Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4bCGLF8DpF5FCkcX7r8Y9jWxx3k.roa
File: 4bCGLF8DpF5FCkcX7r8Y9jWxx3k.roa (raw, json)
Hash identifier: qYGl7khZLRc6D3vKJ8p3fPQ3MhPVwk6i11n+0prjELI=
Subject key identifier: E1:B0:86:2C:5F:03:A4:5E:45:0A:47:17:EE:BF:18:F6:35:B1:C7:79
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01865974CF5AC05825CE6F0396B0327F0F88
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4bCGLF8DpF5FCkcX7r8Y9jWxx3k.roa
Signing time: Thu 16 Feb 2023 09:01:12 +0000
ROA not before: Thu 16 Feb 2023 09:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
94.74.128.0/18 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
37.49.146.0/24 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:74:cf:5a:c0:58:25:ce:6f:03:96:b0:32:7f:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 16 09:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1b0862c5f03a45e450a4717eebf18f635b1c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:72:b1:86:86:8b:44:de:92:89:80:a0:d0:
aa:f9:dd:38:6f:86:60:88:8d:eb:b5:b7:9d:4e:d9:
00:aa:5c:b5:1c:ee:05:0a:d9:32:5c:85:ce:6d:cc:
bd:7a:79:1c:ac:66:5f:29:aa:c4:8f:f6:b1:70:24:
e1:2b:34:e2:d6:4d:52:f5:df:49:c3:b3:33:5a:e4:
11:f2:87:c3:93:28:c1:79:81:58:9c:68:18:49:3b:
52:b5:b6:f7:c2:a9:c0:f9:df:fb:b1:81:a7:ef:69:
45:85:0c:56:03:e1:1b:15:de:ce:8f:48:b5:3e:64:
a3:c7:3f:d5:e4:62:73:0d:13:fc:9a:ee:74:f9:e6:
5d:27:44:04:d1:30:d0:1c:47:b8:44:08:63:45:19:
8e:51:7a:77:49:50:57:a4:b5:f7:88:8c:85:fb:7b:
39:1e:a2:07:43:ea:99:f2:21:e5:bd:ee:2a:c6:2b:
56:6f:fb:2b:91:b5:c2:ae:ad:10:a1:9b:be:ed:3b:
3e:94:32:1f:d7:e3:7d:b1:59:bd:5d:c0:9b:0e:ce:
45:1d:95:db:67:eb:26:d0:a5:7d:fc:cb:94:c9:7b:
6c:df:1a:ee:2f:54:bd:98:c8:aa:92:d1:14:b1:a9:
bb:f3:04:5c:a8:90:44:7d:a3:e1:4c:5d:b7:66:69:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B0:86:2C:5F:03:A4:5E:45:0A:47:17:EE:BF:18:F6:35:B1:C7:79
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/4bCGLF8DpF5FCkcX7r8Y9jWxx3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.146.0/24
94.74.128.0/18
109.203.160.0/19
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3c:46:34:ea:d9:9b:92:ed:58:da:e3:d9:d4:ea:35:80:e2:
ba:ea:21:90:8a:e9:ad:12:58:b2:b1:d8:f3:2d:b3:fd:8e:f2:
74:6f:21:02:6d:1f:1f:63:f0:3a:0e:4d:9c:13:e4:69:29:70:
2a:f0:cf:e2:ae:60:a9:26:8f:19:ab:fa:65:0b:cf:59:33:7b:
e4:a8:19:65:85:0d:25:ba:59:b8:66:e6:67:12:d2:32:8e:06:
7e:6c:de:ae:0e:35:9d:59:e9:72:65:fb:b2:f4:2d:ae:5b:4d:
bf:9c:1b:76:5c:02:42:62:4d:e9:4d:85:0c:e8:aa:62:12:75:
cf:ce:2f:88:74:00:3d:63:6a:f9:6d:79:ca:73:00:2b:19:2e:
0c:22:1a:98:cb:f6:e1:c9:20:77:0e:78:ef:ee:ff:9a:b3:a3:
64:f4:cc:0c:ea:4d:6a:64:5c:52:fc:c1:40:0c:a6:a5:fc:6d:
cc:1a:f7:93:ed:2f:5c:fc:8e:5f:04:59:e0:78:38:34:07:0b:
5a:8c:65:9c:e1:ed:48:9f:d5:bd:c1:6e:ab:3d:b7:75:ec:75:
21:0d:ee:eb:18:a1:8e:87:e9:a5:37:3b:f9:5d:98:b9:53:96:
69:54:8b:0b:53:94:82:3f:a2:ac:2f:40:f8:2a:05:3d:e8:c2:
04:85:0c:71
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYZZdM9awFglzm8DlrAyfw+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwMjE2MDkwMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWIwODYyYzVmMDNhNDVlNDUwYTQ3MTdlZWJmMThmNjM1YjFjNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHBysYaGi0TekomAoNCq+d04b4Zg
iI3rtbedTtkAqly1HO4FCtkyXIXObcy9enkcrGZfKarEj/axcCThKzTi1k1S9d9J
w7MzWuQR8ofDkyjBeYFYnGgYSTtStbb3wqnA+d/7sYGn72lFhQxWA+EbFd7Oj0i1
PmSjxz/V5GJzDRP8mu50+eZdJ0QE0TDQHEe4RAhjRRmOUXp3SVBXpLX3iIyF+3s5
HqIHQ+qZ8iHlve4qxitWb/srkbXCrq0QoZu+7Ts+lDIf1+N9sVm9XcCbDs5FHZXb
Z+sm0KV9/MuUyXts3xruL1S9mMiqktEUsam78wRcqJBEfaPhTF23ZmmR0QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOGwhixfA6ReRQpHF+6/GPY1scd5MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvNGJDR0xGOERwRjVGQ2tjWDdyOFk5ald4eDNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQEH6owAwQA
JTGSAwQGXkqAAwQFbcugMAwDBAGwLooDBAWwLoADBAK5IqAwDQYJKoZIhvcNAQEL
BQADggEBAAM8RjTq2ZuS7Vja49nU6jWA4rrqIZCK6a0SWLKx2PMts/2O8nRvIQJt
Hx9j8DoOTZwT5GkpcCrwz+KuYKkmjxmr+mULz1kze+SoGWWFDSW6Wbhm5mcS0jKO
Bn5s3q4ONZ1Z6XJl+7L0La5bTb+cG3ZcAkJiTelNhQzoqmISdc/OL4h0AD1javlt
ecpzACsZLgwiGpjL9uHJIHcOeO/u/5qzo2T0zAzqTWpkXFL8wUAMpqX8bcwa95Pt
L1z8jl8EWeB4ODQHC1qMZZzh7Uif1b3Bbqs9t3XsdSEN7usYoY6H6aU3O/ldmLlT
lmlUiwtTlII/oqwvQPgqBT3owgSFDHE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:53 2025 by rpki-client