Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/GrxmE-DkROrua-SMPGYcbz_XGYY.roa
File: GrxmE-DkROrua-SMPGYcbz_XGYY.roa (raw, json)
Hash identifier: rHBx949tDDxtFru60GHmWvWbt/kZVBejZV8I98tWh3I=
Subject key identifier: 1A:BC:66:13:E0:E4:44:EA:EE:6B:E4:8C:3C:66:1C:6F:3F:D7:19:86
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01852EE39EA2F3B12129486718129E1B69E1
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/GrxmE-DkROrua-SMPGYcbz_XGYY.roa
Signing time: Tue 20 Dec 2022 09:35:47 +0000
ROA not before: Tue 20 Dec 2022 09:35:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59588
IP address blocks: 151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.166.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.171.0/24 maxlen: 24
151.236.172.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.166.0/23 maxlen: 23
151.236.167.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.175.0/24 maxlen: 24
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.180.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.181.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/24 maxlen: 24
151.236.191.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
45.153.116.0/24 maxlen: 24
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
2a10:2200:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:e3:9e:a2:f3:b1:21:29:48:67:18:12:9e:1b:69:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Dec 20 09:35:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1abc6613e0e444eaee6be48c3c661c6f3fd71986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:42:e7:be:5a:db:cc:c2:72:f3:fc:58:d7:
f6:e3:a0:64:3d:f9:07:87:36:ea:11:47:ed:3c:48:
01:9d:60:55:c0:0e:4f:cd:8a:83:3f:f9:31:37:fd:
ec:a1:9e:7d:1e:07:56:bc:6f:6a:2c:26:57:f4:a7:
e8:a8:9a:14:bf:b3:fe:81:5e:77:8e:7f:f2:bd:77:
89:b4:34:5d:0f:b1:2a:89:43:81:b7:db:26:c9:99:
bc:0a:e5:9d:f1:69:16:46:d9:1d:1f:7c:ae:6a:ed:
3f:67:e5:24:19:7d:df:e2:78:2a:c4:69:12:e6:b2:
e6:33:cc:0b:a8:fd:f2:e4:ec:29:cb:33:98:f2:7b:
48:8c:6f:80:ac:d6:f1:f4:59:61:4d:23:e8:82:9d:
c8:b1:9c:d9:55:10:a0:53:7c:5e:b2:ca:17:58:b4:
1d:b6:a5:d7:a7:7f:75:3f:84:eb:7f:65:1d:29:fd:
e4:0e:51:f1:5e:3c:70:63:2c:55:7f:ab:60:f1:3b:
6a:cd:3c:7a:53:5a:f1:d4:b7:ef:f0:13:f1:07:d2:
2f:9b:41:bd:e7:f1:16:44:a9:fd:8c:73:76:4e:47:
ba:1e:5a:a9:23:e8:cc:a2:35:05:c0:ef:5b:33:33:
b7:cc:96:93:f4:09:61:f3:0f:bc:85:41:20:c7:4b:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BC:66:13:E0:E4:44:EA:EE:6B:E4:8C:3C:66:1C:6F:3F:D7:19:86
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/GrxmE-DkROrua-SMPGYcbz_XGYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.182.255
151.236.188.0/22
IPv6:
2a10:2200:2::/48
Signature Algorithm: sha256WithRSAEncryption
68:60:2c:fc:63:3e:1e:6f:73:a1:19:36:d5:ef:68:59:77:c1:
01:7f:a1:c0:61:7d:0a:03:05:8a:01:ad:22:96:fc:56:dc:ce:
7a:9d:92:c2:ce:87:8d:9c:bb:81:ca:90:e3:2d:c8:f0:0a:78:
4a:f2:cd:49:0e:19:fe:6d:ed:af:a6:1b:f3:0f:61:9b:f5:36:
81:09:82:cd:8d:d6:03:19:13:37:3a:2a:36:11:72:a8:31:4c:
f2:d7:83:01:76:52:a3:80:eb:10:81:6a:fb:68:48:34:f9:d5:
6c:1b:34:e6:04:37:11:4f:5a:8a:1b:d5:54:a1:3e:e0:85:88:
aa:59:34:3d:ba:8b:66:66:bb:b3:94:95:43:16:24:6d:d7:a3:
38:9f:aa:d5:99:fc:84:1e:36:73:11:76:86:19:5f:a9:40:1a:
a4:39:5b:2e:20:98:92:47:89:6d:b8:c0:d3:35:45:9d:29:1b:
0c:10:f1:f4:64:b9:e7:64:ce:35:97:01:a8:0b:3f:1d:0d:bf:
1d:29:9c:cb:de:58:92:23:b9:20:3d:df:75:9c:8c:0a:8a:d9:
2f:31:19:5e:59:05:8c:58:ce:b1:a4:7e:07:64:d3:4f:2c:0f:
12:cb:c0:ce:c3:13:f7:73:b7:37:cc:4e:85:b2:86:84:85:ea:
a8:18:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:31 2025 by rpki-client