
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa
File: ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa (raw, json)
Hash identifier: mYnIy7jJL1O6D6Di/zc3WByBymjY9FYtmG6oIBMoW/U=
Subject key identifier: 11:3B:7F:23:CC:D4:4F:B3:E0:40:2D:02:DA:F1:9B:D6:22:AD:1A:34
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0185C486B1B9735508EC9C981B25C31D11B0
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa
Signing time: Wed 18 Jan 2023 10:57:19 +0000
ROA not before: Wed 18 Jan 2023 10:57:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
94.74.190.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
94.74.165.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:86:b1:b9:73:55:08:ec:9c:98:1b:25:c3:1d:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 18 10:57:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=113b7f23ccd44fb3e0402d02daf19bd622ad1a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:9b:95:ae:02:9b:c8:78:04:29:87:be:54:
95:0d:a2:9a:d4:f7:25:b3:97:04:5c:4b:26:40:ca:
98:51:e5:0b:fe:c9:5e:11:8f:4b:52:13:0e:aa:9f:
0c:f9:c6:3e:03:16:89:b6:1e:ff:f8:8e:46:f6:44:
e6:bf:10:58:a1:52:45:30:4d:9e:4d:7c:08:8e:42:
69:ad:fa:7f:0a:6b:a3:50:55:d7:87:8f:2b:1d:f8:
d9:9c:b1:3d:eb:13:10:d8:4c:a4:50:f5:59:03:82:
d0:14:d0:d5:6b:26:d4:5b:e3:26:1b:41:c2:7c:41:
85:64:96:3d:12:0c:20:9b:41:c4:94:fe:ef:39:e7:
03:51:3e:56:ed:41:c5:f6:0c:ef:c3:60:08:bb:17:
98:79:7e:27:fc:bd:41:c6:a6:c9:4b:29:05:fa:dc:
b8:13:62:a8:98:6e:a4:56:0b:25:f5:db:3d:28:49:
b5:20:ce:88:19:70:23:c4:e1:64:cf:c9:c2:13:a3:
22:9b:26:d2:82:5f:83:e2:ed:55:8f:cf:f3:50:bf:
6f:9c:eb:66:75:54:1a:ec:5b:ce:13:ce:10:cd:56:
0c:4d:82:5c:bd:6d:70:46:52:7a:0e:17:d8:38:9b:
94:e0:7f:0c:f4:36:c4:19:ee:59:be:df:b0:b0:54:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3B:7F:23:CC:D4:4F:B3:E0:40:2D:02:DA:F1:9B:D6:22:AD:1A:34
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ETt_I8zUT7PgQC0C2vGb1iKtGjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:16:b3:bc:d2:0e:b2:c6:23:d4:93:21:32:66:d3:3d:99:89:
e8:85:09:52:94:58:6c:fb:f4:2b:af:be:96:fa:aa:88:95:ba:
93:58:f0:01:b9:27:7c:dd:65:d4:a3:fe:da:38:37:d9:8e:44:
9d:89:30:a4:cb:b3:34:85:37:dc:8f:7d:71:52:f0:6b:90:5a:
bc:89:13:7a:0c:5c:3f:b6:a6:9e:21:ca:46:01:a4:29:3a:6d:
e5:fc:90:7e:3c:fe:1f:0c:79:80:2e:ff:e4:d8:b7:cf:70:ae:
1f:6d:1f:9a:7b:fd:04:c6:74:53:ad:4d:b5:dd:f8:e5:5e:ac:
fa:a2:00:fc:0f:03:3e:c5:4d:15:dd:db:28:58:8d:7a:23:09:
50:fa:a0:86:36:49:45:e8:6a:76:f4:23:ee:17:b1:69:88:26:
42:7c:c1:da:05:bc:f0:36:b3:6b:ed:8e:31:a1:49:8b:a8:a4:
9e:7a:e6:c5:64:02:94:4e:29:2b:eb:d4:b0:79:be:ee:8a:4e:
c4:51:6d:94:a8:2c:e0:62:4e:fe:da:da:18:ce:76:5b:a9:ed:
70:0a:cb:23:e0:b6:14:28:09:bb:f5:c3:fd:d8:d5:13:1a:c8:
ed:c2:a0:d2:c5:59:33:20:93:de:f3:f6:21:37:b1:34:ea:fd:
1f:f4:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:04 2025 by rpki-client