Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MM9b5f5nFrp0-kLm_q9FNY4t-UI.roa
File: MM9b5f5nFrp0-kLm_q9FNY4t-UI.roa (raw, json)
Hash identifier: qUTlQA5OzdaszUt4BlJJRwYd1dJ/AN7th60bQs8p8pc=
Subject key identifier: 30:CF:5B:E5:FE:67:16:BA:74:FA:42:E6:FE:AF:45:35:8E:2D:F9:42
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0188425DD1F9DAA8DD1355E645064191BF0A
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MM9b5f5nFrp0-kLm_q9FNY4t-UI.roa
Signing time: Mon 22 May 2023 07:30:24 +0000
ROA not before: Mon 22 May 2023 07:30:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:5d:d1:f9:da:a8:dd:13:55:e6:45:06:41:91:bf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 22 07:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30cf5be5fe6716ba74fa42e6feaf45358e2df942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:e4:a5:9d:91:74:e5:1c:db:32:e6:ae:12:
7b:a1:21:9b:80:bc:7f:51:12:3c:59:5b:4a:e3:f3:
59:80:41:1e:11:94:aa:4c:a7:84:56:ed:bc:8a:b0:
4c:84:d5:a7:90:34:66:90:a3:84:88:9d:e9:54:b9:
04:6d:ae:18:ff:bf:6b:bd:ea:59:52:23:6f:80:0c:
9a:f9:95:ce:13:6f:b2:55:22:46:86:0d:8a:40:db:
e3:03:cc:1c:43:6a:fb:db:48:3e:2b:63:e2:72:0a:
af:4b:9e:9c:75:51:a4:ee:3d:ba:43:8a:f5:97:95:
d3:ae:3a:e4:37:1d:33:1b:40:63:70:3d:fb:09:63:
4b:bb:e7:99:00:11:60:ae:1d:48:11:e9:d3:78:5a:
05:d1:e8:86:b6:4b:70:80:b4:e2:0f:74:f0:c3:88:
d1:f3:06:12:e7:3d:43:1d:0d:29:d6:71:a2:2a:84:
0b:e0:9a:79:2f:a4:c1:29:dc:43:68:73:45:08:8f:
33:c2:30:09:6e:d8:7b:d1:2f:12:bc:8f:0d:3f:52:
48:64:78:72:d6:dc:09:7d:c1:53:62:5c:f0:de:d0:
55:6c:04:57:7f:1d:da:e6:98:77:d5:fd:8f:34:08:
1d:95:07:ef:ad:cc:04:94:a2:49:2f:d2:b6:76:8e:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:5B:E5:FE:67:16:BA:74:FA:42:E6:FE:AF:45:35:8E:2D:F9:42
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/MM9b5f5nFrp0-kLm_q9FNY4t-UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.169.0/24
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:7c:e6:d2:4b:f7:38:bb:d6:53:48:1d:e9:ed:f0:11:18:b8:
7a:53:93:69:b8:16:64:5f:48:dc:1f:bf:79:c3:c9:de:6e:c0:
90:de:c3:6c:5d:d6:07:25:01:bc:58:e6:5a:c1:80:f4:1f:72:
92:ed:62:2c:1b:76:c5:c5:e2:14:fc:71:94:bf:d4:07:6f:be:
4d:27:de:7c:ff:d1:f4:2a:e5:93:f5:76:25:5a:c2:00:fa:78:
59:6e:e2:dc:70:e1:89:50:57:80:2b:f8:89:a7:83:26:fd:b8:
c6:42:a5:77:ee:59:c7:44:0b:98:1b:27:5e:02:d1:c4:f1:c2:
b3:de:6e:8c:4b:08:c7:b1:c0:7c:cc:01:6c:56:15:55:ec:b7:
29:c9:6c:85:e5:31:a7:a0:3f:c2:eb:8a:e8:53:b9:91:c4:d8:
cc:40:8d:e6:a5:59:a7:6e:49:eb:b5:53:5a:67:0c:fe:7a:4d:
b6:1b:fd:9c:b7:e7:87:3f:0e:0b:7c:e2:d9:01:ef:dd:ec:08:
f4:9c:83:33:a0:7e:4c:d2:63:0f:b7:69:8d:b8:2b:53:da:75:
92:ef:c9:f5:67:79:37:b6:0a:c7:cd:2e:b2:bb:9d:b4:75:94:
60:1c:26:1a:35:c5:21:61:fe:be:a6:bd:f8:ff:90:5d:56:26:
fb:b2:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:08 2025 by rpki-client