Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/plimS86gUId_EDh_adVBdAYQPXI.roa
File: plimS86gUId_EDh_adVBdAYQPXI.roa (raw, json)
Hash identifier: fsq0LkYDM0HRlhiLESAWF4hbNVw4gkqugKrA1swAbic=
Subject key identifier: A6:58:A6:4B:CE:A0:50:87:7F:10:38:7F:69:D5:41:74:06:10:3D:72
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 0193914B9551CABF5254982DCFD907F059CB
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/plimS86gUId_EDh_adVBdAYQPXI.roa
Signing time: Wed 04 Dec 2024 10:51:09 +0000
ROA not before: Wed 04 Dec 2024 10:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 23.19.56.0/21 maxlen: 24
23.19.56.0/24 maxlen: 24
23.19.59.0/24 maxlen: 24
23.19.62.0/24 maxlen: 24
23.106.32.0/21 maxlen: 21
23.106.56.0/21 maxlen: 21
23.106.232.0/21 maxlen: 21
173.208.48.0/21 maxlen: 21
173.234.72.0/21 maxlen: 21
173.234.136.0/21 maxlen: 21
185.222.24.0/22 maxlen: 24
185.222.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:4b:95:51:ca:bf:52:54:98:2d:cf:d9:07:f0:59:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Dec 4 10:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a658a64bcea050877f10387f69d5417406103d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:1a:25:16:bc:0e:91:68:06:a5:01:a9:26:
b2:74:1a:9c:a4:38:01:1a:aa:94:32:85:12:ec:d3:
67:eb:6e:11:0e:86:ca:55:4f:2b:5b:91:a1:94:6b:
e9:b3:3c:cd:88:50:63:1a:a6:4f:0d:52:57:5d:4f:
3d:a1:e7:55:0d:b9:53:ae:15:cf:c9:5d:38:99:4e:
fd:73:b9:d1:c7:c7:4c:27:2b:87:f5:45:80:c4:4c:
38:79:55:ef:0b:98:30:e5:9f:ce:24:11:e2:fc:ef:
ca:5e:f4:49:1f:2f:5b:0c:b3:7b:b7:a3:b5:2d:9a:
0c:99:16:d0:b5:ed:e7:19:f3:83:e9:ac:b2:b1:83:
a6:a8:bf:1c:8c:41:85:ba:c5:aa:1e:66:e3:d1:9a:
e3:94:26:b8:2e:46:37:0e:e6:3d:43:1a:03:ba:30:
02:d3:17:43:09:63:65:00:19:84:e1:89:b9:b4:a5:
fa:06:d3:04:5a:c0:3c:c8:10:11:db:92:65:f7:9c:
b4:87:26:c7:52:a7:a8:7c:89:62:94:fd:4f:6d:8c:
fe:63:49:25:26:14:04:de:16:cb:06:6a:fd:ff:ee:
1d:9a:8a:88:0a:58:ce:44:83:05:7d:f3:a0:e3:a5:
e3:8c:42:a1:29:e6:8a:89:d7:43:0b:9d:6e:11:87:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:A6:4B:CE:A0:50:87:7F:10:38:7F:69:D5:41:74:06:10:3D:72
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/plimS86gUId_EDh_adVBdAYQPXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.19.56.0/21
23.106.32.0/21
23.106.56.0/21
23.106.232.0/21
173.208.48.0/21
173.234.72.0/21
173.234.136.0/21
185.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:22:bf:83:78:15:e9:f7:62:e5:57:39:18:3a:6c:15:09:9a:
4f:d3:a0:50:95:af:e0:26:58:1b:14:b9:7a:d4:5e:a5:5b:ca:
03:ee:0d:9d:77:3c:c1:74:72:2d:b1:39:1d:52:96:1e:25:6e:
d9:68:a1:f8:0d:ae:d3:22:be:cf:50:9a:b1:75:9e:8e:39:8f:
a9:a9:2f:92:18:3a:df:80:9d:b2:bc:e0:50:ba:71:cf:50:d0:
88:c6:be:30:ea:ea:ce:92:ac:86:29:8b:fd:62:17:86:22:1f:
bc:6a:10:fc:0d:03:28:0c:ff:bc:88:d1:40:6f:ee:4c:41:f2:
2c:d7:a5:46:89:e0:85:9a:13:c9:1e:13:c7:78:53:1e:2d:65:
ac:10:78:5e:5d:2c:5c:ab:a8:ff:3f:ba:a5:63:95:74:42:d5:
b7:2b:69:3f:a5:88:d7:e8:fb:6d:db:6f:e2:d4:ff:7e:bc:da:
0d:87:e6:c4:eb:14:8d:39:a6:09:a7:aa:3d:32:29:f6:22:02:
94:72:83:93:2a:12:b5:de:46:41:a1:28:f6:63:fa:3e:ca:e4:
05:36:c2:b4:e5:9e:77:b4:5b:f8:8f:1e:48:11:dd:51:48:d8:
03:1e:63:89:51:26:2b:2d:3e:1e:49:88:70:ac:8d:26:c6:ba:
34:47:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:32:03 2025 by rpki-client