Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/aq4ogcfzZpEnM-qzTShzrKkmLVI.roa
File: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (raw, json)
Hash identifier: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=
Subject key identifier: 6A:AE:28:81:C7:F3:66:91:27:33:EA:B3:4D:28:73:AC:A9:26:2D:52
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 019422202B10A48A8C8CA81812BACBD7765F
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/aq4ogcfzZpEnM-qzTShzrKkmLVI.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12886
IP address blocks: 62.204.160.0/19 maxlen: 19
94.101.120.0/22 maxlen: 24
103.21.236.0/22 maxlen: 22
103.51.228.0/22 maxlen: 22
103.76.96.0/22 maxlen: 22
103.192.160.0/22 maxlen: 22
103.234.232.0/22 maxlen: 22
128.65.144.0/21 maxlen: 21
170.81.52.0/22 maxlen: 22
170.84.228.0/22 maxlen: 22
185.88.92.0/22 maxlen: 22
193.23.64.0/19 maxlen: 19
212.118.192.0/19 maxlen: 19
2a02:f90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2b:10:a4:8a:8c:8c:a8:18:12:ba:cb:d7:76:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aae2881c7f366912733eab34d2873aca9262d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:2e:46:7a:37:2d:7f:3a:be:ea:0c:8c:a8:
95:7d:e0:3d:45:34:00:b1:05:0a:94:47:b2:34:68:
88:c7:81:8a:24:e8:a8:ad:03:54:76:14:d8:b3:7d:
76:ec:ee:18:19:6e:f4:6f:05:41:e4:0a:c8:f1:3b:
62:9f:22:1d:67:60:6a:68:dd:9f:a4:55:28:8b:59:
60:5a:04:b4:1c:8b:72:c5:24:74:b1:48:6a:bd:8e:
39:6b:50:75:0a:07:aa:e0:60:9b:c0:43:ae:53:ac:
d2:c2:5f:78:51:21:15:42:7c:10:fd:1b:af:ca:99:
7e:ad:ca:31:26:73:76:56:33:b6:3e:82:7e:99:ba:
0e:0b:35:c7:12:ee:cc:7a:99:8e:62:50:24:0f:e9:
57:d2:fd:d9:1d:9a:f4:ec:73:cd:ba:1a:c4:31:e6:
9a:74:50:20:d5:64:2a:a4:d1:66:9d:a9:1a:fb:e7:
ec:f4:26:75:ae:d8:39:e5:e5:be:0a:da:93:5a:12:
3d:bd:82:f9:53:10:5b:17:fc:f3:38:a5:ed:63:7f:
a2:b2:05:c6:da:78:45:2c:a6:a1:d8:17:98:76:46:
dd:72:29:3d:cf:06:ba:bc:f8:ee:af:60:c0:d5:91:
3a:e4:7f:e0:47:a6:7a:0b:4b:13:13:cd:42:04:d2:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:28:81:C7:F3:66:91:27:33:EA:B3:4D:28:73:AC:A9:26:2D:52
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/aq4ogcfzZpEnM-qzTShzrKkmLVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.160.0/19
94.101.120.0/22
103.21.236.0/22
103.51.228.0/22
103.76.96.0/22
103.192.160.0/22
103.234.232.0/22
128.65.144.0/21
170.81.52.0/22
170.84.228.0/22
185.88.92.0/22
193.23.64.0/19
212.118.192.0/19
IPv6:
2a02:f90::/32
Signature Algorithm: sha256WithRSAEncryption
b9:33:f6:f1:54:1b:d8:54:e9:96:42:5d:9b:75:d5:0b:b1:8a:
a3:60:9b:66:e2:3c:8d:6d:9e:8d:3b:ed:a7:66:0f:62:05:0c:
14:4a:42:a8:6b:1d:a1:20:22:1a:c3:6b:0e:11:89:d3:7e:7f:
aa:53:6c:18:df:0a:1e:db:84:6f:29:89:28:f7:24:e1:49:8b:
01:31:26:ad:44:5a:4e:21:95:57:91:1c:9b:e4:2d:cc:54:6d:
c3:97:14:1d:37:bc:c0:0f:2b:d3:45:9f:d0:2c:81:fa:93:17:
13:15:a9:2f:16:70:c9:bf:ff:6e:92:7e:1f:67:bd:6e:fc:d4:
df:55:bf:39:cd:fb:27:fb:bc:63:04:11:f8:e8:d4:c2:d0:8f:
63:f5:ed:0f:11:83:0a:30:4a:a1:18:31:18:3b:4d:68:d2:6e:
8e:dc:5e:98:5f:9f:9a:c4:44:d3:95:6c:a1:b4:1b:fe:23:85:
8e:81:ba:44:ed:39:a9:cc:ab:f3:57:80:77:2f:b9:15:30:30:
75:f0:9c:5d:22:52:25:84:d2:a1:cc:ab:93:48:ca:d7:56:94:
23:ed:b3:d5:16:96:89:1a:17:fc:94:0e:95:e8:11:e4:e7:6c:
73:12:46:8c:bc:ed:eb:33:fa:89:96:34:2a:d3:ed:b6:c7:2f:
e9:7c:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:48:40 2025 by rpki-client