Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/MI4d5HJsQ7Z0fU9D7RB8OJwAZyQ.roa
File: MI4d5HJsQ7Z0fU9D7RB8OJwAZyQ.roa (raw, json)
Hash identifier: MaJNAuYLIcVIDXeqY4L0pDhoN4RGSONls5somxhCxx0=
Subject key identifier: 30:8E:1D:E4:72:6C:43:B6:74:7D:4F:43:ED:10:7C:38:9C:00:67:24
Certificate issuer: /CN=3938c122767758cfff2fde3b11a17c959176842b
Certificate serial: 01856EC2344CF8A9E47756D3E50D988A0D68
Authority key identifier: 39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/MI4d5HJsQ7Z0fU9D7RB8OJwAZyQ.roa
Signing time: Sun 01 Jan 2023 19:14:58 +0000
ROA not before: Sun 01 Jan 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16347
IP address blocks: 92.61.72.0/21 maxlen: 24
103.232.172.0/22 maxlen: 24
185.204.140.0/22 maxlen: 24
103.229.36.0/22 maxlen: 24
103.77.32.0/22 maxlen: 24
81.22.216.0/21 maxlen: 24
188.66.56.0/22 maxlen: 24
185.208.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c2:34:4c:f8:a9:e4:77:56:d3:e5:0d:98:8a:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938c122767758cfff2fde3b11a17c959176842b
Validity
Not Before: Jan 1 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=308e1de4726c43b6747d4f43ed107c389c006724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:b4:b8:ce:f2:41:0e:07:20:9a:7e:ab:fe:
ed:5c:f7:a1:74:29:ce:fa:4d:5f:ee:4d:95:f1:50:
17:8a:07:07:3b:3b:ee:2a:a0:54:76:01:88:24:12:
2f:2e:46:1d:d0:b0:6c:bd:3d:78:72:04:bf:53:ac:
8d:47:9a:7a:4c:3f:4f:ee:65:63:4e:34:70:c9:fa:
7c:49:47:73:fa:d2:d2:2c:7b:f7:83:c8:4f:28:23:
2c:2e:ff:98:8d:23:50:fb:f7:8b:fe:5a:72:df:e4:
67:e4:16:6b:d3:db:1e:fb:11:29:fe:32:dc:7d:d3:
b5:56:6d:66:cc:a9:5a:a7:e0:a5:5a:55:c8:05:b4:
0c:12:01:f4:43:31:3e:aa:ad:d4:be:af:fa:ac:46:
ad:5c:7e:80:87:7a:4b:a4:d6:3f:cc:ad:50:63:cf:
16:1e:11:76:95:0a:8d:b2:c4:5a:c3:b3:55:0f:e0:
16:1f:85:71:24:77:75:d2:76:26:b5:37:39:ec:2d:
84:9e:e2:89:13:b9:4a:da:87:1d:c4:28:df:17:f3:
fc:6e:9d:c6:ee:d7:0d:94:a1:45:98:c0:69:45:f0:
d1:08:5d:a6:ba:3f:69:89:67:e5:d0:2a:05:8f:bf:
8f:c0:39:69:f0:cc:16:7e:29:ac:ce:e3:ba:9e:90:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8E:1D:E4:72:6C:43:B6:74:7D:4F:43:ED:10:7C:38:9C:00:67:24
X509v3 Authority Key Identifier:
keyid:39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/MI4d5HJsQ7Z0fU9D7RB8OJwAZyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.216.0/21
92.61.72.0/21
103.77.32.0/22
103.229.36.0/22
103.232.172.0/22
185.204.140.0/22
185.208.248.0/22
188.66.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:a6:e0:f1:ce:a3:72:b5:35:99:59:83:f3:ec:f3:07:74:41:
90:dc:0e:7c:ad:45:e5:a1:69:da:f4:47:24:3d:20:b1:35:63:
d1:e7:81:2e:14:24:ed:40:65:19:9e:82:2c:5a:5f:02:1f:82:
95:c6:6b:a4:da:5b:63:e5:3d:ab:62:9a:42:ab:24:41:9e:f5:
58:0d:c5:ec:45:ab:43:41:39:02:e3:d7:71:3e:7a:d5:90:b3:
f7:29:cc:63:2b:41:64:d0:1d:5d:51:5d:ce:ff:62:3e:98:7a:
15:c4:e9:82:3b:69:d9:d0:1e:ba:a0:cd:30:c6:0f:0f:9b:6e:
da:40:da:29:ab:c9:e2:49:54:4f:77:20:38:cc:fb:40:26:34:
1a:fe:07:74:a7:5a:c3:d7:c2:9d:3c:8a:5c:5b:d1:bd:a3:c3:
60:5a:ac:f9:40:a4:80:df:cc:78:43:a4:63:51:6c:13:ff:27:
52:b0:8f:0c:a7:f5:7f:34:1f:81:61:e7:33:36:7c:ff:25:b6:
c4:fc:ed:70:4a:7c:c0:33:69:c3:8e:25:50:1f:20:a9:f7:c3:
77:5a:7c:12:5f:5a:82:3f:11:a0:8d:7b:30:52:b4:42:5a:aa:
5a:21:fd:4d:27:98:e7:9c:cb:f8:e6:0e:85:a1:a1:50:d2:47:
4d:07:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:34 2025 by rpki-client