Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/H6kZuglcqhx7Xi7vFjnGJeA_Bok.roa
File: H6kZuglcqhx7Xi7vFjnGJeA_Bok.roa (raw, json)
Hash identifier: nRHySlZd8lrDv1Yc5Ke8+AuAayHigdrpRh870LVjsj0=
Subject key identifier: 1F:A9:19:BA:09:5C:AA:1C:7B:5E:2E:EF:16:39:C6:25:E0:3F:06:89
Certificate issuer: /CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Certificate serial: 018572A7E4576E1B228580C32EE295884512
Authority key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/H6kZuglcqhx7Xi7vFjnGJeA_Bok.roa
Signing time: Mon 02 Jan 2023 13:24:43 +0000
ROA not before: Mon 02 Jan 2023 13:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50564
IP address blocks: 185.208.21.0/24 maxlen: 24
185.208.22.0/24 maxlen: 24
185.208.23.0/24 maxlen: 24
185.208.20.0/22 maxlen: 22
185.208.20.0/24 maxlen: 24
45.131.28.0/24 maxlen: 24
45.131.28.0/22 maxlen: 22
45.131.29.0/24 maxlen: 24
45.131.30.0/24 maxlen: 24
45.131.31.0/24 maxlen: 24
185.143.138.0/24 maxlen: 24
185.143.139.0/24 maxlen: 24
185.143.136.0/22 maxlen: 22
185.143.136.0/24 maxlen: 24
185.143.137.0/24 maxlen: 24
185.184.0.0/22 maxlen: 22
185.184.0.0/24 maxlen: 24
185.184.1.0/24 maxlen: 24
185.184.2.0/24 maxlen: 24
185.184.3.0/24 maxlen: 24
185.95.124.0/22 maxlen: 22
185.95.124.0/24 maxlen: 24
185.95.125.0/24 maxlen: 24
185.95.126.0/24 maxlen: 24
185.95.127.0/24 maxlen: 24
185.213.48.0/22 maxlen: 22
185.213.49.0/24 maxlen: 24
185.213.50.0/24 maxlen: 24
185.213.51.0/24 maxlen: 24
185.213.48.0/24 maxlen: 24
185.44.24.0/24 maxlen: 24
185.44.24.0/22 maxlen: 22
185.44.25.0/24 maxlen: 24
185.44.26.0/24 maxlen: 24
185.44.27.0/24 maxlen: 24
94.158.252.0/22 maxlen: 22
94.158.252.0/24 maxlen: 24
94.158.253.0/24 maxlen: 24
94.158.255.0/24 maxlen: 24
94.158.254.0/24 maxlen: 24
185.104.236.0/24 maxlen: 24
185.104.236.0/22 maxlen: 22
185.104.237.0/24 maxlen: 24
185.104.238.0/24 maxlen: 24
185.104.239.0/24 maxlen: 24
185.182.124.0/24 maxlen: 24
185.182.124.0/22 maxlen: 22
185.182.125.0/24 maxlen: 24
185.182.126.0/24 maxlen: 24
185.182.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:e4:57:6e:1b:22:85:80:c3:2e:e2:95:88:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Validity
Not Before: Jan 2 13:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa919ba095caa1c7b5e2eef1639c625e03f0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:a7:ee:f9:74:38:00:fb:7d:96:69:6c:ad:
9b:f6:53:32:16:14:b6:d0:e3:d2:dc:ca:bc:9c:ab:
e3:d6:d7:c7:ff:c6:20:4d:27:60:3f:ec:6d:95:b0:
a5:cd:f0:9f:c6:7e:c4:d2:22:88:47:78:d6:c6:cf:
02:17:c9:41:0d:fd:49:3e:bc:94:aa:16:88:4a:39:
e1:4a:75:4c:36:1f:d7:47:f4:b8:9b:eb:01:92:b1:
10:a7:2c:8f:3e:e4:96:ff:4a:41:dc:ea:7c:90:cd:
ae:7f:f8:5b:d7:dc:90:28:48:0d:23:df:a2:97:ee:
01:c9:d0:89:6f:53:a2:7a:81:d0:80:9d:1f:3d:61:
0e:3b:35:2f:6b:06:3e:93:bf:e1:ee:09:10:4e:0c:
a4:9a:e5:23:ae:f9:0e:ca:4b:b6:55:cd:00:34:01:
8e:2e:ba:f1:b1:bd:33:23:73:77:9d:f4:2a:22:bd:
b7:34:3b:41:64:1c:d3:e4:71:11:b5:8a:ac:ad:38:
69:f5:c5:f8:1c:24:11:df:23:3e:74:a0:f5:df:96:
26:0f:e8:69:d7:a5:2c:88:91:68:b2:91:d4:46:52:
9c:61:e8:39:89:bd:9f:b2:71:a9:48:c7:e8:c7:1f:
7f:31:85:6b:39:0c:bd:1d:d7:19:ae:c6:ed:39:d8:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A9:19:BA:09:5C:AA:1C:7B:5E:2E:EF:16:39:C6:25:E0:3F:06:89
X509v3 Authority Key Identifier:
keyid:92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/H6kZuglcqhx7Xi7vFjnGJeA_Bok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:cd:f5:a1:b5:26:41:f9:b2:3c:21:52:4a:46:be:a4:2d:65:
dd:e6:6d:ce:9b:04:da:d3:4a:6b:7e:88:44:cf:3a:d3:55:05:
0b:32:3f:7d:9f:ce:d6:ea:a4:ed:03:80:87:e4:b5:1b:31:73:
0c:c9:9a:58:27:5d:20:58:31:f7:e1:e1:c5:44:d3:f0:85:b9:
c7:cd:28:19:81:f3:e2:38:fc:71:a6:c8:7a:ce:84:5b:c1:73:
a3:19:45:cb:fd:66:23:d4:4b:09:16:a2:35:80:37:e2:19:6c:
3b:70:47:54:4f:a5:f0:9b:2b:f9:6f:d8:45:19:2c:4d:07:a3:
58:7f:ed:67:53:89:0c:78:bc:b9:05:4d:91:14:42:a6:55:c4:
c4:f9:78:a4:65:a2:f8:8a:d9:1f:42:ce:d6:d5:40:ce:cc:b6:
d4:f7:46:44:b3:89:d8:91:bc:7e:2f:2f:51:44:66:95:fa:0d:
d4:3c:f6:9e:7f:51:79:5a:26:c0:00:bc:7f:64:81:a9:95:40:
42:10:5b:0d:7e:07:4e:6b:98:e5:86:81:d8:28:3b:7d:ba:7a:
77:56:61:5f:f2:eb:82:e2:a5:d7:c1:de:e3:e7:23:3a:45:7e:
60:29:91:92:77:f9:3c:99:c8:dc:e3:26:dc:7c:be:bf:4a:85:
d3:34:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:53 2025 by rpki-client