Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Z4GS_5Js9b2iLMq4v-WgzC40WnA.roa
File: Z4GS_5Js9b2iLMq4v-WgzC40WnA.roa (raw, json)
Hash identifier: QCht0hhZg2bJd8ZfPKHrK9a8NIaB3+182V55c0YNLcc=
Subject key identifier: 67:81:92:FF:92:6C:F5:BD:A2:2C:CA:B8:BF:E5:A0:CC:2E:34:5A:70
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01885B56F19DBE23B3FCE23A59FBFB9D8E84
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Z4GS_5Js9b2iLMq4v-WgzC40WnA.roa
Signing time: Sat 27 May 2023 03:53:24 +0000
ROA not before: Sat 27 May 2023 03:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:56:f1:9d:be:23:b3:fc:e2:3a:59:fb:fb:9d:8e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 27 03:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=678192ff926cf5bda22ccab8bfe5a0cc2e345a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:01:d4:d2:b0:09:93:87:96:83:c3:73:c7:
30:d9:a5:0f:7b:38:64:ab:40:ba:c7:ea:f7:84:c7:
23:79:6a:3f:f0:12:7e:1d:bb:06:6f:05:0f:39:78:
44:69:36:10:f7:bd:e4:41:46:8a:d3:89:c2:e5:c9:
31:37:48:ed:82:71:12:c2:98:1b:e4:2e:69:ca:ac:
32:2f:56:34:83:c6:11:7e:47:0f:60:89:fb:cf:7e:
5d:5b:eb:b8:db:26:eb:ab:7b:d2:ad:70:33:69:56:
7d:af:5f:de:15:0a:4d:28:ee:92:04:d3:36:fd:0c:
cb:08:2c:18:32:5a:e4:0b:7d:2f:7d:ad:c9:10:a7:
71:b0:42:7b:81:b1:28:51:fa:4b:88:28:a8:21:c2:
46:ce:40:83:df:ad:99:d3:05:b7:68:3f:ef:1f:71:
98:ff:fa:b5:13:bd:89:1a:00:98:17:0d:f2:9d:b2:
37:37:38:da:31:91:7a:6c:8a:34:fa:5c:6f:94:fc:
fd:a1:8e:11:bb:c8:b5:5b:eb:46:80:67:87:66:29:
0f:a6:72:29:c8:bc:6b:84:da:9e:14:4a:16:be:4a:
d5:9b:f3:5c:d8:79:f7:75:3c:f1:85:b5:6d:ef:63:
a0:4f:f2:70:4c:44:70:64:c6:b1:c0:2a:66:45:f6:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:81:92:FF:92:6C:F5:BD:A2:2C:CA:B8:BF:E5:A0:CC:2E:34:5A:70
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/Z4GS_5Js9b2iLMq4v-WgzC40WnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/20
Signature Algorithm: sha256WithRSAEncryption
20:ff:71:78:75:54:92:8d:83:fe:ff:cc:b9:8c:17:89:35:33:
44:be:7d:b7:d3:fc:b6:3e:cb:0d:2b:67:1b:e7:bc:08:e5:ca:
17:c8:b6:71:30:40:bf:e3:d8:14:60:ef:af:25:47:a1:e7:a6:
c7:1f:72:36:ec:e1:d2:2d:1c:cc:58:8c:4e:a0:63:41:94:ac:
d6:be:a4:0d:ad:66:67:1b:92:0f:10:c6:47:28:58:27:02:29:
6a:62:12:32:37:42:54:3e:e9:3b:db:fc:e4:4d:92:e2:00:bf:
64:f6:1f:df:b8:d8:c0:b7:7f:d1:fb:92:31:82:f4:bd:37:3d:
26:e0:11:62:9e:38:86:4a:7b:1f:e5:c2:68:ee:aa:6a:8f:84:
81:cc:74:70:d8:9c:6e:56:f3:64:33:80:23:50:4b:11:87:54:
de:a5:25:c8:40:cb:fe:e3:bb:a4:8f:d5:ba:18:0b:76:f8:2f:
08:9d:09:ca:97:d4:71:fd:ec:b0:a3:0f:90:15:d1:a5:13:83:
89:b7:36:de:81:70:e0:40:0d:86:81:6f:d2:ed:96:86:42:df:
1e:83:36:e5:b4:e5:87:2d:56:49:84:71:fc:9d:75:8f:1b:8f:
9d:b8:98:0a:c7:6c:7a:08:42:26:73:39:16:cb:eb:6c:c0:48:
af:d2:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client