Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/l0ZVDFJ4wLp_PeiQ40fqE2j6Skg.roa
File: l0ZVDFJ4wLp_PeiQ40fqE2j6Skg.roa (raw, json)
Hash identifier: RwvCBRe/6Cy/c8e0/pSLx1ToNIAO4EaoErPzR6Hno9Q=
Subject key identifier: 97:46:55:0C:52:78:C0:BA:7F:3D:E8:90:E3:47:EA:13:68:FA:4A:48
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D4951E3298FCB886D14F69B885101BD68
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/l0ZVDFJ4wLp_PeiQ40fqE2j6Skg.roa
Signing time: Sat 27 Jan 2024 05:08:39 +0000
ROA not before: Sat 27 Jan 2024 05:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:51:e3:29:8f:cb:88:6d:14:f6:9b:88:51:01:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 27 05:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9746550c5278c0ba7f3de890e347ea1368fa4a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:43:07:64:5e:c3:5a:3e:f7:4e:47:f8:68:
b2:4c:43:29:f8:c3:ee:07:53:a6:77:ea:74:eb:f7:
f4:f4:ef:fd:4e:85:94:47:4d:cf:d2:4d:82:6a:18:
e2:89:0c:3b:be:9e:ad:3b:33:e8:e5:b4:fd:0c:fc:
65:52:e1:60:4f:61:35:87:55:d6:77:12:44:f7:ee:
b8:b0:8e:30:59:51:5b:62:5b:b4:bd:dd:79:7b:aa:
b8:08:42:bc:41:93:4f:eb:fe:ee:04:2c:45:d4:29:
8b:56:2a:56:c8:92:bd:22:e6:47:9b:05:05:4a:3b:
4f:43:4b:05:29:cc:ef:7d:54:ca:62:47:23:fd:d4:
39:57:96:58:60:62:09:ac:80:92:7c:11:40:a9:38:
fd:8f:95:bf:68:5d:9b:bb:e2:9c:00:43:26:be:f6:
cc:d6:02:3f:b6:db:41:2a:b2:d7:4d:2a:fd:ce:06:
62:ad:b8:f9:a4:ba:4d:69:a1:90:0f:1f:1a:39:e0:
84:be:af:e6:7f:5e:08:9d:d3:c7:cd:bb:83:7d:8b:
7c:18:db:29:7b:93:2a:9c:bc:a3:e4:8d:84:7f:65:
a8:98:32:a9:59:25:6c:0c:76:62:e5:a3:27:85:7f:
d5:62:17:bf:2e:d0:74:eb:a3:92:fa:ed:84:29:fc:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:55:0C:52:78:C0:BA:7F:3D:E8:90:E3:47:EA:13:68:FA:4A:48
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/l0ZVDFJ4wLp_PeiQ40fqE2j6Skg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.140.0-176.46.142.255
176.46.145.0/24
176.46.147.0-176.46.148.255
176.46.150.0/23
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
74:ff:d7:2f:d6:19:2c:06:1f:c1:4c:a8:d8:4d:23:32:5f:5c:
2a:34:19:00:4a:23:2c:4f:23:90:e2:69:72:bb:83:82:97:59:
0b:b7:96:4c:cf:b7:25:a4:e3:80:82:ad:03:15:80:76:a0:63:
ac:29:57:23:4f:2b:94:ef:fc:aa:89:1b:39:3c:58:98:77:f6:
98:95:28:f4:d9:af:f7:19:ab:c7:3f:8b:b4:3c:c8:76:6c:17:
09:29:97:f4:e7:f2:43:78:1e:2e:fa:af:02:a0:69:38:8e:59:
7c:61:ba:e3:50:c4:17:99:02:43:12:72:9c:50:ab:e9:d0:b2:
e9:25:31:eb:24:e6:40:4d:94:9c:4e:f7:cb:4f:14:25:a0:98:
1f:10:fe:a8:0d:19:a9:ee:7f:48:f9:65:bc:77:f4:07:5f:b2:
1d:8d:10:3f:a9:cd:b0:ac:87:5a:b9:8e:2b:39:b6:30:39:4d:
08:41:5d:f5:ee:77:66:ed:43:08:50:f1:39:ee:bb:ef:bf:0c:
91:2e:ef:49:0d:75:64:f3:5c:7b:32:cd:45:00:f0:58:a9:0b:
de:74:ff:bf:57:cb:63:4c:31:16:2f:6a:11:a4:0b:9c:48:d1:
4e:03:f3:3a:f2:85:c2:94:8d:9a:86:7e:97:15:d1:da:de:24:
17:47:af:a9
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAY1JUeMpj8uIbRT2m4hRAb1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMTI3MDUwODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQ2NTUwYzUyNzhjMGJhN2YzZGU4OTBlMzQ3ZWExMzY4ZmE0YTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs25DB2Rew1o+905H+GiyTEMp+MPu
B1Omd+p06/f09O/9ToWUR03P0k2CahjiiQw7vp6tOzPo5bT9DPxlUuFgT2E1h1XW
dxJE9+64sI4wWVFbYlu0vd15e6q4CEK8QZNP6/7uBCxF1CmLVipWyJK9IuZHmwUF
SjtPQ0sFKczvfVTKYkcj/dQ5V5ZYYGIJrICSfBFAqTj9j5W/aF2bu+KcAEMmvvbM
1gI/tttBKrLXTSr9zgZirbj5pLpNaaGQDx8aOeCEvq/mf14IndPHzbuDfYt8GNsp
e5MqnLyj5I2Ef2WomDKpWSVsDHZi5aMnhX/VYhe/LtB066OS+u2EKfwF5QIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFJdGVQxSeMC6fz3okONH6hNo+kpIMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvbDBaVkRGSjR3THBfUGVpUTQwZnFFMmo2U2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAH6o3AwQC
XkqYAwQAbcugMAwDBANty6gDBAZty4ADBACwLoQwDAMEArAujAMEALAujgMEALAu
kTAMAwQAsC6TAwQAsC6UAwQBsC6WMAwDBACwLpkDBACwLp4DBAK5IqAwDQYJKoZI
hvcNAQELBQADggEBAHT/1y/WGSwGH8FMqNhNIzJfXCo0GQBKIyxPI5DiaXK7g4KX
WQu3lkzPtyWk44CCrQMVgHagY6wpVyNPK5Tv/KqJGzk8WJh39piVKPTZr/cZq8c/
i7Q8yHZsFwkpl/Tn8kN4Hi76rwKgaTiOWXxhuuNQxBeZAkMScpxQq+nQsuklMesk
5kBNlJxO98tPFCWgmB8Q/qgNGanuf0j5Zbx39Adfsh2NED+pzbCsh1q5jis5tjA5
TQhBXfXud2btQwhQ8Tnuu++/DJEu70kNdWTzXHsyzUUA8FipC950/79Xy2NMMRYv
ahGkC5xI0U4D8zryhcKUjZqGfpcV0dreJBdHr6k=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:00 2025 by rpki-client