Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/R7DoxOv21EbV70-rjXUG_t39i0M.roa
File: R7DoxOv21EbV70-rjXUG_t39i0M.roa (raw, json)
Hash identifier: +mWww4P8X5plzp1acu7ug6l5f7xLASzkowLKwR9cTic=
Subject key identifier: 47:B0:E8:C4:EB:F6:D4:46:D5:EF:4F:AB:8D:75:06:FE:DD:FD:8B:43
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CF3A2C939ADC3FCB045786D96581192BD
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/R7DoxOv21EbV70-rjXUG_t39i0M.roa
Signing time: Wed 10 Jan 2024 13:49:40 +0000
ROA not before: Wed 10 Jan 2024 13:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 109.203.164.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:a2:c9:39:ad:c3:fc:b0:45:78:6d:96:58:11:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 10 13:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47b0e8c4ebf6d446d5ef4fab8d7506feddfd8b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:ae:49:2e:07:3d:21:84:cd:33:f3:f2:e0:
44:81:b0:5c:24:09:d4:da:52:5b:d6:56:7c:3d:b4:
ca:dd:7f:74:ca:ce:30:57:56:f6:16:d7:7c:e2:51:
26:9a:ab:48:3b:64:50:2e:0f:92:15:aa:38:bf:d2:
9e:6a:5b:08:07:99:0c:f2:4a:d4:95:17:2b:da:58:
b8:fc:95:1d:31:0c:e6:2a:a5:94:2a:f1:cb:e5:5b:
1f:57:09:af:b6:90:c0:7e:45:07:c8:a0:b7:12:dd:
f3:7f:17:87:7c:c6:da:60:69:09:bf:b1:4c:aa:3a:
0c:ad:a3:65:f4:a1:aa:38:fd:c3:38:50:af:8e:36:
4b:79:2d:dd:0b:94:34:18:a5:2b:ea:69:29:a4:74:
2a:4c:66:d7:6b:04:94:55:2e:8c:be:70:16:6e:a5:
9e:e5:9b:da:fd:c6:b6:e7:82:3a:01:4f:5e:f9:0d:
38:c4:fb:1c:fe:19:b8:ee:43:b7:96:0f:86:60:d6:
61:23:a5:79:0e:00:65:37:5e:6a:b9:c6:42:26:f2:
e5:ac:83:bd:7b:6c:e6:46:c5:37:dd:5a:36:d7:d4:
3b:3a:7c:92:9a:4d:b6:2e:de:ee:a5:54:31:7d:25:
71:5b:ad:ee:8e:d9:b9:3b:6e:ed:cd:f1:d7:9a:14:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:E8:C4:EB:F6:D4:46:D5:EF:4F:AB:8D:75:06:FE:DD:FD:8B:43
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/R7DoxOv21EbV70-rjXUG_t39i0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
37.49.151.0/24
94.74.173.0/24
109.203.164.0/24
109.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:8c:c1:64:5e:8f:73:71:85:78:27:d7:0e:89:77:94:9c:bc:
11:2e:06:12:06:7d:f2:5a:51:86:b5:e8:00:3d:04:d4:ec:4d:
88:b1:a4:1d:76:0a:61:bb:48:07:7c:6e:f4:61:ec:dc:a0:f3:
53:fa:4c:fa:85:60:c0:46:cd:f4:6b:74:45:b6:0f:24:2a:55:
bd:d2:89:cc:19:5d:5e:92:07:de:25:fa:1c:dc:e1:ee:3b:24:
20:b3:09:9a:11:67:24:ca:8e:5f:1e:db:ce:9f:37:a7:33:03:
3f:fa:61:10:33:1b:27:d2:00:db:45:78:eb:57:db:6d:85:be:
53:8e:dd:cc:ce:65:71:be:16:54:48:7a:a1:d7:d6:53:2e:0e:
b3:95:bc:ae:e3:bc:6a:b2:30:0f:78:b4:8a:d6:b3:fe:26:80:
82:b6:35:6f:40:ae:6b:de:fa:75:22:3c:de:8c:8a:ad:97:b3:
d5:09:7e:98:0c:95:d5:00:bc:68:ef:81:b3:19:31:9f:e4:15:
99:32:63:97:65:1d:15:c9:4b:1d:c2:8b:86:80:45:9d:1c:10:
51:4f:59:15:23:d3:11:df:81:d9:9b:ef:74:ff:e6:d9:ef:ad:
95:3d:73:e9:26:4f:1c:0d:ea:55:69:37:cd:e1:3c:96:06:f4:
05:4a:45:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:16 2025 by rpki-client