Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/C4r7MOqjbmh7rE0m4CdZ52_T9mc.roa
File: C4r7MOqjbmh7rE0m4CdZ52_T9mc.roa (raw, json)
Hash identifier: G+hT7PWvwq5mrFQ+oXfpvYpRjJtTL02/ODY/mcxaBog=
Subject key identifier: 0B:8A:FB:30:EA:A3:6E:68:7B:AC:4D:26:E0:27:59:E7:6F:D3:F6:67
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018AD11F5AA2DE6E9D201B91853B7D779A96
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/C4r7MOqjbmh7rE0m4CdZ52_T9mc.roa
Signing time: Tue 26 Sep 2023 10:53:27 +0000
ROA not before: Tue 26 Sep 2023 10:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
194.107.162.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.28.0/24 maxlen: 24
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:1f:5a:a2:de:6e:9d:20:1b:91:85:3b:7d:77:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 26 10:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b8afb30eaa36e687bac4d26e02759e76fd3f667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:54:23:d8:f9:21:35:7e:f4:c1:7c:55:2e:
07:e8:08:b5:31:e7:e6:7b:cf:bd:9a:39:05:38:c7:
3f:e3:27:32:da:63:2a:48:16:3c:e7:11:a9:72:19:
b4:51:a4:cf:61:05:b4:5c:f3:a7:4a:14:53:0f:17:
2c:a2:da:b0:d2:1a:ce:95:b6:f9:79:dc:c1:4a:89:
5e:76:b5:0b:8f:c5:de:33:c4:ed:68:e1:26:fa:f6:
79:a3:ab:aa:13:fe:2c:f9:9b:64:fb:7c:d7:d6:31:
42:6a:ab:5e:08:38:94:9a:ab:54:92:d4:b0:fd:16:
6c:28:31:75:24:56:5a:1c:4b:93:e7:b0:1b:f3:99:
00:f5:4e:58:22:d4:4f:df:0a:32:56:03:a7:59:15:
0b:38:48:fa:8b:39:02:f5:4e:1a:ed:bb:37:94:41:
33:6c:1c:32:9a:07:2d:2f:40:3e:45:eb:a1:5f:e2:
2c:fd:61:90:73:71:85:0d:13:41:64:a7:7d:9e:5c:
2c:a1:f7:6b:18:77:e9:d3:be:0d:aa:9d:cf:57:43:
69:bf:41:20:a5:98:66:7c:82:9a:d4:a9:56:8e:51:
eb:23:30:17:ae:b2:35:0a:e4:72:21:02:fb:0f:e8:
5d:e3:4b:ee:f9:9b:6b:16:ca:c8:4d:1b:a7:27:ed:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8A:FB:30:EA:A3:6E:68:7B:AC:4D:26:E0:27:59:E7:6F:D3:F6:67
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/C4r7MOqjbmh7rE0m4CdZ52_T9mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
45.80.30.0/23
86.62.28.0/22
194.36.32.0/23
194.107.161.0-194.107.162.255
Signature Algorithm: sha256WithRSAEncryption
49:63:56:76:c7:70:ae:a0:c4:2f:0b:3b:4b:25:70:dc:68:49:
d2:35:ba:38:7b:46:94:d2:3d:95:e6:fe:54:b0:91:1e:ef:f1:
71:e4:ed:01:3d:80:35:68:f2:34:a9:30:23:fd:53:17:82:26:
a4:cb:77:d4:f7:2e:a7:75:06:c6:83:9a:69:a2:b9:00:b3:8e:
5e:b4:e9:77:1c:d2:ef:b5:06:7b:a4:50:7c:dd:22:09:10:b6:
e4:24:01:cd:78:b3:88:30:74:36:b7:e3:35:5b:66:9c:85:9e:
92:82:a6:fb:a5:fa:e9:15:b6:86:84:78:ff:87:6f:16:90:1e:
0a:52:ec:52:5b:8c:86:d7:e3:21:fd:73:14:90:98:c8:ce:28:
d9:bc:05:97:09:ae:5e:44:33:1c:f7:31:7f:d5:f7:a2:f6:01:
2f:4e:ed:56:cc:54:2b:c5:90:d2:ec:6b:30:0d:ea:95:1c:4e:
80:93:76:30:23:7b:87:cf:9c:58:00:05:75:91:eb:0a:f9:fd:
5e:c0:02:62:b4:53:f0:65:9f:6a:90:68:3b:e8:f1:f6:f2:a0:
92:12:17:84:20:c2:f6:4c:7a:99:a8:95:fe:5d:19:4a:e6:99:
37:e3:32:92:3f:e2:80:6d:11:c1:9a:3e:95:d0:69:71:7f:8c:
7e:fc:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:40 2025 by rpki-client