Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/tjgugWtXCRAR6LvB3B_fCXXkrDc.roa
File: tjgugWtXCRAR6LvB3B_fCXXkrDc.roa (raw, json)
Hash identifier: wDXsrBE0CeUhXqGr+vuXkjURzA3CYwNxPRQ4zDLi3bY=
Subject key identifier: B6:38:2E:81:6B:57:09:10:11:E8:BB:C1:DC:1F:DF:09:75:E4:AC:37
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0194228D20406A27FB5B6433F20498FFD772
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/tjgugWtXCRAR6LvB3B_fCXXkrDc.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 23.252.67.0/24 maxlen: 24
23.252.68.0/24 maxlen: 24
23.252.71.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
23.252.76.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.4.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
167.160.19.0/24 maxlen: 24
167.160.21.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
167.160.30.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.162.72.0/23 maxlen: 23
185.165.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:20:40:6a:27:fb:5b:64:33:f2:04:98:ff:d7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6382e816b57091011e8bbc1dc1fdf0975e4ac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:19:12:47:c1:9a:24:be:69:d4:c3:55:09:
ba:25:c5:92:f5:1d:29:1b:29:2c:48:0e:1b:5b:9c:
b6:ad:bb:d4:e1:b0:9d:52:27:05:35:85:7c:9b:b7:
3a:64:f7:42:36:13:8a:e7:09:65:28:8a:e9:16:94:
1c:ec:d1:86:fb:93:8d:5e:51:0d:5a:49:05:65:af:
76:10:dc:75:d3:28:58:77:fb:cf:26:1b:d3:17:70:
33:d9:fe:86:d7:47:b1:c0:12:bd:3c:cf:10:d4:80:
ca:e2:a9:d0:2a:fd:ba:5b:f1:a1:c2:b0:58:84:73:
57:13:86:a1:ed:e1:7e:d8:a1:0f:c2:9d:10:bc:23:
82:0c:96:6a:a5:9b:3d:21:b2:e0:1b:79:4a:b8:86:
5a:0e:07:b5:4e:68:8e:0e:2a:3a:42:1d:28:39:ba:
ce:1b:c6:93:c9:3d:3e:0e:2c:01:fe:51:dd:39:89:
20:a7:05:23:02:33:0d:bb:8f:c0:5c:6d:f5:fd:8e:
d3:6a:4f:26:c8:bd:1e:16:0b:47:ea:17:31:ff:27:
2e:af:06:b9:c1:f7:e4:a0:de:32:0f:26:ab:57:63:
ca:e9:ec:a8:62:f9:cb:1b:49:bf:91:d1:55:13:34:
73:21:d4:fe:2d:b7:2f:50:5b:14:cf:d5:d9:ba:94:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:2E:81:6B:57:09:10:11:E8:BB:C1:DC:1F:DF:09:75:E4:AC:37
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/tjgugWtXCRAR6LvB3B_fCXXkrDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.67.0-23.252.68.255
23.252.71.0/24
23.252.75.0-23.252.76.255
23.252.79.0/24
107.150.162.0/23
162.222.88.0-162.222.90.255
167.160.4.0/24
167.160.11.0/24
167.160.19.0/24
167.160.21.0/24
167.160.27.0/24
167.160.30.0/24
185.4.224.0/23
185.162.72.0/23
185.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
98:89:9b:ae:ad:6f:ab:a0:08:e9:57:c2:29:0a:91:39:0a:c0:
28:f0:48:01:2a:fa:c2:4f:da:70:f1:cb:b1:e9:c7:bb:6b:f5:
8b:fc:26:6f:89:56:02:9d:21:c0:a1:3c:44:21:e2:9b:24:e2:
88:88:54:c6:ac:d9:41:bd:9f:30:6e:ee:51:ba:a3:8f:ae:5c:
25:e0:0d:9b:55:00:0a:44:4f:cc:51:57:ae:39:40:99:88:d2:
f8:bb:64:78:f8:c7:60:2d:b3:36:e5:42:4e:dd:ff:d8:63:d6:
80:6b:59:cd:95:38:50:9e:c0:b0:68:a0:10:af:4f:70:d9:d7:
7c:7a:6e:82:17:74:e1:23:a9:f3:0c:f6:8d:2b:0e:86:37:22:
c7:e2:bf:3d:2c:16:49:3f:ad:8b:19:28:62:ca:09:d1:e8:5f:
0e:58:20:d6:7d:cc:d9:da:8a:05:05:ef:58:13:2c:f9:e3:2c:
9b:8c:c3:24:bf:cf:6f:a6:5b:f1:1f:59:df:65:b9:f3:9b:90:
4d:48:9f:d2:c4:b1:93:39:9a:9d:3c:f0:4d:89:8a:b7:04:d6:
02:77:2a:7a:83:35:0b:db:58:e3:fa:e2:6c:15:54:9a:61:3b:
90:3c:02:70:be:0d:9a:dd:eb:d2:2c:fb:a2:b2:80:1e:7d:60:
96:79:8f:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:53:54 2025 by rpki-client