Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6IXPNzXM4UiLANY4SuInwxKV9Uk.roa
File: 6IXPNzXM4UiLANY4SuInwxKV9Uk.roa (raw, json)
Hash identifier: rCR2Hps9f+dRIoialkMS3wtqnx0/Unw0biZZjpYT5R0=
Subject key identifier: E8:85:CF:37:35:CC:E1:48:8B:00:D6:38:4A:E2:27:C3:12:95:F5:49
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018953C2A4385ADA896523B3DE6D93F39672
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6IXPNzXM4UiLANY4SuInwxKV9Uk.roa
Signing time: Fri 14 Jul 2023 09:36:52 +0000
ROA not before: Fri 14 Jul 2023 09:36:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:c2:a4:38:5a:da:89:65:23:b3:de:6d:93:f3:96:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 14 09:36:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e885cf3735cce1488b00d6384ae227c31295f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:79:ea:1c:ce:60:9c:f6:aa:d2:4e:d3:76:
fb:64:c2:e1:6f:87:6b:c4:0b:07:f3:17:a8:57:97:
97:5d:13:45:45:9f:fd:91:5b:c6:23:ad:04:e7:61:
8f:a6:25:af:d5:5e:89:1e:84:2b:38:0b:51:0c:92:
7a:b8:1f:bb:9f:c8:98:8f:91:3a:1c:9c:99:b9:55:
32:21:e8:16:94:79:90:6e:d1:0b:7a:63:82:31:1e:
81:6a:b9:33:db:a2:2d:37:9b:d5:2e:29:a1:e7:b4:
2f:c5:2c:94:4a:ed:a3:07:99:2c:b3:b0:6d:60:50:
ee:c1:ea:5f:60:2a:60:89:8a:e6:00:9c:9d:89:29:
03:9a:9f:08:e3:73:ee:55:2b:b2:ca:6e:5e:a4:bc:
95:e7:2d:40:bd:25:24:a2:87:a9:06:3a:91:5c:00:
7f:5e:39:52:f2:ab:ff:87:2f:0a:94:fa:a5:84:13:
55:f5:d0:2c:b8:9e:02:5a:04:cb:db:5d:a0:b3:97:
06:05:42:d0:76:f5:ed:0b:02:99:69:53:fc:b8:a3:
38:99:e2:65:e0:bf:4a:69:60:97:0c:49:10:55:bd:
9f:34:29:b2:d9:5a:49:7c:ec:68:b3:fc:79:01:f3:
48:73:59:e8:b5:cb:c6:e3:63:1e:54:14:5c:29:8d:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:CF:37:35:CC:E1:48:8B:00:D6:38:4A:E2:27:C3:12:95:F5:49
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6IXPNzXM4UiLANY4SuInwxKV9Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
23:b2:14:b4:c2:1f:a1:19:98:9d:19:1c:9f:cd:b1:72:85:9f:
3e:0a:28:78:82:32:c5:3a:b5:a6:58:31:4a:37:6e:9c:ff:86:
03:ad:38:08:57:f5:ed:af:8d:c8:02:36:ff:c2:3a:00:51:1a:
c7:8a:3b:da:7b:72:31:11:02:ec:16:3c:90:76:f7:7c:22:6a:
cc:b7:9b:47:a5:0d:89:59:b6:83:1b:24:ec:35:07:86:ee:1f:
4e:9c:9c:13:74:f4:e2:bd:6f:39:01:1a:a6:3f:14:06:c5:6a:
9e:ad:31:93:23:02:d6:9c:ca:91:74:0a:dc:cf:5f:9d:6b:92:
14:6c:e7:b5:08:0e:a3:8f:f5:ee:99:3b:7f:2b:e8:e6:73:a4:
5d:da:eb:5c:29:bc:72:0c:e5:9a:db:f1:83:82:21:c1:21:af:
3e:81:e7:ef:77:b3:cb:d4:ef:f6:d6:1f:55:70:2d:25:f9:1c:
95:3f:b1:2b:ed:a1:4b:30:1d:d7:74:8a:e4:04:e8:1e:b7:53:
ef:10:b1:e0:35:b9:3c:d5:ed:a5:99:e3:a1:e7:32:d7:7a:c5:
9c:49:ae:aa:86:e7:ac:66:00:13:97:a4:d0:8a:3e:7f:78:c3:
b8:21:a8:0f:aa:fe:0d:52:40:55:fc:13:9d:51:b9:f7:a1:1b:
a0:25:57:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:54 2025 by rpki-client