Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MC8Z23GC8UHQEaEq5jT2JJhCkvg.roa
File: MC8Z23GC8UHQEaEq5jT2JJhCkvg.roa (raw, json)
Hash identifier: qx3lU6oJiXEau6dgRjwfQbIF78uTU4ba4wHBzR1nBUE=
Subject key identifier: 30:2F:19:DB:71:82:F1:41:D0:11:A1:2A:E6:34:F6:24:98:42:92:F8
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A60AB29D3A9706E6044CEE8CBD08897CB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MC8Z23GC8UHQEaEq5jT2JJhCkvg.roa
Signing time: Mon 04 Sep 2023 14:49:04 +0000
ROA not before: Mon 04 Sep 2023 14:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.145.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:ab:29:d3:a9:70:6e:60:44:ce:e8:cb:d0:88:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Sep 4 14:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302f19db7182f141d011a12ae634f624984292f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:1a:2e:a0:8d:78:81:d2:bd:af:2b:41:f9:
54:7b:f7:6d:bb:5a:54:e9:4c:b3:a0:82:ae:9b:7d:
51:fd:af:df:e2:09:fd:65:00:a1:32:80:b4:a7:26:
d4:53:d4:43:49:63:15:36:8a:8b:56:b2:2b:23:f3:
4b:04:a9:45:1e:71:e5:8d:96:24:39:c6:71:c5:f2:
54:04:e7:ef:b5:5c:bd:a5:30:cc:7e:cc:28:85:82:
00:d4:f5:ec:77:17:68:62:10:ad:6c:c5:23:e1:79:
36:03:a2:20:47:2e:04:6c:1e:13:bb:04:f3:bc:f3:
4c:65:f2:7b:95:3c:10:45:c0:ed:e4:3a:23:40:34:
a9:99:e1:f6:4b:7e:3e:fe:9a:85:3f:aa:90:c1:9a:
98:8d:3f:5c:13:8e:3e:92:d4:db:36:b0:eb:85:29:
5f:47:7e:4f:0a:88:1d:d8:0b:0f:b7:0c:bd:ab:99:
92:76:f4:21:1e:59:f4:a2:8f:c0:18:8e:13:13:84:
9a:05:11:02:8c:9f:a6:b2:04:16:1d:83:c4:8b:8e:
1d:e8:18:e7:59:93:cb:2c:d1:99:fd:f8:d7:0e:d8:
d7:a1:6a:e6:7f:a7:d2:0d:c2:79:65:f5:d5:3e:ca:
a6:2a:59:81:34:00:17:39:b6:7a:12:a4:f1:63:3e:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:19:DB:71:82:F1:41:D0:11:A1:2A:E6:34:F6:24:98:42:92:F8
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MC8Z23GC8UHQEaEq5jT2JJhCkvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/24
109.203.162.0-109.203.167.255
176.46.128.0-176.46.137.255
176.46.140.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
93:c2:2c:bc:5e:89:d8:2c:08:d4:4d:99:01:37:9f:32:ac:92:
47:dc:50:51:ee:85:2e:98:3a:b6:34:83:bd:bc:5c:b6:8d:5d:
31:5a:89:38:c5:01:5d:c1:66:58:76:86:f0:c6:22:d7:98:f0:
3b:34:42:d5:a9:ca:de:60:ec:01:b3:6b:d4:e4:2b:a4:5c:4e:
e2:f7:e9:d1:f6:33:1c:aa:2d:53:63:b4:97:45:0b:d8:23:f7:
9c:30:a1:67:44:88:87:23:9e:48:b1:10:24:3e:d3:25:8a:f4:
8f:db:d7:1c:e0:8a:29:61:d5:de:d8:17:72:68:06:af:78:f3:
a2:20:d9:ee:24:3a:6f:97:20:16:88:77:48:71:66:e1:47:45:
70:bf:d8:d9:38:b7:5b:3e:95:6d:c2:75:4a:c2:f9:04:60:53:
76:42:6c:5e:e3:6c:83:27:7b:2d:4e:ef:53:79:f1:c4:ab:79:
aa:7c:bd:ca:7b:79:20:a5:67:95:f4:fc:0e:36:b3:84:34:a1:
3e:e1:30:67:a6:de:bd:d1:bb:94:b0:93:d4:a4:71:7b:d4:7a:
1d:5e:a9:88:0c:7f:93:6b:55:95:56:a9:87:90:72:3d:1c:67:
59:5f:d1:f3:7e:7f:c6:c8:ed:2d:42:bc:bf:c4:93:95:14:c4:
71:cb:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:57 2025 by rpki-client