Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jkFUcXX8hfAutvOPNw73NbKJkdk.roa
File: jkFUcXX8hfAutvOPNw73NbKJkdk.roa (raw, json)
Hash identifier: NGY5nTZ0Ff2cSPjF17EkupA9+NqYrbiTpf5WSPk+Z/c=
Subject key identifier: 8E:41:54:71:75:FC:85:F0:2E:B6:F3:8F:37:0E:F7:35:B2:89:91:D9
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 06BCD448
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jkFUcXX8hfAutvOPNw73NbKJkdk.roa
Signing time: Tue 04 Jan 2022 13:38:08 +0000
ROA not before: Tue 04 Jan 2022 13:38:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.157.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113038408 (0x6bcd448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 4 13:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e41547175fc85f02eb6f38f370ef735b28991d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:fb:93:18:52:0e:0c:d7:30:0f:a6:7b:1d:
e8:ea:7b:8d:7e:3f:de:bf:67:4c:a1:75:1e:42:9d:
40:49:e3:92:32:c6:68:22:d1:56:c6:bb:41:04:41:
93:c7:d8:aa:a0:cb:62:e2:22:25:92:ba:0c:14:40:
a4:0c:1a:9e:b7:e5:b3:55:19:53:5b:02:38:05:39:
e0:f6:02:46:96:70:92:1e:01:d7:ed:1c:c6:03:99:
bd:38:f0:22:7f:86:34:c0:f4:04:61:53:7c:fd:87:
83:64:7d:d5:30:29:d7:f2:e8:a9:4f:72:7c:fd:26:
aa:bb:ed:77:7b:fc:db:dc:35:c8:fb:3c:93:30:e5:
81:9e:21:d4:a8:df:a8:40:a5:70:f9:36:75:c8:6f:
12:0e:04:aa:a0:7b:bf:92:f3:ca:27:f5:04:9e:e8:
8c:0a:07:1b:00:50:32:cb:76:ed:90:92:69:7b:38:
9a:95:10:b8:df:7b:75:ad:8b:a8:73:39:8e:5f:5c:
10:8c:5a:d4:31:38:54:2b:3b:85:c3:a0:ed:77:9f:
e0:fd:42:dd:11:0e:0a:c3:c4:39:36:bc:cc:96:d7:
f8:db:04:c0:a7:ce:cb:ba:56:12:6b:b1:48:24:59:
dc:45:3e:8d:4e:0c:24:85:df:78:cb:fc:02:c5:00:
a6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:41:54:71:75:FC:85:F0:2E:B6:F3:8F:37:0E:F7:35:B2:89:91:D9
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jkFUcXX8hfAutvOPNw73NbKJkdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/22
94.74.168.0/24
94.74.171.0/24
94.74.173.0/24
94.74.182.0/24
94.74.187.0/24
94.74.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f1:b8:e7:55:7c:cc:86:37:af:7f:a4:ff:b7:74:23:dd:04:
c9:ad:55:6b:ee:b9:96:e9:1f:a8:8d:2d:aa:85:45:d6:81:4e:
2e:a0:60:32:9d:81:a6:9f:51:7a:2f:b0:45:e4:dc:b5:fe:56:
5c:af:14:82:3e:8e:8f:77:22:6a:21:fa:27:a8:0a:ef:76:a5:
21:65:af:cf:c6:e7:75:d1:47:f9:1a:3a:8e:be:3f:66:b7:ff:
85:f2:b6:d0:55:d1:e0:6c:ef:a3:0f:2b:83:bc:74:d3:95:0b:
e5:58:10:a4:66:c0:22:d7:51:e8:a5:fe:43:20:bd:36:19:ee:
3a:8d:d1:01:77:76:57:97:67:7b:88:3a:f2:87:eb:a2:df:f0:
d1:2a:2e:f8:2f:67:3f:c3:6c:fc:0c:d3:ea:fe:03:fe:64:fd:
df:5c:af:dd:40:37:29:da:24:3f:7d:71:24:aa:a6:2a:4b:4e:
30:b7:c0:cc:11:76:b6:26:87:05:4f:4c:3c:90:20:7f:2a:07:
94:54:06:e8:fe:61:06:8a:1e:cb:cf:87:9d:ec:2b:94:0b:30:
08:cc:d1:ee:fa:75:8c:89:0a:53:f0:8d:9f:17:1b:73:d0:cc:
a7:41:02:c6:ae:c8:77:06:4a:37:82:38:4d:c7:50:61:8f:fa:
57:14:3d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:55:55 2025 by rpki-client