Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sE9wmc5IVl5uK5Ej3CozOMXF2QM.roa
File: sE9wmc5IVl5uK5Ej3CozOMXF2QM.roa (raw, json)
Hash identifier: DnfO0f3/nlIvNKAYiH/fd1LyPnyFXbx6Lv9HBALLA0Q=
Subject key identifier: B0:4F:70:99:CE:48:56:5E:6E:2B:91:23:DC:2A:33:38:C5:C5:D9:03
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D92656719A21031F5495D958C35F4E3D9
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sE9wmc5IVl5uK5Ej3CozOMXF2QM.roa
Signing time: Sat 10 Feb 2024 09:42:15 +0000
ROA not before: Sat 10 Feb 2024 09:42:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:65:67:19:a2:10:31:f5:49:5d:95:8c:35:f4:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 10 09:42:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b04f7099ce48565e6e2b9123dc2a3338c5c5d903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:82:21:aa:9b:02:b5:79:40:07:e3:e4:45:
6a:65:25:7d:5d:c7:97:74:1e:85:2e:94:7d:d5:3f:
5e:b2:41:f6:c6:b7:95:3d:65:4b:ce:88:b7:ac:6f:
ff:14:f4:83:8f:5c:e9:49:62:21:3f:85:5d:d8:e6:
29:a9:63:8b:b8:e7:fd:62:b6:18:66:08:f6:1e:2d:
a5:e0:e1:f3:24:52:f8:b0:c6:a3:db:73:44:cc:61:
39:b7:0c:39:56:89:c1:3a:b1:40:19:91:5d:c7:37:
8c:fc:73:2a:8f:df:54:0d:ab:8d:43:17:36:84:b8:
c4:df:35:d6:a8:3f:2a:ec:54:23:96:19:d6:68:0e:
6e:02:21:de:f3:bf:63:48:f7:da:36:86:85:1e:f0:
ff:28:fd:5a:a6:6d:15:1f:cb:9b:87:42:b5:2a:c8:
12:84:33:b4:33:b1:6f:26:94:a3:ff:50:75:8a:2a:
00:15:85:18:01:4e:72:34:20:28:1e:ff:10:d1:99:
9a:28:d8:e4:c4:70:0b:8c:b3:e4:83:20:0a:4a:95:
43:a9:fa:54:e6:32:8b:3b:23:37:c0:6c:3c:94:c3:
a7:d8:f7:f8:2e:2b:4c:8f:87:dc:03:aa:d9:ad:8e:
6f:2c:ee:f8:d6:72:ce:c6:60:3b:36:08:39:e6:1b:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:70:99:CE:48:56:5E:6E:2B:91:23:DC:2A:33:38:C5:C5:D9:03
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/sE9wmc5IVl5uK5Ej3CozOMXF2QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.140.0/24
176.46.145.0/24
176.46.147.0/24
176.46.151.0/24
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:ed:3e:6e:be:a2:0f:1e:4c:4b:7d:e3:61:56:b7:81:02:45:
ec:46:a5:c2:d1:1e:81:12:06:7a:86:44:09:ed:aa:cd:5a:8b:
6a:b1:48:8e:6d:58:73:46:83:5b:d4:b7:8d:07:d5:5a:4a:bc:
cd:2d:85:4e:e7:7d:33:ac:be:d1:db:fe:df:da:aa:df:9d:98:
51:b1:b0:4b:06:3b:5c:ba:a0:ed:5d:6d:63:d2:0a:13:51:e2:
79:5a:a0:56:8e:53:7b:24:8b:15:59:b0:e9:23:c0:dd:fc:36:
a8:d3:b6:b4:bc:6e:7d:b1:37:de:22:a9:f9:01:f3:60:d1:ab:
3c:dc:5f:16:2c:b6:81:8b:86:90:53:de:e1:6b:35:aa:72:6b:
58:05:d2:93:93:7a:c8:ab:11:af:d7:75:24:68:62:e5:bf:88:
9f:9c:dc:d7:5b:fe:d5:2e:42:e4:91:98:91:b8:d0:e3:01:57:
3d:28:38:61:fc:eb:90:fd:0e:0c:07:6c:ef:0b:0a:c7:1c:c5:
6c:2f:fe:d8:5a:aa:51:50:d1:f3:f4:a9:8f:07:97:e6:fb:7b:
d1:64:b6:b3:40:05:9e:2c:69:32:c2:28:bd:27:d6:ab:fc:1d:
94:71:a2:77:8b:4d:4b:9a:56:dd:68:ea:64:cc:75:0d:0c:a6:
20:8a:89:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:22 2025 by rpki-client