Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/J4v9zNycrEJUr_3LHt63H2W4SvI.roa
File: J4v9zNycrEJUr_3LHt63H2W4SvI.roa (raw, json)
Hash identifier: gMqe3Ve2iVZKQSoF7hQ3lgIJ9kOQ1CNsJzASTXRKLhE=
Subject key identifier: 27:8B:FD:CC:DC:9C:AC:42:54:AF:FD:CB:1E:DE:B7:1F:65:B8:4A:F2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01891B6BB32AA073D761E4EE516FCEBC0065
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/J4v9zNycrEJUr_3LHt63H2W4SvI.roa
Signing time: Mon 03 Jul 2023 11:03:10 +0000
ROA not before: Mon 03 Jul 2023 11:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:6b:b3:2a:a0:73:d7:61:e4:ee:51:6f:ce:bc:00:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 3 11:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278bfdccdc9cac4254affdcb1edeb71f65b84af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:52:50:1b:80:7d:69:8b:e1:38:0c:ce:f9:
e4:5b:a8:a1:dd:6f:71:6d:0b:74:c9:6a:ff:06:66:
2d:1c:a4:62:23:3b:79:ba:04:de:1b:c2:13:e2:07:
ca:40:e1:47:9f:dc:33:54:4c:19:a5:36:68:c6:69:
fb:1c:48:28:fc:17:ee:3b:60:93:86:66:8d:f4:6a:
d2:f7:c3:65:c8:30:b8:3b:be:4a:e7:39:d3:94:a6:
08:f2:82:52:c4:2e:55:3b:0c:69:79:5b:b4:08:2c:
e7:89:1b:99:54:7b:79:06:a2:89:47:8e:d9:db:e8:
12:eb:6d:31:2c:d8:37:89:36:ad:de:49:4e:2d:a9:
74:23:2d:3a:8c:c7:d8:e3:53:12:04:5c:ac:8c:37:
89:e7:fa:37:0b:c0:9e:bf:33:ee:6a:c8:46:fb:78:
43:5d:01:e0:b7:71:43:e9:b3:a4:17:74:94:2c:0b:
76:66:d1:dd:f1:6c:aa:58:1a:c4:97:c0:0b:8e:e8:
63:37:f5:68:63:93:d5:c2:ee:ff:e3:e2:7e:95:08:
b8:19:3f:2f:8c:50:a9:e7:ab:3c:1e:2f:be:19:8a:
09:0f:1f:0f:f9:4f:7c:8a:06:69:fb:96:d7:93:0a:
50:c6:3d:ca:cd:1d:b3:cf:cc:0a:f4:77:d1:74:db:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:FD:CC:DC:9C:AC:42:54:AF:FD:CB:1E:DE:B7:1F:65:B8:4A:F2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/J4v9zNycrEJUr_3LHt63H2W4SvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
40:30:7f:34:8b:c3:28:8a:98:14:85:1c:3e:e3:62:4f:54:69:
23:82:a3:8f:89:b3:3e:d1:33:c3:8a:8e:5c:67:54:87:8c:31:
e8:ff:3c:7a:7f:87:70:9b:cd:bb:77:6b:9a:be:d2:80:a1:34:
85:27:35:27:e5:a6:a0:25:47:1f:65:b4:6c:5c:4f:79:5b:9f:
4a:38:0c:8e:fe:e4:e2:55:9d:82:81:2d:bd:fa:2e:d6:13:8b:
68:73:9a:43:63:fe:2d:5b:4b:9f:94:9a:1c:21:b2:37:be:b2:
f6:fa:98:d6:72:47:66:88:28:d7:f0:d2:42:d7:30:cc:59:65:
46:54:21:80:91:6d:0a:fc:46:05:5a:2d:37:8a:fe:4f:9d:53:
e0:8a:d5:a9:cf:bf:ac:58:c7:52:20:8b:09:f0:a7:fc:d4:b7:
9d:54:a0:92:7d:51:eb:fe:fd:d4:a8:b8:5d:0a:22:b6:5b:80:
d3:a5:b6:a1:b9:5b:39:43:8d:54:2c:57:fd:75:44:d0:34:9e:
4c:2f:2c:72:cd:25:9f:9a:e2:77:bb:3f:2d:8e:1b:f0:30:e9:
b8:f4:5b:49:1e:a9:ce:75:bf:3a:48:16:ab:1f:d5:66:18:05:
ca:9c:07:f9:89:99:ea:ec:1e:b9:f8:1c:21:45:4e:97:8d:5c:
45:3f:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:12 2025 by rpki-client