Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LID88GzDBlWwu58ytorR06AwrvM.roa
File: LID88GzDBlWwu58ytorR06AwrvM.roa (raw, json)
Hash identifier: R4t9ZXt09rJAs/hmMfTYnUl3MHTK5c6PT81XC2qY224=
Subject key identifier: 2C:80:FC:F0:6C:C3:06:55:B0:BB:9F:32:B6:8A:D1:D3:A0:30:AE:F3
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0189CA4CCFEAFAB449C5AA6F56856FB26D20
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LID88GzDBlWwu58ytorR06AwrvM.roa
Signing time: Sun 06 Aug 2023 10:02:58 +0000
ROA not before: Sun 06 Aug 2023 10:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
31.170.55.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:4c:cf:ea:fa:b4:49:c5:aa:6f:56:85:6f:b2:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 6 10:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c80fcf06cc30655b0bb9f32b68ad1d3a030aef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:d0:e1:41:b9:23:d0:59:44:e9:93:2b:9d:
a9:dd:b4:1c:ef:08:22:f2:2a:4d:c9:7e:19:48:7b:
ae:1b:22:a7:73:9a:34:f4:bd:29:9c:10:a3:a1:20:
b5:f8:e6:16:e8:a0:92:de:71:dd:04:e5:dd:2c:20:
c1:09:6e:89:8c:a6:69:05:44:e7:92:dd:91:2a:29:
a4:7a:65:5c:d8:4b:ba:60:6d:80:20:83:2c:3f:f7:
f2:48:c8:01:7f:3a:cb:4d:9a:b1:90:9c:f3:ba:d6:
8f:c0:cf:c9:5f:c3:7e:dc:5f:8f:4c:da:37:23:8e:
44:a5:6d:ae:45:92:62:7f:cb:44:a2:40:17:08:7d:
01:29:43:04:54:d5:a7:1d:a7:9f:23:91:56:07:20:
4e:4f:a1:e9:1f:c1:d9:2a:95:91:90:18:b5:fd:a6:
de:15:38:ba:74:a0:6f:6b:6a:ee:19:51:42:d4:33:
72:68:58:d4:4e:0d:88:da:1e:f6:a8:a9:6f:27:b4:
9f:a3:bf:37:3f:51:41:09:7d:da:fa:d1:10:89:40:
df:d2:fd:89:af:34:c6:34:0c:97:3c:c7:86:fe:ce:
b8:7f:a0:01:fe:d5:86:cc:c6:b5:02:c4:0a:ca:4b:
9f:87:bd:63:a6:fd:03:6b:96:df:8d:4b:e5:c9:a1:
1b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:FC:F0:6C:C3:06:55:B0:BB:9F:32:B6:8A:D1:D3:A0:30:AE:F3
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/LID88GzDBlWwu58ytorR06AwrvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
94.74.140.0/24
94.74.147.0/24
94.74.164.0/24
94.74.171.0/24
94.74.187.0/24
109.203.164.0/24
109.203.166.0/24
176.46.128.0/24
176.46.131.0-176.46.132.255
176.46.137.0/24
176.46.140.0/24
176.46.143.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
41:1f:0a:28:e1:50:be:1a:01:70:18:12:4c:16:c7:8c:dc:4f:
bb:07:e4:0a:9e:f5:e7:4c:45:25:cc:9a:11:84:21:d6:84:0c:
e0:3d:d9:c7:cc:d5:ba:a7:6c:a3:6e:2f:f1:5f:27:62:0a:b7:
60:d9:e0:7c:dc:1e:f2:4c:06:3c:4e:0e:37:d2:94:c2:47:e2:
68:5e:71:6b:2a:f9:24:d2:43:ef:04:95:33:54:79:41:58:d8:
74:77:cc:32:5d:68:e1:9b:12:68:7c:9c:d5:ef:58:db:74:34:
df:0c:63:b7:f3:15:ad:7e:48:fd:dd:5d:dc:c0:d5:1c:b3:1f:
38:8a:f6:a3:9f:b0:7b:01:c9:3d:ea:29:38:24:e2:66:e1:9c:
ea:29:13:f5:33:cf:1d:ec:66:21:0c:1f:88:16:1d:69:41:8a:
fc:48:05:0d:ca:32:59:bd:0a:85:b6:94:b2:cf:69:79:de:25:
01:30:58:a7:bb:75:4f:b9:53:35:86:be:be:b6:9c:d6:3c:fc:
cd:dd:7f:9d:ab:44:bf:ce:7f:9d:29:3d:7c:a5:95:7a:38:4d:
2b:c0:15:a2:26:51:75:4e:b7:d0:02:07:7f:5b:29:02:c7:20:
1d:03:cf:b4:13:a6:d2:42:4e:e2:a3:c1:b1:38:bb:82:55:55:
b0:15:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:33 2025 by rpki-client