Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/7YorYhxBL7LeuUxfhahNYkQkPjE.roa
File: 7YorYhxBL7LeuUxfhahNYkQkPjE.roa (raw, json)
Hash identifier: Q8jka8rGUEsnCsVph8n5oBcQPrpb5nj0d7AEz1xFbJA=
Subject key identifier: ED:8A:2B:62:1C:41:2F:B2:DE:B9:4C:5F:85:A8:4D:62:44:24:3E:31
Certificate issuer: /CN=3938c122767758cfff2fde3b11a17c959176842b
Certificate serial: 06E64DFA
Authority key identifier: 39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/7YorYhxBL7LeuUxfhahNYkQkPjE.roa
Signing time: Sat 01 Jan 2022 07:58:58 +0000
ROA not before: Sat 01 Jan 2022 07:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16347
IP address blocks: 92.61.72.0/21 maxlen: 24
103.232.172.0/22 maxlen: 24
185.204.140.0/22 maxlen: 24
103.229.36.0/22 maxlen: 24
103.77.32.0/22 maxlen: 24
81.22.216.0/21 maxlen: 24
188.66.56.0/22 maxlen: 24
185.208.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115756538 (0x6e64dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938c122767758cfff2fde3b11a17c959176842b
Validity
Not Before: Jan 1 07:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed8a2b621c412fb2deb94c5f85a84d6244243e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:c8:10:02:c4:1b:3e:c6:7f:4c:e6:b9:0d:
35:f5:bc:cf:93:3c:95:c9:00:cd:98:10:15:46:a4:
69:4a:cd:bc:2a:eb:7b:d9:3c:fd:53:e2:bd:44:47:
17:f7:12:ef:dd:b0:eb:b1:9c:2a:7b:7b:dc:25:3b:
92:2f:27:00:83:55:8b:dc:d5:1e:12:73:0c:8f:85:
84:c6:5b:8c:36:72:77:ba:16:12:99:e0:2f:5a:39:
a1:7e:c5:43:ba:2b:9f:f1:89:66:fb:9c:2d:a9:ee:
7f:98:e1:49:c6:ea:90:b8:42:69:e8:45:f1:37:11:
9b:e9:59:94:bc:50:7e:38:72:d0:19:4a:5c:70:c4:
43:ef:6f:41:7c:f9:d7:73:83:8d:c9:e2:0a:b7:18:
e6:4e:77:1f:21:f2:ca:d6:79:df:ed:1e:ad:9f:e7:
45:27:d3:8c:cd:5e:80:c6:9a:48:04:8b:43:1a:b4:
d8:e1:06:29:8d:7c:2d:14:c8:c5:61:85:5f:9b:ed:
3d:08:75:ac:45:5c:73:38:1a:2f:ab:b6:a8:b4:90:
b8:40:b3:12:11:8b:7b:38:ac:75:0b:7d:05:f6:0b:
8d:eb:4d:41:64:27:98:02:48:15:cf:e0:14:67:3a:
35:53:07:99:bf:69:2b:90:77:0b:0b:21:7b:1e:6a:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:2B:62:1C:41:2F:B2:DE:B9:4C:5F:85:A8:4D:62:44:24:3E:31
X509v3 Authority Key Identifier:
keyid:39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/7YorYhxBL7LeuUxfhahNYkQkPjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.216.0/21
92.61.72.0/21
103.77.32.0/22
103.229.36.0/22
103.232.172.0/22
185.204.140.0/22
185.208.248.0/22
188.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:98:67:e6:fa:1f:7e:6a:3d:29:2b:50:9e:01:32:95:a3:20:
ac:b9:32:7c:8d:e9:b8:28:7a:39:41:ba:86:dd:df:cb:8d:82:
b6:0f:4d:ec:04:ca:61:7d:ac:be:37:fe:22:96:7f:8f:55:89:
e4:2b:49:db:e8:27:cc:ca:f9:10:d3:dc:ce:c7:44:f5:e9:89:
1a:dc:06:db:5c:88:c9:e4:0e:55:a6:83:0e:f7:2d:c8:9f:07:
07:bb:ca:ef:87:cf:05:27:bf:40:8f:23:57:40:e6:89:42:e4:
7b:c6:0c:e1:d5:72:fb:e2:58:32:4a:84:3e:47:71:6a:a5:53:
63:96:06:e1:7a:52:a9:26:05:ae:f1:10:cd:cd:49:19:74:68:
7d:89:df:de:5c:cb:32:10:2b:f1:0b:a3:65:e0:e5:47:c9:0a:
01:b8:8e:10:59:40:23:78:5e:5e:ad:f8:a9:8c:ce:9d:fc:75:
26:be:bb:46:43:22:4b:a1:1e:1f:9d:75:56:0d:9a:47:8d:51:
ac:be:c6:a7:ca:0f:62:4f:f2:d8:d1:3b:3c:a6:8a:d1:85:1a:
57:1b:4c:18:df:52:af:20:16:59:94:23:bc:55:d2:21:a7:fe:
ea:f8:02:31:b3:b9:6b:90:e9:0e:30:9d:ef:26:c4:77:13:90:
11:ed:ba:e4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEBuZN+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTM4YzEyMjc2Nzc1OGNmZmYyZmRlM2IxMWExN2M5NTkxNzY4NDJiMB4XDTIyMDEw
MTA3NTg1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWQ4YTJiNjIxYzQx
MmZiMmRlYjk0YzVmODVhODRkNjI0NDI0M2UzMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALknyBACxBs+xn9M5rkNNfW8z5M8lckAzZgQFUakaUrNvCrr
e9k8/VPivURHF/cS792w67GcKnt73CU7ki8nAINVi9zVHhJzDI+FhMZbjDZyd7oW
EpngL1o5oX7FQ7orn/GJZvucLanuf5jhScbqkLhCaehF8TcRm+lZlLxQfjhy0BlK
XHDEQ+9vQXz513ODjcniCrcY5k53HyHyytZ53+0erZ/nRSfTjM1egMaaSASLQxq0
2OEGKY18LRTIxWGFX5vtPQh1rEVcczgaL6u2qLSQuECzEhGLezisdQt9BfYLjetN
QWQnmAJIFc/gFGc6NVMHmb9pK5B3Cwshex5qk2cCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBTtiitiHEEvst65TF+FqE1iRCQ+MTAfBgNVHSMEGDAWgBQ5OMEidndYz/8v
3jsRoXyVkXaEKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09UakJJblozV01fX0w5NDdFYUY4bFpGMmhDcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTYvNWVjY2ZmLWIxNDAtNDRlOS05ZDFiLWRhMDdiZmU4NTFmZS8x
LzdZb3JZaHhCTDdMZXVVeGZoYWhOWWtRa1BqRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYv
NWVjY2ZmLWIxNDAtNDRlOS05ZDFiLWRhMDdiZmU4NTFmZS8xL09UakJJblozV01f
X0w5NDdFYUY4bFpGMmhDcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEA1EW2AMEA1w9SAMEAmdNIAMEAmfl
JAMEAmforAMEArnMjAMEArnQ+AMEArxCODANBgkqhkiG9w0BAQsFAAOCAQEADphn
5voffmo9KStQngEylaMgrLkyfI3puCh6OUG6ht3fy42Ctg9N7ATKYX2svjf+IpZ/
j1WJ5CtJ2+gnzMr5ENPczsdE9emJGtwG21yIyeQOVaaDDvctyJ8HB7vK74fPBSe/
QI8jV0DmiULke8YM4dVy++JYMkqEPkdxaqVTY5YG4XpSqSYFrvEQzc1JGXRofYnf
3lzLMhAr8QujZeDlR8kKAbiOEFlAI3heXq34qYzOnfx1Jr67RkMiS6EeH511Vg2a
R41RrL7Gp8oPYk/y2NE7PKaK0YUaVxtMGN9SryAWWZQjvFXSIaf+6vgCMbO5a5Dp
DjCd7ybEdxOQEe265A==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:23 2025 by rpki-client