Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1VasJY_BqGY2P9lDa-nq6akKKuA.roa
File: 1VasJY_BqGY2P9lDa-nq6akKKuA.roa (raw, json)
Hash identifier: JtcOOYRhTjZPiiPLVYwykgX0c8EHzRtYeEBXnSFqg50=
Subject key identifier: D5:56:AC:25:8F:C1:A8:66:36:3F:D9:43:6B:E9:EA:E9:A9:0A:2A:E0
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 0190911C711C1B30B82B8EE4D76CCAE9B22F
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1VasJY_BqGY2P9lDa-nq6akKKuA.roa
Signing time: Mon 08 Jul 2024 06:51:18 +0000
ROA not before: Mon 08 Jul 2024 06:51:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15704
IP address blocks: 31.221.128.0/19 maxlen: 19
31.221.160.0/19 maxlen: 19
31.221.192.0/19 maxlen: 19
31.221.224.0/19 maxlen: 19
37.29.128.0/17 maxlen: 17
46.6.0.0/18 maxlen: 18
46.6.16.0/21 maxlen: 21
46.6.24.0/21 maxlen: 21
46.6.32.0/21 maxlen: 21
46.6.40.0/21 maxlen: 21
46.6.48.0/21 maxlen: 21
46.6.56.0/21 maxlen: 21
46.6.112.0/24 maxlen: 24
46.6.113.0/24 maxlen: 24
46.6.114.0/24 maxlen: 24
46.6.128.0/17 maxlen: 17
46.222.0.0/17 maxlen: 17
46.222.128.0/17 maxlen: 17
80.81.96.0/19 maxlen: 19
82.144.0.0/19 maxlen: 19
83.175.192.0/18 maxlen: 18
95.169.240.0/24 maxlen: 24
95.169.241.0/24 maxlen: 24
95.169.246.0/24 maxlen: 24
109.227.128.0/19 maxlen: 19
109.227.144.0/20 maxlen: 20
109.227.178.0/24 maxlen: 24
178.237.224.0/21 maxlen: 21
178.237.232.0/21 maxlen: 21
185.241.128.0/22 maxlen: 22
188.127.160.0/19 maxlen: 19
213.171.224.0/19 maxlen: 19
213.172.32.0/19 maxlen: 19
217.168.3.0/24 maxlen: 24
217.168.6.0/24 maxlen: 24
217.168.13.0/24 maxlen: 24
217.172.64.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:91:1c:71:1c:1b:30:b8:2b:8e:e4:d7:6c:ca:e9:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Jul 8 06:51:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d556ac258fc1a866363fd9436be9eae9a90a2ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:f3:74:7c:93:8d:fc:c9:15:89:65:73:b3:
f9:64:26:61:dc:c1:a4:fa:87:58:7a:49:d8:23:e3:
f1:ae:8b:83:77:5f:56:be:f1:3e:f1:a0:50:70:11:
40:83:01:87:2a:97:f7:8e:1b:21:3d:11:40:c0:9d:
c2:c0:bb:41:1b:52:51:5d:7f:b8:ba:1d:a1:bc:63:
08:23:19:a0:12:96:d0:9f:d5:6b:f0:ab:34:f6:f7:
b5:e3:eb:4c:da:d0:da:21:f9:56:5f:ef:59:92:66:
11:36:91:46:40:86:3c:e6:11:89:aa:80:dc:b8:38:
b0:34:87:5d:2c:f7:0e:6d:28:23:fb:dc:b7:72:b3:
00:10:e9:c5:d1:df:7d:d1:e3:51:9e:83:7d:a5:40:
09:e2:28:25:20:20:b3:9c:56:54:a6:10:82:09:ab:
f5:2a:95:c4:ca:91:5d:29:89:7c:ab:35:d1:38:85:
4f:8a:ca:ec:99:56:eb:3a:50:a5:1e:7d:93:b8:b1:
6f:38:ea:47:34:75:11:ee:34:c6:8f:c3:d6:5f:f0:
dc:09:68:8c:18:0e:2a:8e:d2:47:2c:b7:06:3c:b3:
d6:17:55:a3:08:6c:2e:1e:87:76:82:00:bf:dc:05:
ac:86:f2:74:07:8b:9a:1b:62:e1:a1:0c:61:af:26:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:AC:25:8F:C1:A8:66:36:3F:D9:43:6B:E9:EA:E9:A9:0A:2A:E0
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/1VasJY_BqGY2P9lDa-nq6akKKuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.221.128.0/17
37.29.128.0/17
46.6.0.0/18
46.6.112.0-46.6.114.255
46.6.128.0/17
46.222.0.0/16
80.81.96.0/19
82.144.0.0/19
83.175.192.0/18
95.169.240.0/23
95.169.246.0/24
109.227.128.0/19
109.227.178.0/24
178.237.224.0/20
185.241.128.0/22
188.127.160.0/19
213.171.224.0/19
213.172.32.0/19
217.168.3.0/24
217.168.6.0/24
217.168.13.0/24
217.172.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:ad:dd:19:cb:2b:75:02:24:3e:db:22:dc:d4:2f:df:a9:28:
c0:5b:9a:60:1b:a8:cd:95:b3:bd:e5:20:e6:4e:fa:c6:fb:11:
f2:ae:27:02:3f:f1:d1:a1:80:ff:80:7b:b7:b9:ea:5e:d1:39:
d9:46:bc:90:5c:f8:75:84:9c:3e:43:03:c8:65:fa:37:41:75:
fb:84:c4:70:9d:7a:94:b3:b2:52:21:99:ec:d1:27:b6:c2:08:
c8:fc:8f:99:ee:50:1f:04:ce:df:5f:c9:54:8a:8e:04:9e:30:
9e:66:4d:1f:ac:d0:27:29:5f:d2:c4:67:00:02:6a:d5:13:ef:
9e:c8:ac:41:9a:d8:5c:07:bc:12:08:a0:e3:78:1f:7c:2d:46:
78:bc:1d:24:ac:ee:4b:74:c9:90:74:7a:61:ca:40:92:e2:6b:
98:97:38:73:bc:64:67:8b:8e:89:8f:5a:cc:8d:af:67:a7:37:
38:87:bd:70:e9:be:8b:52:32:17:3c:13:3f:df:85:d9:21:61:
fd:d6:29:fa:72:1d:52:af:c5:80:35:07:46:d8:6d:d6:e9:56:
d0:f4:ba:48:85:bc:c3:61:b1:0e:8d:50:14:f9:0c:87:4d:1a:
a3:07:43:c0:c6:90:7e:8c:70:dc:07:3d:61:43:2a:3d:30:ee:
55:8d:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:05:58 2024 by rpki-client on console.sobornost.net