Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uBu6xL5TIfA6c5IBpNMyFQ-Mwu0.roa
File: uBu6xL5TIfA6c5IBpNMyFQ-Mwu0.roa (raw, json)
Hash identifier: nKA2ohddOd0gmU3rmt/wJX6rprFuqr8m8YmJEDCu9xs=
Subject key identifier: B8:1B:BA:C4:BE:53:21:F0:3A:73:92:01:A4:D3:32:15:0F:8C:C2:ED
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D22B56C840F4EAE683849499B9AFD4A09
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uBu6xL5TIfA6c5IBpNMyFQ-Mwu0.roa
Signing time: Fri 19 Jan 2024 17:12:11 +0000
ROA not before: Fri 19 Jan 2024 17:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:b5:6c:84:0f:4e:ae:68:38:49:49:9b:9a:fd:4a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 19 17:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b81bbac4be5321f03a739201a4d332150f8cc2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:f1:e3:4f:d8:e4:e8:71:0c:f3:e6:ad:b9:
83:c0:da:bf:2c:60:82:5e:ce:fe:5d:28:2d:a7:dc:
f0:6d:8e:ab:ba:4c:5c:c1:fd:ff:54:2b:4d:a8:36:
83:bc:b0:b5:09:21:44:df:17:29:01:c8:ac:8b:48:
69:f5:91:98:e2:2c:34:b4:c8:e2:77:d4:4a:16:f2:
97:fb:cc:aa:ed:a7:14:ca:d1:30:c1:9a:60:21:0d:
a5:e1:86:27:8e:96:55:0a:2c:d1:f4:29:44:28:e2:
6b:67:9e:f1:30:b7:16:b1:40:77:1c:c0:c3:8e:c7:
97:fa:ad:39:cf:7e:8f:15:5e:12:86:24:02:fc:ea:
ed:3e:fd:dc:55:ea:58:e8:ca:3b:76:58:81:82:72:
56:79:d6:9f:aa:dc:be:ca:d6:83:53:cb:d1:f7:cd:
ad:0b:3b:56:4f:8d:1e:18:46:7a:1b:de:0d:37:c2:
7e:fe:a7:6d:d0:61:6d:dc:03:28:3e:85:b8:c7:8f:
28:d5:95:18:64:31:1c:bd:04:b6:ec:7e:7d:7e:30:
9b:b3:45:ec:f3:63:0e:d8:72:f9:91:f6:91:52:4e:
5e:08:85:15:b5:c4:d4:a8:e0:2a:6f:f7:e4:6b:44:
8a:60:7b:1a:d9:ba:af:c4:7d:8a:c0:c3:54:b0:d3:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1B:BA:C4:BE:53:21:F0:3A:73:92:01:A4:D3:32:15:0F:8C:C2:ED
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uBu6xL5TIfA6c5IBpNMyFQ-Mwu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.152.0/22
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.132.0/24
176.46.136.0/24
176.46.138.0-176.46.142.255
176.46.145.0/24
176.46.147.0-176.46.148.255
176.46.150.0/23
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
78:4a:ad:b7:2a:bc:d5:ba:83:6c:8b:fc:5d:d4:f0:24:81:e0:
b9:e4:b4:18:6f:0d:0a:a6:f2:c5:50:76:24:53:a3:af:33:b2:
68:c9:81:a9:6d:a9:9b:46:97:36:93:6e:84:d7:90:92:37:c6:
ae:5c:52:59:1e:a4:82:d2:ea:2a:37:05:c1:3e:28:84:07:a5:
cd:17:91:85:fc:30:80:43:e1:88:48:18:84:8d:62:2b:b5:87:
ca:6e:b7:55:77:68:6c:96:26:6c:fb:ff:b4:e4:40:a3:e9:b1:
27:40:7d:15:96:d9:47:dd:fa:05:d7:d3:18:10:00:cb:77:9a:
a0:6f:22:8c:75:e9:8e:60:4f:b8:b1:4f:6e:d4:09:fc:9b:88:
a3:51:1c:53:bc:57:b6:ab:73:29:c9:41:d2:aa:10:67:af:5a:
71:81:28:f4:67:f0:53:c5:38:06:21:28:08:db:75:4b:b1:87:
6b:43:8f:eb:29:36:40:7f:b7:31:fa:3c:38:85:71:52:98:6a:
e2:03:b7:3a:c5:00:7b:20:e1:d1:2f:18:0e:bf:c4:e2:5a:95:
30:a2:12:34:97:1b:9c:cd:78:c1:6b:86:5a:15:22:e9:08:79:
dd:46:51:b7:0a:b8:0c:fc:12:6b:02:e6:39:8c:05:5c:30:2f:
31:cc:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:30 2025 by rpki-client