Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oz58TUabl3E5TTh8RvfFa7XowiA.roa
File: oz58TUabl3E5TTh8RvfFa7XowiA.roa (raw, json)
Hash identifier: G+gBxHLM+wSIs9NwkAQ9G847Nx6ec7XPnAbi+SzZqVo=
Subject key identifier: A3:3E:7C:4D:46:9B:97:71:39:4D:38:7C:46:F7:C5:6B:B5:E8:C2:20
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0184C41E792A9CD58B57F77B0BE4127F1B8F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oz58TUabl3E5TTh8RvfFa7XowiA.roa
Signing time: Tue 29 Nov 2022 16:00:42 +0000
ROA not before: Tue 29 Nov 2022 16:00:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.145.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:1e:79:2a:9c:d5:8b:57:f7:7b:0b:e4:12:7f:1b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 29 16:00:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a33e7c4d469b9771394d387c46f7c56bb5e8c220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:42:a7:44:88:a6:49:ee:da:e0:2c:c9:e8:
20:1c:41:ba:4a:7a:9e:d0:2d:da:8a:ef:e0:27:90:
3b:37:a3:e4:e2:87:e1:e4:53:f3:72:b5:f9:cb:e7:
48:12:d3:5d:63:24:48:bc:f4:f6:02:61:43:cc:5e:
c1:37:78:c1:36:a0:62:68:be:8b:8e:f5:ac:1a:a7:
7f:57:d3:a2:a7:65:c2:6e:f2:f7:6e:82:9b:89:7c:
58:a7:b5:a9:cc:73:c7:11:a1:16:ea:a4:f7:a3:30:
8e:0c:5e:f4:44:6f:63:4c:be:03:f4:b0:94:94:d6:
9b:c5:26:4b:25:55:c7:68:a4:b7:7b:4e:d0:af:17:
64:7d:63:76:51:e4:df:60:f0:d2:9e:19:ae:4a:92:
5a:9c:e4:be:f7:53:30:89:b7:ea:00:3c:86:14:d3:
4f:42:30:73:58:58:44:62:62:df:a8:84:87:30:b4:
76:89:cd:b8:b6:68:99:65:5c:52:5d:7a:08:47:7d:
a3:cb:a0:89:f1:0a:2f:52:64:87:1f:5c:93:25:78:
24:18:dc:e3:d0:ff:84:e3:b6:f6:c4:31:7c:9e:82:
02:2b:6d:2a:68:34:8a:1e:e6:55:57:b9:80:ba:f9:
e7:d4:f9:52:d8:dd:50:3c:47:1e:d6:53:e6:87:bb:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:7C:4D:46:9B:97:71:39:4D:38:7C:46:F7:C5:6B:B5:E8:C2:20
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oz58TUabl3E5TTh8RvfFa7XowiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.145.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
82:b9:6e:88:82:d9:15:d1:e0:42:95:75:99:40:70:b2:67:ec:
7b:e2:2b:c8:74:22:4b:34:c0:5e:3d:50:e4:0e:80:1c:cb:fa:
8b:bf:7f:67:7f:17:e7:44:6e:8b:63:9e:23:7a:0c:f4:ef:b2:
dd:67:1e:b8:4f:63:9e:e2:a7:3a:dc:d8:58:24:94:7b:f1:95:
13:76:d9:9b:3d:98:37:3c:4b:a0:94:bd:9a:bf:bc:60:5f:1e:
14:13:c9:e8:5d:8d:7c:37:df:3e:af:ba:6a:14:9f:4a:74:9e:
1d:a4:70:3c:be:26:1e:2d:26:ae:45:cc:f7:0c:83:d2:90:fc:
f5:15:56:69:7c:89:17:b5:a5:32:ab:ce:e4:ff:52:4b:ce:fd:
51:cc:49:54:38:9d:21:ad:c5:7d:7b:99:78:a7:bc:32:87:e7:
e6:ab:8d:7b:42:81:cc:62:bc:f1:f8:7d:b6:80:aa:a3:d4:dc:
ae:e4:e9:bc:c6:ec:8a:a6:3f:33:4d:bd:12:a7:43:0a:bd:c3:
db:44:c5:54:d1:c5:6a:fa:06:d1:88:1a:ff:3e:49:40:f9:5a:
fb:04:85:98:35:ea:31:2d:a5:18:b0:7f:bf:85:a6:f7:77:a7:
f9:d4:0e:c5:15:bb:bf:84:ed:9f:95:1f:07:68:00:ba:32:bd:
95:01:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:33 2025 by rpki-client