Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NpWz1E4Gbz8gmT4pLsGupW_LSS8.roa
File: NpWz1E4Gbz8gmT4pLsGupW_LSS8.roa (raw, json)
Hash identifier: f65DKn/sf8wxA+bWSf/JGx7j2eiNflSoMeJNPKwj7x8=
Subject key identifier: 36:95:B3:D4:4E:06:6F:3F:20:99:3E:29:2E:C1:AE:A5:6F:CB:49:2F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018FBE6B6E40129CAE8D5C6724299365866F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NpWz1E4Gbz8gmT4pLsGupW_LSS8.roa
Signing time: Tue 28 May 2024 08:57:42 +0000
ROA not before: Tue 28 May 2024 08:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:be:6b:6e:40:12:9c:ae:8d:5c:67:24:29:93:65:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 28 08:57:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3695b3d44e066f3f20993e292ec1aea56fcb492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4b:02:8e:50:ea:ee:83:94:ed:2f:1e:71:b9:
f0:21:9c:63:47:b6:6b:d2:ca:f8:68:6d:33:fa:31:
c6:81:f1:96:7a:a1:1b:61:4a:f5:ca:fe:a3:f0:8b:
c4:e7:21:47:b9:37:d0:a0:0e:43:92:24:b0:5e:92:
77:9c:5e:f6:c0:7c:32:55:a8:cf:af:c2:fd:dc:c0:
02:64:ab:c0:f9:61:01:5f:0e:0c:e4:1d:ff:84:40:
63:dc:82:50:db:bf:13:10:68:a1:c3:e7:c6:45:b5:
db:71:a3:00:a4:71:b5:7e:07:59:5c:32:0d:51:30:
6d:f0:36:04:f1:b7:a5:33:4c:2a:8e:e0:15:92:3f:
f4:a1:65:14:a7:3a:a6:d6:70:28:af:d3:04:48:b1:
ab:4c:2f:09:a2:c1:b6:43:a8:08:6e:c9:ee:db:f0:
2e:ca:35:a0:78:53:ee:96:b7:28:46:33:02:2e:09:
39:90:6e:3f:a4:d1:f3:cf:21:dd:58:66:e3:37:0d:
de:42:ae:c0:69:2c:d1:7f:13:e2:87:69:83:4b:dc:
fd:6d:d5:63:20:60:af:8c:29:f1:5b:d4:a8:ba:1f:
14:9d:df:a2:17:c7:07:a6:6d:dd:a5:9d:41:f5:f7:
d5:88:fb:eb:3d:1c:f2:67:4d:b2:3e:13:39:82:6f:
38:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:B3:D4:4E:06:6F:3F:20:99:3E:29:2E:C1:AE:A5:6F:CB:49:2F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/NpWz1E4Gbz8gmT4pLsGupW_LSS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
37.49.151.0/24
94.74.147.0/24
94.74.168.0/24
94.74.173.0/24
176.46.129.0-176.46.130.255
176.46.133.0-176.46.135.255
Signature Algorithm: sha256WithRSAEncryption
41:59:21:da:99:3f:c4:a9:70:a6:e9:1c:04:97:3f:d6:83:e5:
44:eb:c0:49:b3:28:2f:aa:e3:c5:8b:f0:47:0b:62:9e:51:8d:
9b:73:3e:22:17:df:2c:fd:1b:a6:23:8a:4d:50:04:20:e3:12:
01:92:77:b7:c1:81:77:32:0f:6d:95:d2:8e:e3:a0:73:72:91:
6e:89:40:dd:ec:b3:22:03:d9:65:8d:0c:02:66:16:d8:7a:84:
3d:6f:d3:82:19:11:5e:02:5a:eb:13:5e:a8:b3:ee:6a:ec:06:
05:0c:89:09:e9:03:58:4f:ed:9f:0a:45:30:56:e8:eb:69:69:
5c:33:4b:90:59:d8:78:19:8b:96:1c:cd:a2:f9:b0:88:d0:40:
97:88:ae:a6:c0:b2:0e:35:60:a1:c2:c4:d5:d2:6f:63:a5:d5:
04:eb:e3:20:95:33:91:ca:44:3b:b1:83:f5:de:3e:d1:f9:ce:
77:88:c7:7b:60:c3:a8:b2:8d:74:7b:2e:67:f2:29:fb:c5:6e:
e2:58:ed:ec:04:4a:95:6b:df:ec:63:81:84:a3:09:de:05:da:
c2:90:7b:08:a7:cc:0a:20:38:47:4b:d0:73:43:13:83:7f:1b:
6a:e7:fb:f7:9f:af:32:44:64:24:ef:0b:59:32:9a:2e:f5:9c:
28:2a:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:22 2025 by rpki-client