Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JirMmO8dCeJVDznx-6hlMZ4bINI.roa
File: JirMmO8dCeJVDznx-6hlMZ4bINI.roa (raw, json)
Hash identifier: K6O3/vR+qtshtiIiNpl1iXk5zlUzSqt0aC+IdcLka1E=
Subject key identifier: 26:2A:CC:98:EF:1D:09:E2:55:0F:39:F1:FB:A8:65:31:9E:1B:20:D2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018B964CC71B3040D1CEE1C3A1725AC3DEDC
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JirMmO8dCeJVDznx-6hlMZ4bINI.roa
Signing time: Fri 03 Nov 2023 17:48:15 +0000
ROA not before: Fri 03 Nov 2023 17:48:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.137.0/24 maxlen: 24
176.46.144.0/23 maxlen: 23
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:4c:c7:1b:30:40:d1:ce:e1:c3:a1:72:5a:c3:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 3 17:48:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=262acc98ef1d09e2550f39f1fba865319e1b20d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:d0:e4:ef:9c:0a:d3:3d:6a:ca:f1:29:19:
ac:56:97:68:c3:39:86:34:3f:da:66:6b:0f:b1:b3:
d6:a0:29:54:27:5a:c8:09:4a:d2:78:35:27:dc:f3:
0f:45:dc:3a:1e:e5:86:4a:97:82:a9:72:0b:b6:78:
d5:73:96:2b:a8:7a:ec:63:7f:46:a5:c0:87:df:e3:
8c:be:92:ac:93:38:65:83:b8:ed:cf:64:1c:ef:8c:
4c:bd:48:de:10:99:76:11:af:ea:b6:6d:f0:f9:a5:
b0:c6:b3:c9:ec:30:d4:fb:ee:c5:7d:35:18:74:01:
88:2a:55:21:5f:41:69:c0:26:26:40:59:7d:7d:fa:
79:c2:0a:82:20:13:87:64:e2:49:09:6e:dd:d3:ee:
66:b4:46:c7:84:fe:83:51:c7:60:d5:92:2c:0d:23:
c5:93:95:2b:3d:cf:52:32:7d:b1:88:72:2f:05:32:
23:00:80:5c:89:80:95:3d:6a:f9:71:7c:92:ea:5e:
0a:ed:ee:28:cd:e8:70:a1:d2:10:ec:70:c4:ff:3b:
3b:20:8d:32:24:ff:f7:64:38:07:4a:98:e5:68:39:
96:c3:8a:17:70:13:54:b0:9d:e9:a1:97:95:17:fe:
52:40:8b:08:de:5b:8c:90:b0:52:ae:b5:65:09:e8:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2A:CC:98:EF:1D:09:E2:55:0F:39:F1:FB:A8:65:31:9E:1B:20:D2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/JirMmO8dCeJVDznx-6hlMZ4bINI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
37.49.146.0/24
37.49.148.0/22
94.74.137.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.162.0-109.203.167.255
176.46.132.0/24
176.46.137.0/24
176.46.140.0/24
176.46.143.0-176.46.147.255
176.46.149.0/24
176.46.151.0-176.46.152.255
176.46.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7c:f4:d7:7c:f5:da:22:5d:81:26:a2:98:7e:60:31:83:98:
ec:a9:1e:94:2f:42:62:e0:f0:80:c2:07:52:b1:59:8c:e0:45:
9d:75:c0:a6:74:c2:56:fb:01:9f:72:4b:02:d8:38:73:83:1e:
5e:65:2b:e4:0a:e5:d6:bb:35:5b:6c:77:a7:07:db:8b:b9:a6:
60:45:17:ad:02:c9:7e:c9:33:7c:8e:9e:c0:79:90:30:8e:e7:
b9:56:87:ff:a0:cb:d2:f7:31:cf:3a:58:04:a7:fb:ee:30:4f:
a4:bf:de:42:11:81:ca:e6:b1:07:08:81:cd:cf:13:59:62:c8:
cf:8d:e2:67:86:fe:70:40:2e:84:bc:a9:27:68:2c:e1:59:87:
59:0f:7a:4e:87:e2:81:7f:07:f6:cb:7d:f4:26:73:17:a2:3e:
dd:a3:93:7a:b9:06:11:52:48:03:db:f1:89:a1:26:f5:1c:d5:
20:c5:50:10:6d:c5:33:ec:06:e6:27:89:3c:fb:7b:fb:f1:d3:
e0:c5:de:fb:37:db:3d:53:fb:c0:79:f7:7a:fe:e0:a4:4c:7b:
c3:52:72:e9:61:46:7f:e1:20:cc:a6:c7:9e:a7:7e:61:66:27:
3c:ad:5e:83:99:0f:8e:5e:2f:c0:e5:a4:01:c5:c9:9f:ce:4d:
c1:9a:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client