5:74:fb:40:9c:
87:ec:3c:c6:4c:69:16:f2:93:a1:52:7b:3f:5c:71:
7e:8b:0c:cf:73:67:bb:3f:3a:60:9d:81:a6:d1:83:
a4:65:f3:ab:d6:3f:4a:0a:67:44:99:ad:46:1a:42:
7f:8a:ff:41:d3:95:a1:71:dd:90:09:e2:ac:6d:dd:
8d:5d:10:e7:6d:5e:45:1d:9d:da:84:15:41:d1:9b:
ef:98:ac:19:69:46:40:1e:65:f5:17:7c:75:24:d5:
e6:80:aa:3f:30:f3:a1:00:62:21:62:af:38:0d:03:
43:c8:28:50:5e:77:f1:7a:e3:e6:28:12:4b:4c:fc:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:7C:90:11:9E:74:30:9D:E7:85:7F:BA:19:BA:0B:9E:95:A2:45
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/g_N8kBGedDCd54V_uhm6C56VokU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.140.0/24
176.46.145.0/24
176.46.147.0/24
176.46.151.0/24
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:ff:6a:03:b8:ff:28:66:df:a2:b8:1b:50:29:64:e2:24:07:
f8:e1:24:2a:a5:25:1d:79:27:9c:46:20:fb:09:44:a3:42:0b:
f7:d0:c1:7f:5c:db:37:29:41:29:37:c8:96:a4:d2:c8:54:18:
3a:dc:d5:39:1c:c1:01:90:83:2d:71:a0:f9:d5:7c:24:75:c9:
ea:6a:9c:bc:c6:ec:9a:94:e0:b7:b1:4d:76:80:10:c4:d5:47:
e3:0e:7f:11:8a:a3:cd:ab:e8:05:e7:1c:cb:7c:d3:02:64:01:
e4:79:d1:40:b4:b6:86:28:7d:17:a9:86:08:69:fb:4c:30:0c:
e3:39:de:97:c2:dd:bd:22:59:79:69:ae:4b:ea:f8:21:79:6f:
42:0c:6c:ba:75:31:54:1e:bd:14:f6:8a:34:89:0d:10:4b:65:
76:17:53:ee:06:fb:80:f0:4d:b4:fc:52:e1:63:d7:09:72:5e:
13:a7:c1:76:c8:15:77:48:e4:fb:d7:72:08:3e:50:de:68:26:
b7:d9:c7:db:8b:2f:f0:77:d4:58:3e:88:dd:2f:07:11:be:4c:
1e:90:8a:48:30:27:01:92:cf:35:df:94:e2:c6:26:40:5b:17:
8f:e7:85:c1:a3:94:df:43:f1:fb:74:e3:97:ef:0d:e8:d1:6a:
44:85:87:08
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAY+47hiz6x3NceSDfteP67VwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwNTI3MDcyMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2YzN2M5MDExOWU3NDMwOWRlNzg1N2ZiYTE5YmEwYjllOTVhMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN75KRyRQkg0L6k9gQt117rSHIGj
unIEvbhmtIiDDASD2MUhZi2d4nIWIxrXrCOBBBXwH5ki+EoYAMXDUmMNypJY7O9J
540De9zDcPERxlO4QP7duqjEncOoJxaed/f5OcbdXCUE/KVRMUOVa64jR0yslrHJ
+tA1xsgVs54kkaChxXT7QJyH7DzGTGkW8pOhUns/XHF+iwzPc2e7PzpgnYGm0YOk
ZfOr1j9KCmdEma1GGkJ/iv9B05Whcd2QCeKsbd2NXRDnbV5FHZ3ahBVB0ZvvmKwZ
aUZAHmX1F3x1JNXmgKo/MPOhAGIhYq84DQNDyChQXnfxeuPmKBJLTPzulwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFIPzfJARnnQwneeFf7oZuguelaJFMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvZ19OOGtCR2VkRENkNTRWX3VobTZDNTZWb2tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAH6o3AwQC
XkqYMAwDBANty6gDBAZty4ADBACwLoQDBACwLowDBACwLpEDBACwLpMDBACwLpcD
BAK5IqAwDQYJKoZIhvcNAQELBQADggEBAC3/agO4/yhm36K4G1ApZOIkB/jhJCql
JR15J5xGIPsJRKNCC/fQwX9c2zcpQSk3yJak0shUGDrc1TkcwQGQgy1xoPnVfCR1
yepqnLzG7JqU4LexTXaAEMTVR+MOfxGKo82r6AXnHMt80wJkAeR50UC0toYofRep
hghp+0wwDOM53pfC3b0iWXlprkvq+CF5b0IMbLp1MVQevRT2ijSJDRBLZXYXU+4G
+4DwTbT8UuFj1wlyXhOnwXbIFXdI5PvXcgg+UN5oJrfZx9uLL/B31Fg+iN0vBxG+
TB6QikgwJwGSzzXflOLGJkBbF4/nhcGjlN9D8ft045fvDejRakSFhwg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:12 2025 by rpki-client