Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NWV2jprhE9OcmpLeLKdoHFOGk8E.roa
File: NWV2jprhE9OcmpLeLKdoHFOGk8E.roa (raw, json)
Hash identifier: 4BaNdTp+nJB46vs4aTKuzVJ9BFp3RvjHBPx0NfhAb8c=
Subject key identifier: 35:65:76:8E:9A:E1:13:D3:9C:9A:92:DE:2C:A7:68:1C:53:86:93:C1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018BB717E0E1EFF3BA77E36C7348BE87EA1A
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NWV2jprhE9OcmpLeLKdoHFOGk8E.roa
Signing time: Fri 10 Nov 2023 02:37:57 +0000
ROA not before: Fri 10 Nov 2023 02:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.149.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:17:e0:e1:ef:f3:ba:77:e3:6c:73:48:be:87:ea:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 10 02:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3565768e9ae113d39c9a92de2ca7681c538693c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:94:69:ac:50:89:38:f6:74:f0:f4:99:ea:77:
79:3b:53:86:0d:dc:c3:c0:eb:50:96:29:3d:32:06:
7b:1b:2e:f3:40:77:be:67:c5:f8:29:45:50:15:f4:
0e:12:d4:37:52:e6:31:ed:5f:25:1b:83:f8:95:3c:
38:b2:d5:3f:44:c3:b8:3e:3c:e2:b7:c0:42:57:c7:
f6:30:69:ea:45:2e:82:da:ca:9b:d1:7e:27:82:9d:
42:24:fb:3a:eb:bd:12:75:43:92:f6:31:00:fd:dd:
77:5c:19:cc:76:83:a9:c5:8f:70:1e:bb:c8:00:2a:
5e:fa:a5:cc:a0:66:97:6f:26:24:4a:5a:69:62:68:
1b:22:a8:f0:f3:d0:23:26:1a:e6:65:0f:fa:c7:86:
c1:37:da:a7:71:24:b0:71:b5:43:aa:d0:3e:53:1b:
c1:35:38:37:bf:4a:c4:bf:f4:55:e5:de:ce:48:3d:
f3:64:12:86:03:48:1b:8d:89:74:ae:ae:c2:ab:6c:
7b:8b:4d:95:bc:59:14:54:19:ce:de:2e:bb:e9:93:
76:6d:8a:91:4c:bb:54:6d:4b:ab:3c:c3:31:a6:44:
26:12:3b:27:e7:9b:71:38:0f:b0:5c:ee:e4:35:d4:
6a:fa:45:cc:56:ce:9d:48:8c:a0:06:24:a2:f0:7f:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:76:8E:9A:E1:13:D3:9C:9A:92:DE:2C:A7:68:1C:53:86:93:C1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NWV2jprhE9OcmpLeLKdoHFOGk8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.129.0-176.46.130.255
176.46.133.0-176.46.136.255
176.46.138.0/23
176.46.141.0-176.46.143.255
176.46.146.0/24
176.46.148.0-176.46.150.255
176.46.153.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:3b:a3:37:0d:18:c4:6b:07:36:4a:9f:cf:2b:48:b9:ea:b6:
05:0b:7c:f8:a6:2d:26:16:f0:13:b1:f9:3a:04:d8:70:24:c5:
2a:fd:74:d0:5c:c3:59:6e:59:d4:39:1c:78:b6:36:ce:7b:b2:
7f:e6:09:d7:66:fc:08:ff:6e:b6:40:bc:c8:c2:dd:00:55:70:
c1:01:6d:94:14:33:73:e9:a3:93:9f:ed:69:05:b1:9b:42:cb:
24:cf:28:56:0e:d7:15:02:35:8b:a4:51:ea:de:72:6e:06:d5:
6e:ea:00:4d:f4:e6:9e:c9:8a:8a:e5:81:c1:d0:1b:64:58:28:
b3:3f:99:2e:fc:7e:9f:ce:05:c3:8e:38:01:0d:e3:a5:a6:e5:
00:64:7e:1a:6a:81:fe:a7:6a:bf:fa:75:c4:20:ef:94:e7:5a:
d6:10:9e:2f:47:92:ae:d9:64:78:25:c3:87:5b:cc:da:a2:fc:
23:b4:c2:d3:af:78:bb:aa:09:bd:4f:6b:16:c7:31:5a:35:ad:
93:20:03:8a:ea:68:77:2a:34:01:8b:23:4e:2d:51:8c:86:b1:
ac:11:eb:c8:dd:65:22:f0:71:70:f0:37:99:5e:fa:aa:dd:4c:
fe:13:b1:45:9b:cc:6c:0c:7a:66:34:59:b6:e0:67:bb:4c:5b:
26:95:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:56 2025 by rpki-client