Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ntGSRp1M7dzRsEqVsKCC9WAdlVQ.roa
File: ntGSRp1M7dzRsEqVsKCC9WAdlVQ.roa (raw, json)
Hash identifier: yXj4mtP62esyQB/1UkDkPqrBwYqP0Lnr7aetQ8E/cZ4=
Subject key identifier: 9E:D1:92:46:9D:4C:ED:DC:D1:B0:4A:95:B0:A0:82:F5:60:1D:95:54
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF504F031B0C0A82CD9A52EA51BF054
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ntGSRp1M7dzRsEqVsKCC9WAdlVQ.roa
Signing time: Fri 08 Dec 2023 19:43:40 +0000
ROA not before: Fri 08 Dec 2023 19:43:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46805
IP address blocks: 104.160.0.0/24 maxlen: 24
104.160.5.0/24 maxlen: 24
104.160.8.0/24 maxlen: 24
104.160.23.0/24 maxlen: 24
104.160.24.0/24 maxlen: 24
104.160.22.0/24 maxlen: 24
104.160.25.0/24 maxlen: 24
104.160.27.0/24 maxlen: 24
104.160.26.0/24 maxlen: 24
23.92.112.0/24 maxlen: 24
23.92.114.0/24 maxlen: 24
23.92.113.0/24 maxlen: 24
192.40.95.0/24 maxlen: 24
107.150.80.0/24 maxlen: 24
107.150.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:04:f0:31:b0:c0:a8:2c:d9:a5:2e:a5:1b:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:43:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed192469d4ceddcd1b04a95b0a082f5601d9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:ed:3e:c6:a5:83:57:16:d1:8e:99:cc:04:
0f:3a:1f:8f:a5:59:88:79:98:8e:e1:a8:64:ac:bb:
97:21:ee:04:8b:d7:44:f6:a9:99:03:21:7e:c6:03:
a5:4f:f1:ce:fe:1f:06:0f:5f:ce:85:28:40:05:19:
2b:a8:15:f3:7d:14:01:b3:d8:e3:94:72:6d:ce:c8:
b5:5a:ad:14:32:e3:4c:dd:37:09:64:12:51:19:2d:
a7:e3:50:10:26:1d:ef:26:01:de:8e:15:63:3c:dd:
f8:e0:3b:97:d0:4f:3d:46:84:80:90:0f:e8:d0:12:
a8:99:fe:7a:ac:ba:5d:e3:b2:2b:af:c9:3c:34:0f:
e8:ea:6d:cf:29:20:1f:70:f2:e9:1f:f7:18:f3:cf:
4f:51:8b:27:ff:4b:e1:78:0a:98:f6:dc:84:d9:ce:
8b:1c:6c:91:c8:91:c1:3e:8a:69:a8:f3:0c:0e:98:
ec:f8:32:8f:12:db:51:8b:af:de:79:1b:d0:f7:cc:
e5:42:c9:dd:48:04:ed:e7:01:18:a7:ff:83:8d:fc:
ac:25:0f:2a:cf:88:0a:1b:74:36:ff:61:ce:b1:15:
39:91:1b:0e:36:0c:b5:9d:b0:13:f3:77:53:a7:a9:
d8:ab:6f:0d:29:37:bf:fe:eb:63:33:9f:13:cd:ba:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:92:46:9D:4C:ED:DC:D1:B0:4A:95:B0:A0:82:F5:60:1D:95:54
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/ntGSRp1M7dzRsEqVsKCC9WAdlVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.112.0-23.92.114.255
104.160.0.0/24
104.160.5.0/24
104.160.8.0/24
104.160.22.0-104.160.27.255
107.150.80.0/24
107.150.92.0/24
192.40.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a6:ab:ee:d6:eb:33:6b:3c:cf:d0:93:83:56:3c:9c:95:12:
86:ec:e7:7a:5a:dc:e8:0a:cc:1a:2d:5c:69:52:7c:f6:0f:db:
f9:c8:30:31:57:14:86:3f:6b:2b:ef:95:56:24:f8:2a:46:e9:
0f:6c:48:05:67:4d:b4:80:e7:dc:a5:2f:e7:cf:2f:a7:f1:6b:
f9:25:65:48:dd:cb:44:d8:1d:64:b3:1a:b6:a1:c8:95:1b:bd:
cf:6a:b7:31:9d:ef:7f:75:30:af:22:b4:9b:f1:74:0d:07:a6:
86:d2:55:ea:ac:d1:32:25:4d:c1:dd:6f:22:18:7b:bc:11:b4:
00:66:18:91:00:1b:60:8c:a5:e4:46:e7:70:9c:47:1d:37:a9:
52:e0:56:cf:41:5e:a1:27:b9:0c:b3:b2:ea:96:36:c6:ae:98:
13:fa:7a:41:13:b7:18:34:a6:bd:4b:4e:c8:76:3b:0f:77:20:
94:7f:3b:dd:32:51:17:3e:ea:c9:92:d6:cf:a1:2a:d0:ef:36:
71:cb:f6:8e:82:8b:60:5f:30:7c:0b:9c:b1:30:02:fb:2b:06:
e3:46:3a:00:19:6d:fa:31:11:26:25:a0:fc:0a:36:31:f1:97:
bc:57:99:70:0b:c3:61:19:fc:f0:0a:d9:ea:d4:d0:40:2c:8c:
f9:e4:6f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:25 2025 by rpki-client