
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6pHoz8wHipHBna8Jaq6JVr-ErTA.roa
File: 6pHoz8wHipHBna8Jaq6JVr-ErTA.roa (raw, json)
Hash identifier: CuKQO3nE7pbj4m4C769GGuHFLOdGKUrG/4irzEY07B4=
Subject key identifier: EA:91:E8:CF:CC:07:8A:91:C1:9D:AF:09:6A:AE:89:56:BF:84:AD:30
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01876FBDE74D2F315D05597A70589574C5CF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6pHoz8wHipHBna8Jaq6JVr-ErTA.roa
Signing time: Tue 11 Apr 2023 09:55:29 +0000
ROA not before: Tue 11 Apr 2023 09:55:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:bd:e7:4d:2f:31:5d:05:59:7a:70:58:95:74:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Apr 11 09:55:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea91e8cfcc078a91c19daf096aae8956bf84ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:00:f6:67:78:71:c1:cb:24:67:e0:85:35:
fa:02:5e:fd:fc:f3:74:84:a1:13:b4:73:eb:7d:d0:
2c:f2:14:41:db:4d:17:20:f4:65:4b:c8:31:e2:67:
7d:3a:45:7e:5c:0f:ac:26:ee:24:d9:38:85:35:4e:
f7:de:56:9a:c6:d1:4e:76:25:dd:af:8e:46:c7:a4:
fd:73:8d:9d:d4:9c:c4:cb:7a:0d:94:52:80:f8:9e:
c2:6e:60:dc:b4:ec:8c:75:c5:e1:6f:03:36:d2:42:
2c:98:a3:63:52:15:0a:5b:6c:0a:84:17:a7:86:bf:
84:63:c4:49:14:e2:b6:06:ab:fc:55:fa:51:e6:01:
da:21:ac:8e:7d:7d:e0:f1:8c:e7:60:41:8c:75:59:
f5:2e:7a:04:57:11:fb:80:54:07:fa:dc:17:61:82:
1f:f2:8c:bc:0c:e7:13:89:a8:20:a4:06:58:55:ff:
57:30:9c:1a:b1:fa:ee:ae:42:bc:e9:b9:c7:15:13:
e7:e8:e1:bc:be:b7:81:b9:f2:7f:db:b8:5c:04:f4:
dc:04:f8:72:0c:7f:d3:80:e7:c4:d7:87:dc:de:05:
98:b2:0a:76:2e:1e:66:27:28:89:82:fd:3b:ee:e4:
a3:6a:39:e8:e5:54:8f:56:0c:94:a8:ae:ae:13:e7:
1e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:E8:CF:CC:07:8A:91:C1:9D:AF:09:6A:AE:89:56:BF:84:AD:30
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/6pHoz8wHipHBna8Jaq6JVr-ErTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:7a:14:89:b9:71:60:8a:a4:9d:8d:92:74:92:31:aa:bd:3d:
08:ee:8e:a4:c2:24:a9:50:66:6b:b4:48:94:1c:b6:36:43:57:
44:73:79:5c:8f:d3:b4:44:87:b6:29:fa:21:e2:9f:d9:88:db:
79:15:2c:7b:03:cd:3f:78:4f:d0:1c:b0:cd:67:8e:fd:fe:d4:
0e:a5:f8:02:ac:1a:dd:b5:38:7a:e9:26:0c:af:53:a6:24:26:
12:1f:7e:00:ef:53:c3:3d:46:a1:9a:fe:24:2b:26:40:cb:3e:
0f:f1:e7:43:b7:1b:a6:d1:66:f5:71:1d:b1:d2:27:f9:ec:46:
fd:7a:cf:39:ae:45:65:a2:22:e5:06:9e:aa:43:0d:93:58:8a:
7a:34:f2:d4:6e:36:d4:ec:28:99:6b:5c:a3:4e:14:a9:91:66:
60:1f:84:fe:f8:c3:a1:f4:1d:f6:ec:8c:83:0c:79:82:f9:1b:
3e:4b:99:24:29:e0:f5:83:b3:37:ad:d3:01:fe:1e:36:5b:19:
24:38:6a:ef:8d:b0:be:f1:9b:16:91:a7:78:7a:02:e2:fa:fc:
98:b2:ce:b6:4f:08:26:96:8d:5c:f3:de:8d:45:d1:5a:c4:86:
5b:34:fb:93:68:8b:5c:0a:2e:bf:8e:36:55:71:7e:a0:7e:71:
e0:88:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:04 2025 by rpki-client