Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BjckGXPq_SR0kfF4KDfClLUUO8E.roa
File: BjckGXPq_SR0kfF4KDfClLUUO8E.roa (raw, json)
Hash identifier: 8rRsSdRcNFvVC9HAG5KAKcgB/ks82piUDgz2DMiP9yE=
Subject key identifier: 06:37:24:19:73:EA:FD:24:74:91:F1:78:28:37:C2:94:B5:14:3B:C1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A546A90A373B077F2904110A52F9735DF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BjckGXPq_SR0kfF4KDfClLUUO8E.roa
Signing time: Sat 02 Sep 2023 05:43:04 +0000
ROA not before: Sat 02 Sep 2023 05:43:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:6a:90:a3:73:b0:77:f2:90:41:10:a5:2f:97:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 2 05:43:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0637241973eafd247491f1782837c294b5143bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:28:a0:7c:9a:a4:3b:54:7b:e3:57:3a:36:
a8:9a:57:30:6a:84:d1:6b:db:73:ef:f3:98:80:90:
24:09:2a:96:9e:47:18:68:2b:45:29:db:f0:ab:4b:
30:62:93:07:12:5e:a0:83:fb:e4:4e:59:a0:31:f2:
5e:a1:8c:a0:4b:c6:e8:5e:b5:9f:cd:a2:72:ed:1a:
27:11:c6:f9:e8:4a:68:39:01:a7:c6:74:2c:89:5f:
a5:c8:75:22:4e:6f:36:0e:8e:1d:fc:ad:4c:0f:ab:
60:20:5f:28:3f:cc:54:9a:58:ff:bb:46:5b:10:65:
86:f3:f1:7c:dd:7a:66:2b:22:94:98:2a:2a:ec:11:
90:f9:3d:d4:b8:08:57:0b:e6:32:95:a6:44:bc:af:
8c:43:c8:b6:42:80:58:5e:71:30:7f:64:8f:94:fb:
e7:01:6c:a4:45:c8:0b:dd:f5:a7:92:8f:08:1d:66:
58:18:81:8a:91:8b:d5:2c:24:55:cb:6f:e8:bb:9d:
33:af:f3:12:1b:11:80:03:81:93:26:38:36:0a:cb:
b4:1f:ba:15:a8:91:61:72:06:dd:b3:e4:7e:d1:be:
29:0a:bf:f8:6c:95:65:bd:1a:62:57:98:c9:37:4e:
11:00:49:31:22:1e:28:8a:d2:f0:0b:e6:a1:15:59:
11:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:24:19:73:EA:FD:24:74:91:F1:78:28:37:C2:94:B5:14:3B:C1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/BjckGXPq_SR0kfF4KDfClLUUO8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/23
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.164.0-109.203.166.255
176.46.128.0/24
176.46.130.0-176.46.137.255
176.46.140.0/23
176.46.143.0-176.46.157.255
Signature Algorithm: sha256WithRSAEncryption
23:63:2c:7f:85:c2:9f:ad:d7:62:84:a6:75:e3:5e:99:13:4c:
f3:16:6f:95:d6:2d:1d:b9:1d:df:e8:5f:33:ef:7d:18:b9:03:
fe:b7:f7:3f:51:ba:fb:c0:87:bd:87:dd:fd:b3:74:ce:a6:61:
f5:39:a4:40:b8:09:fa:27:93:99:69:08:9d:89:33:74:3f:e4:
54:a0:e5:87:81:10:56:f8:2a:85:0d:d4:ff:23:69:0c:2b:67:
89:28:44:ae:3a:c5:35:d6:78:88:bd:20:f8:7a:72:b4:8d:c5:
23:fb:2a:f6:cf:81:ad:9e:f8:d2:6c:65:44:0f:2d:6c:ec:c3:
6e:f7:0d:f3:01:4f:ca:ca:52:b3:59:97:42:2b:d3:c6:de:5d:
70:d7:cc:2c:83:65:69:23:7d:21:54:42:87:27:70:c5:7b:18:
b0:4e:02:85:ee:20:13:ce:d1:e5:b7:6c:2f:05:56:2e:37:cf:
ee:44:d0:8f:af:0a:b4:24:f5:c8:b3:91:6c:c8:df:f7:b1:5a:
c6:0c:b5:b1:56:3c:16:1e:28:93:df:11:68:af:40:a0:5f:4b:
ca:b2:54:cf:12:4e:0b:b7:80:ef:1c:ca:ba:1e:e2:bb:b9:04:
b2:03:0b:56:bc:c0:da:6f:bc:20:c4:f5:95:7d:a7:95:32:14:
73:8e:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:23 2025 by rpki-client