Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0TvKcQWzdY7-w_0iTk2bFRJRJb8.roa
File: 0TvKcQWzdY7-w_0iTk2bFRJRJb8.roa (raw, json)
Hash identifier: opXslGg11jV+XhiUUIesFb6g1Rq9I8z0NJHEWDov6K0=
Subject key identifier: D1:3B:CA:71:05:B3:75:8E:FE:C3:FD:22:4E:4D:9B:15:12:51:25:BF
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 074D6305
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0TvKcQWzdY7-w_0iTk2bFRJRJb8.roa
Signing time: Mon 23 May 2022 20:28:19 +0000
ROA not before: Mon 23 May 2022 20:28:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122512133 (0x74d6305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: May 23 20:28:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d13bca7105b3758efec3fd224e4d9b15125125bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:56:f7:e8:64:dc:69:69:35:b3:ab:86:63:
7b:9a:13:8c:7c:9f:ec:1b:f4:62:21:84:3b:0d:78:
f9:cc:58:73:0e:54:dc:b6:8f:78:fc:23:d0:1c:a6:
73:fa:a7:d1:87:f9:9f:3d:42:bc:64:ab:1b:e0:d0:
90:11:ec:27:63:ed:e6:17:a2:b4:98:39:1a:62:69:
f0:71:af:e5:17:3b:16:7f:e3:b3:95:0f:fc:72:0c:
d0:3b:7c:a8:44:80:10:32:1b:c0:a1:0f:4c:78:0f:
13:5c:95:d1:34:86:f0:a2:97:23:ad:6d:c0:46:27:
10:29:6a:ef:fa:89:bd:1b:9b:03:b5:8e:57:74:ba:
12:4e:b8:3a:1f:8b:56:5b:c4:36:e0:a2:3f:a4:97:
fb:85:b6:06:0b:56:02:c6:07:91:19:1a:1a:81:17:
e0:fb:94:f6:3d:3b:93:34:ef:fb:cf:68:d5:e1:ec:
7a:34:dc:5a:16:f1:c5:6c:95:41:f5:bb:1b:3a:15:
8c:fe:c5:c1:73:26:7f:69:5b:cd:c8:1b:8c:09:c6:
21:39:e8:df:f7:65:db:b5:87:7d:c5:ed:67:3d:7f:
80:d4:ad:85:05:e2:28:f9:85:03:fc:bf:ff:07:e6:
0a:08:ee:2b:fb:31:28:26:71:73:09:c4:b4:55:df:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:CA:71:05:B3:75:8E:FE:C3:FD:22:4E:4D:9B:15:12:51:25:BF
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0TvKcQWzdY7-w_0iTk2bFRJRJb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.76.0/24
94.137.79.0/24
94.137.89.0/24
94.137.91.0/24
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
1d:72:99:52:55:cb:4a:25:86:f7:88:30:c7:0f:73:90:06:08:
85:d7:c7:8c:4a:b1:8a:72:16:63:2d:fb:d3:a6:36:97:1a:d1:
ee:ee:32:1f:3b:e4:b3:00:26:7b:33:76:67:8d:3b:f2:23:7e:
8b:81:af:24:25:1f:8d:74:bd:86:c0:bc:ed:56:a8:b4:48:17:
8b:51:e6:2a:65:91:ca:dc:89:96:8a:dc:f1:83:f8:27:78:d1:
c1:9d:1c:39:c1:90:e5:31:09:2c:6a:91:6a:7d:0d:36:ca:43:
b1:1e:fc:f9:cc:e1:e2:a5:df:aa:f9:51:da:f3:db:cc:2b:96:
06:b1:5a:a6:08:25:89:15:f1:b7:cd:f4:71:46:99:2c:4c:33:
08:e2:fe:4d:76:ca:19:04:9b:e5:40:1c:86:c1:0d:5f:86:d8:
79:9c:74:a2:15:b2:e3:b3:02:21:88:0b:7d:f1:17:49:06:98:
d7:5c:91:87:42:e1:d7:3c:c1:0e:28:b8:2c:bb:ac:b5:ca:a5:
83:6e:ea:9b:6e:32:e3:36:7a:b3:f1:06:b5:d1:23:61:ef:07:
ca:23:7b:42:ab:79:75:bd:4a:bd:fa:58:df:f1:e1:a8:39:20:
e2:24:33:08:22:c3:42:51:6b:0d:b1:26:0b:35:25:4d:c5:16:
59:1d:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:48 2025 by rpki-client