Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zvCs_zpfCSLpyiZAkssk_IBA-8s.roa
File: zvCs_zpfCSLpyiZAkssk_IBA-8s.roa (raw, json)
Hash identifier: p8MZfAPNGCLS/UKVubV9DKs8iKjvfcXGKQcHw7zdvRQ=
Subject key identifier: CE:F0:AC:FF:3A:5F:09:22:E9:CA:26:40:92:CB:24:FC:80:40:FB:CB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183EA01862DCA2B61858355F45C2F6B914F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zvCs_zpfCSLpyiZAkssk_IBA-8s.roa
Signing time: Tue 18 Oct 2022 07:31:51 +0000
ROA not before: Tue 18 Oct 2022 07:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.168.0/23 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:01:86:2d:ca:2b:61:85:83:55:f4:5c:2f:6b:91:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 18 07:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef0acff3a5f0922e9ca264092cb24fc8040fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:ec:39:04:04:5c:c7:1e:29:bb:b5:76:ba:
f3:b3:00:07:c6:f8:76:ec:0e:82:71:cc:95:b3:5c:
a9:a3:dc:96:bf:f5:c7:c6:df:86:f5:1b:4c:07:e4:
6e:e5:f8:69:4e:95:67:58:cc:82:0a:18:fc:44:86:
57:54:6a:d2:22:e5:3f:2d:6b:1d:1f:1c:b5:bc:0c:
ba:47:4d:0a:cf:22:e6:b4:97:15:00:f6:87:c7:2e:
59:93:6b:4b:6a:da:1e:a2:c0:24:e9:5d:07:d9:a4:
f9:36:ce:9e:26:88:6a:91:4d:11:34:4c:94:32:3a:
27:3f:17:81:45:39:61:7f:b2:dd:76:80:5f:a9:66:
30:df:32:bf:9b:11:c0:18:d8:cc:d6:bc:af:27:12:
b9:35:a2:70:bf:ca:4c:d1:60:08:54:05:67:8f:63:
e8:4c:02:b7:da:fe:7e:22:52:ba:fc:ae:30:51:a7:
21:54:43:e4:8d:13:49:5c:74:b5:70:24:8f:6b:e5:
2e:3c:58:6e:14:05:91:fa:00:24:16:ef:57:be:4b:
ca:39:5e:af:98:79:c6:f4:f6:72:75:8b:11:4d:4a:
69:95:27:fd:0b:d0:4d:b7:6d:11:e6:c8:6c:a9:05:
87:15:26:6f:e1:1f:b3:46:6c:47:ec:ae:36:6e:46:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:AC:FF:3A:5F:09:22:E9:CA:26:40:92:CB:24:FC:80:40:FB:CB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zvCs_zpfCSLpyiZAkssk_IBA-8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:e8:6e:38:eb:ca:61:19:62:04:47:77:a4:02:b8:91:ea:e6:
2c:1b:3e:94:d2:1d:0c:c9:6a:74:ea:b1:a3:31:61:bd:6f:bc:
f0:24:66:16:32:46:e9:16:27:1f:29:71:f7:28:05:90:7d:69:
2f:04:06:7c:14:19:ca:bb:8d:43:e9:6c:4e:e2:64:cf:2f:69:
73:bb:95:3d:bb:fe:68:3f:cf:1a:7e:1a:4d:48:ac:88:a3:42:
60:54:8f:67:9c:f3:39:48:65:ae:37:bd:7f:9c:be:77:03:dc:
41:9a:47:1e:99:bf:88:d5:76:f5:b5:fe:36:ef:92:c2:ca:ba:
53:10:df:27:ae:96:4c:f6:7d:8d:bb:49:ba:e7:f5:9d:64:c3:
ad:37:3e:a4:18:7b:6e:37:5e:e6:be:60:d3:b9:77:46:9a:fc:
74:85:da:7a:4e:d9:54:22:4c:f8:89:eb:2f:05:d4:4b:dc:4a:
0f:c5:15:68:82:58:37:6b:4d:c3:0b:d5:fd:7e:2a:72:64:fd:
bb:52:5a:52:9e:fe:e0:d1:6a:14:63:d3:21:6d:24:5a:f4:d4:
2e:f1:9a:bf:b3:21:e5:3f:a3:1a:7d:90:04:cf:62:8d:1d:90:
ec:cc:46:94:3f:44:3c:b5:26:45:e2:5d:85:22:9c:f9:9a:cd:
2d:01:58:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:35 2025 by rpki-client