Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mVOgU-rgAe_9a7c1uKFtv5DCe3o.roa
File: mVOgU-rgAe_9a7c1uKFtv5DCe3o.roa (raw, json)
Hash identifier: bOMZOrrSfdTAPC9uU7MT6Ga7QAQwBzf9NQuykNgh0HE=
Subject key identifier: 99:53:A0:53:EA:E0:01:EF:FD:6B:B7:35:B8:A1:6D:BF:90:C2:7B:7A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A96DF77719BEF929B8F49DA18A92C7E2C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mVOgU-rgAe_9a7c1uKFtv5DCe3o.roa
Signing time: Fri 15 Sep 2023 03:25:42 +0000
ROA not before: Fri 15 Sep 2023 03:25:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.176.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:96:df:77:71:9b:ef:92:9b:8f:49:da:18:a9:2c:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 15 03:25:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9953a053eae001effd6bb735b8a16dbf90c27b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:93:21:df:f6:d2:05:e4:5f:d8:c2:b9:70:f9:
a8:11:42:e5:0f:88:fe:39:84:40:e2:7a:a1:48:01:
0c:a3:de:91:d5:ab:15:c5:54:c3:35:df:df:91:54:
db:70:64:1b:90:93:65:9e:82:36:8d:57:9a:1e:11:
5c:35:6a:e1:bf:0b:01:3e:6b:30:9a:52:66:25:e6:
fe:80:ad:57:75:c3:49:56:37:f9:db:21:fb:1b:db:
79:0a:b1:6f:0a:8a:eb:8b:3f:47:a0:f4:d4:bb:6b:
89:3b:98:25:d0:57:e8:7c:81:ce:74:19:84:bb:bd:
42:c8:28:cb:4d:0e:3e:dc:df:89:f3:fb:e8:e1:45:
85:33:78:3f:7e:78:a4:81:5a:2f:26:2c:3a:e4:af:
8e:31:51:dd:87:79:b5:55:11:41:ef:f6:1c:6e:73:
fe:b2:94:04:54:50:98:6d:1d:bf:ef:ce:cc:66:f9:
22:a1:aa:cd:19:20:be:88:97:f4:ef:bf:7e:83:77:
fd:f2:f8:60:14:0b:0c:11:77:c6:6f:3f:fa:df:ce:
3d:00:b0:7c:63:68:09:ee:0f:35:04:91:1d:83:03:
e3:da:6a:90:92:f9:e4:22:a3:0c:18:04:cb:13:c5:
6e:4d:6a:57:ed:a4:11:c8:33:da:11:63:97:de:45:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:A0:53:EA:E0:01:EF:FD:6B:B7:35:B8:A1:6D:BF:90:C2:7B:7A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/mVOgU-rgAe_9a7c1uKFtv5DCe3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.176.0/20
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
04:88:55:79:4d:ea:0e:04:fa:84:d3:0b:3c:c1:b6:70:fd:4f:
c5:b6:26:1b:64:55:e3:f9:68:dd:1f:91:f1:11:d9:e4:06:94:
16:9e:c8:c9:a4:49:75:6b:f8:3b:32:50:87:79:99:f3:1a:5f:
25:67:4a:83:7d:36:15:73:08:17:d4:d7:7a:b5:d7:cb:39:c5:
e1:e5:68:a7:49:22:27:10:c1:3f:d0:4b:15:f4:92:9e:97:70:
ec:be:54:39:3f:8d:9e:d8:7b:eb:45:a8:86:90:e2:d5:47:6d:
d2:bd:f1:dd:be:d1:28:ad:5f:b9:c0:9e:90:47:14:25:66:90:
c6:3f:2e:05:cd:10:19:59:da:0f:7f:ae:f3:aa:35:8d:f5:40:
82:f8:42:8a:b1:e2:e8:b6:f8:f4:ab:06:6d:7c:4f:4b:2d:12:
62:b7:53:83:1f:f2:86:33:76:cb:bc:88:ac:29:a2:13:46:fc:
bf:20:46:3d:45:64:e9:93:c0:15:08:82:e8:f6:69:f4:73:29:
bc:aa:45:9c:a7:e2:8f:a4:f3:2a:5e:31:54:ab:eb:05:94:13:
f7:2e:2d:37:aa:af:2a:46:02:28:93:2f:fa:08:fd:4b:ba:f7:
d6:f2:ff:90:b9:73:cf:d5:b4:6c:d8:af:13:75:c6:45:95:b0:
0f:9e:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:56 2025 by rpki-client