Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/n8jxEbYjxAjMF4QLRyPjBmFQSi0.roa
File: n8jxEbYjxAjMF4QLRyPjBmFQSi0.roa (raw, json)
Hash identifier: 8RyIU1woxTPCAh5FRJIbs/vqcyle1pZU4dJBwu1jqsA=
Subject key identifier: 9F:C8:F1:11:B6:23:C4:08:CC:17:84:0B:47:23:E3:06:61:50:4A:2D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183C6690B48E2707D072043C7F2E9F87E7E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/n8jxEbYjxAjMF4QLRyPjBmFQSi0.roa
Signing time: Tue 11 Oct 2022 09:38:36 +0000
ROA not before: Tue 11 Oct 2022 09:38:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:69:0b:48:e2:70:7d:07:20:43:c7:f2:e9:f8:7e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 11 09:38:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fc8f111b623c408cc17840b4723e30661504a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:3b:4e:2d:f6:26:c7:e4:a5:75:1a:7a:69:
45:a9:a2:61:f0:93:dc:85:c6:79:da:25:4d:a7:5a:
76:b6:be:83:66:1f:4f:dc:74:39:1b:08:4e:1d:9d:
89:f5:a8:97:20:d2:ba:b5:4c:06:39:d7:c6:ea:11:
90:13:53:02:3f:9f:f9:c8:fe:ec:0c:fd:ac:b5:49:
0b:04:9e:c2:97:40:dc:15:3f:a9:4e:50:87:83:04:
de:1f:e1:28:f3:6d:10:00:bb:87:71:b8:1e:ee:11:
a6:e2:9e:ca:0b:4a:32:aa:36:a5:b5:bf:27:dd:d3:
78:45:d0:c6:fd:cf:ab:a3:73:74:34:37:fc:84:de:
79:cd:9e:8e:c3:3d:6d:fe:02:91:07:85:9c:03:f6:
d0:15:e7:af:22:4c:89:cc:33:1c:5a:9c:7a:52:6c:
f6:74:90:06:bf:44:0c:8f:fa:9e:8a:7c:11:1f:c8:
e9:23:15:a1:6e:f9:7a:c4:e9:2b:47:30:b0:a0:61:
f5:73:99:34:a6:dc:76:12:44:5e:29:06:17:05:b2:
16:8e:06:e7:49:13:ed:38:d8:e6:f7:ef:e6:34:b9:
db:17:64:29:65:26:f4:c5:78:6e:94:40:6f:38:b9:
2d:f2:f4:18:a4:dc:d0:c6:b3:c6:ee:ce:28:24:78:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:F1:11:B6:23:C4:08:CC:17:84:0B:47:23:E3:06:61:50:4A:2D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/n8jxEbYjxAjMF4QLRyPjBmFQSi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:1d:8a:79:a7:a8:c1:51:a1:f6:53:6e:92:82:d8:1d:11:f0:
48:98:1c:2d:2f:e2:b2:f6:ee:c2:71:90:ea:3d:02:0c:fc:63:
2c:d5:6f:5e:c9:e1:93:1d:58:4a:e4:2d:96:12:9b:38:24:61:
9e:a4:ef:d3:dd:80:8c:5a:8c:98:b5:66:a8:e8:d9:7d:fa:e2:
76:15:64:e2:43:5c:76:7a:49:aa:cb:8f:72:9d:e6:9d:b2:cd:
1e:3c:94:31:e2:e3:24:4a:c2:a0:5a:c1:63:1f:7b:13:d0:bb:
52:64:32:55:65:c6:15:48:62:8e:28:16:fd:db:a6:8e:05:29:
ee:61:a9:a3:ef:25:ca:dd:e1:19:18:30:7f:31:af:e8:75:9d:
d4:23:5b:15:1e:bb:bc:f3:8a:2d:76:92:5f:f7:d9:62:5f:e1:
b1:1c:16:67:0a:b5:fa:cc:d5:eb:f0:6a:fc:46:1a:12:34:73:
00:11:43:18:9c:58:5a:56:10:6b:76:26:bf:01:39:61:f6:fd:
d7:4b:4f:7d:5d:48:c6:09:14:98:87:55:72:ba:ed:40:c9:92:
1e:b3:dc:0d:2d:ab:8b:62:4b:2a:fe:4d:b0:b4:76:e8:d7:5d:
fc:10:b1:5a:90:71:4d:d9:5a:55:e8:86:db:2d:07:8f:ba:31:
dc:3a:22:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:28 2025 by rpki-client