Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/iy6F6hhsPFZunVWbNE6vjSMmW4E.roa
File: iy6F6hhsPFZunVWbNE6vjSMmW4E.roa (raw, json)
Hash identifier: H/Edw0yHqB7FByZ2m9WfdsWFX0sIxMdtGfnQjmrfmnA=
Subject key identifier: 8B:2E:85:EA:18:6C:3C:56:6E:9D:55:9B:34:4E:AF:8D:23:26:5B:81
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 0186DA4E5AA2DC843F2629AB1CD17A01BF6D
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/iy6F6hhsPFZunVWbNE6vjSMmW4E.roa
Signing time: Mon 13 Mar 2023 09:30:13 +0000
ROA not before: Mon 13 Mar 2023 09:30:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 216.194.80.0/20 maxlen: 32
43.252.28.0/22 maxlen: 32
103.211.184.0/23 maxlen: 32
37.61.226.0/24 maxlen: 32
193.151.52.0/22 maxlen: 32
103.30.12.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:4e:5a:a2:dc:84:3f:26:29:ab:1c:d1:7a:01:bf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Mar 13 09:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b2e85ea186c3c566e9d559b344eaf8d23265b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:ae:de:0d:ac:b7:18:0c:6d:8c:04:ef:2d:
21:dd:25:9a:17:29:54:31:bc:42:d7:d1:d9:71:23:
9f:fd:40:b1:b4:4b:d2:e3:7f:67:fc:1e:f1:0d:cc:
ec:f7:7c:7e:01:f5:b6:93:c0:83:17:75:53:18:0e:
8e:20:75:17:f3:65:33:36:5a:a9:93:40:e5:1b:94:
66:5e:ea:fb:2e:f1:8e:be:97:8d:5c:03:5c:7b:ad:
de:22:45:cb:b3:0f:3d:a1:44:e1:86:be:3f:c1:17:
f7:a9:6d:f4:f0:0c:37:e5:4e:7d:0e:99:22:c0:c6:
10:6f:b2:6e:67:46:e4:9f:c8:63:35:ea:a2:a8:de:
4d:94:3e:44:5a:07:73:33:0c:98:7b:e8:00:90:d9:
58:c4:73:51:ff:ac:77:11:59:45:ed:48:c2:b4:2f:
9f:13:e4:5f:0b:ca:99:f8:81:10:b7:3d:ec:c3:19:
06:66:1b:0b:18:70:52:bc:1f:51:ca:61:ec:c7:d0:
fe:63:70:84:7e:99:9a:83:1b:13:57:98:2d:87:4d:
8a:14:63:81:cf:55:df:34:d5:b8:35:80:0a:3d:35:
38:1c:93:2c:5a:e7:48:b2:0d:bd:ad:7e:e2:74:4c:
ab:58:4f:33:70:6d:da:5d:e7:0d:30:ac:84:ed:38:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2E:85:EA:18:6C:3C:56:6E:9D:55:9B:34:4E:AF:8D:23:26:5B:81
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/iy6F6hhsPFZunVWbNE6vjSMmW4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.226.0/24
43.252.28.0/22
103.30.12.0/22
103.211.184.0/23
193.151.52.0/22
216.194.80.0/20
Signature Algorithm: sha256WithRSAEncryption
51:60:6c:70:1e:ad:19:89:f1:04:24:5f:ef:4e:69:e8:75:9e:
52:f3:67:e2:06:b7:1b:6b:b2:35:55:57:eb:90:ff:d6:e9:88:
36:b7:4f:1b:48:19:bd:d5:85:e2:5d:ed:6e:62:b2:ac:1d:c1:
dd:fa:12:15:a6:a6:64:59:bf:85:48:b1:f0:1b:ce:ee:b8:62:
74:1d:86:44:62:47:ab:71:54:99:7a:39:51:83:9d:16:ac:80:
43:8a:97:52:8a:22:ba:6e:e9:74:b3:13:5c:6b:ae:03:e5:77:
32:f8:c6:76:1f:8f:d9:58:46:09:98:ae:a0:f3:a2:51:2c:97:
8d:9f:b5:48:04:a2:52:02:43:ee:0b:c3:ab:0e:90:22:84:20:
6d:f2:31:83:87:51:7c:51:0f:cf:65:7a:2f:3f:f1:06:3d:ce:
32:1c:06:8b:8e:cd:b1:4b:81:0e:b0:73:e6:35:3a:a2:35:a4:
62:e4:68:58:4d:2e:f7:9f:62:b2:c9:9e:21:4c:c2:b6:10:dd:
4c:f8:a4:48:e1:db:e0:6c:93:24:39:e3:a8:da:fa:c1:15:02:
da:cc:6f:cd:5a:9b:85:dd:b0:97:f8:d6:0a:cf:d8:2e:ee:25:
92:68:62:bb:d3:3b:24:95:0e:7d:58:c6:eb:cc:87:73:c7:c1:
a8:ac:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:55 2025 by rpki-client