Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZgyuv-0nBbZ2yWqE1p8ijBfLnc.roa
File: SZgyuv-0nBbZ2yWqE1p8ijBfLnc.roa (raw, json)
Hash identifier: 7nyHNnyM59jKxQnx1zE/tqnvVKJ11V17BP/nCk7c0zk=
Subject key identifier: 49:98:32:BA:FF:B4:9C:16:D9:DB:25:AA:13:5A:7C:8A:30:5F:2E:77
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018C0166299F6C478C6C82DA5B6BBCD3DF7C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZgyuv-0nBbZ2yWqE1p8ijBfLnc.roa
Signing time: Fri 24 Nov 2023 12:55:21 +0000
ROA not before: Fri 24 Nov 2023 12:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216050
IP address blocks: 109.203.165.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:66:29:9f:6c:47:8c:6c:82:da:5b:6b:bc:d3:df:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 24 12:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=499832baffb49c16d9db25aa135a7c8a305f2e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:12:8c:35:ca:af:eb:1a:ce:91:f1:b8:73:10:
54:fb:85:ad:f4:1b:43:ec:68:3a:82:e0:87:40:38:
b1:49:0e:63:19:da:f7:46:10:e1:ff:4d:18:bf:2a:
f3:5b:8e:11:18:96:21:94:26:74:03:f4:84:ca:b1:
85:8d:7c:6d:78:01:8b:de:d8:0f:fb:b9:18:f9:8e:
68:2c:33:7a:ae:e9:5a:2f:81:9a:08:85:d7:f5:4f:
24:90:12:20:c8:b3:00:3c:fb:a5:bf:62:46:6f:6f:
2a:27:a5:d7:84:05:94:eb:4c:8f:f7:1c:25:4b:d3:
6e:25:b6:73:99:21:e9:2c:b9:ce:50:79:d4:7e:14:
9d:eb:21:80:a9:6f:42:82:7a:20:6f:80:89:9a:23:
2f:7b:c3:2b:8f:e4:81:e0:40:ab:8c:63:e3:51:d3:
b8:ca:70:f5:6e:ab:5e:87:06:6f:f0:dd:10:6f:f1:
40:80:b7:99:df:18:30:2f:3d:5d:94:92:ae:a0:15:
69:f5:76:36:19:9b:69:78:d7:41:10:73:7c:38:f1:
45:f2:d8:01:ba:4e:87:73:d2:07:4b:20:64:71:3b:
75:e1:b2:b0:96:28:96:a7:7b:c7:83:ce:75:02:4a:
c6:04:66:fa:e9:6c:d2:97:a2:72:e0:82:bd:fd:b2:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:32:BA:FF:B4:9C:16:D9:DB:25:AA:13:5A:7C:8A:30:5F:2E:77
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZgyuv-0nBbZ2yWqE1p8ijBfLnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.162.0/24
109.203.165.0/24
109.203.167.0/24
176.46.128.0/24
176.46.131.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6b:4c:20:1e:31:ec:4d:0a:5a:29:03:86:fc:f8:d6:49:d7:
85:01:79:d6:98:2e:1e:7c:96:4c:da:69:79:5a:7d:01:af:14:
ec:74:64:cd:9d:3c:a6:92:27:1c:ec:84:9b:a7:f7:71:cb:0a:
38:13:7f:bc:8a:40:fc:92:02:b0:e8:a3:45:2a:e9:6b:0c:78:
0c:9a:d8:01:90:4f:15:39:29:6c:b1:25:db:e8:84:6f:6d:45:
41:aa:a1:40:a4:71:c8:b9:8a:92:e9:12:db:c8:48:c0:c1:4c:
7d:4f:f0:db:10:46:1d:dc:eb:16:4f:13:02:8b:2b:bf:b7:2a:
83:bb:b1:27:d3:10:e4:c4:b0:c3:86:7c:75:27:de:52:ba:04:
a0:2d:51:9b:17:07:53:f3:f6:02:d5:ce:37:8b:06:e8:82:e9:
12:1a:bb:6c:40:f3:27:e0:6c:39:fb:9f:9f:5c:3f:6e:9a:15:
d2:42:38:7e:f5:f5:39:e0:66:d1:0f:45:23:3e:69:c8:95:f2:
d8:52:19:a4:3f:eb:1b:db:f8:0e:b4:6f:0c:42:a4:46:1b:53:
03:46:65:03:9d:1a:38:b5:51:50:9e:10:52:54:5c:97:62:39:
2f:fa:e5:07:d9:ee:12:90:cd:01:a8:3a:42:83:fe:fe:f9:77:
0a:5d:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:04 2025 by rpki-client