Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZVr34FIPT8ovmAQ-GasxM4tXyR0.roa
File: ZVr34FIPT8ovmAQ-GasxM4tXyR0.roa (raw, json)
Hash identifier: dIe797rhsAQGv/81jVAwF9KoGJIlnQGLCxFz3G8JNyA=
Subject key identifier: 65:5A:F7:E0:52:0F:4F:CA:2F:98:04:3E:19:AB:31:33:8B:57:C9:1D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018BBA0985DB2E19A95009FABC23CCC0D443
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZVr34FIPT8ovmAQ-GasxM4tXyR0.roa
Signing time: Fri 10 Nov 2023 16:21:08 +0000
ROA not before: Fri 10 Nov 2023 16:21:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
37.49.150.0/24 maxlen: 24
37.49.149.0/24 maxlen: 24
37.49.148.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:09:85:db:2e:19:a9:50:09:fa:bc:23:cc:c0:d4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 10 16:21:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655af7e0520f4fca2f98043e19ab31338b57c91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:05:70:6e:80:fc:30:38:c1:a3:61:67:06:
2d:6e:47:4e:f7:44:b1:10:64:56:6f:82:ce:10:c9:
7c:31:09:77:8f:90:99:1f:d5:c3:bf:31:82:22:df:
f0:36:44:06:49:91:f1:78:27:d3:f7:d5:68:33:78:
22:44:4b:3c:22:fb:42:0f:9f:59:06:91:de:8c:14:
1b:d0:04:60:27:20:80:b9:56:f0:80:e9:ed:ea:14:
36:38:ae:d9:8d:21:52:07:28:ef:2c:51:ad:a7:51:
1c:ca:d7:3f:f5:69:dc:cd:3f:b6:83:45:65:be:cd:
0e:cd:cc:c5:74:06:10:13:23:1a:39:31:50:d6:10:
66:c6:1e:2c:55:3d:75:18:d8:84:8b:f5:df:c5:20:
52:81:e3:b9:3f:92:f4:21:e9:95:90:95:63:92:28:
2a:21:de:0a:20:94:c3:f4:e2:b7:16:80:1e:fe:fb:
77:4c:d7:6c:e1:01:4d:44:6a:4c:47:6e:b5:7c:41:
40:c0:37:54:b0:d9:70:51:19:79:ed:8b:11:2f:82:
55:34:17:7d:70:38:ef:f1:b7:c4:42:b4:1f:ad:2d:
cd:06:78:9c:f6:58:67:27:4d:40:a9:f1:05:64:77:
6c:8d:a6:5c:7b:fe:41:62:46:7e:62:95:b4:aa:c6:
2d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:F7:E0:52:0F:4F:CA:2F:98:04:3E:19:AB:31:33:8B:57:C9:1D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZVr34FIPT8ovmAQ-GasxM4tXyR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/24
37.49.146.0/24
37.49.148.0/22
94.74.137.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:6b:43:92:d7:fe:74:15:de:f6:f0:ea:8c:54:31:01:b0:65:
73:1f:2b:71:aa:86:cb:92:8e:6e:37:26:38:b7:2b:63:2c:ca:
52:87:10:a8:c1:6e:ee:2c:1a:4e:82:39:c4:48:42:08:79:16:
0b:45:3e:fc:d3:10:59:e3:2d:02:32:bd:f0:48:70:c1:a8:92:
c3:c5:3a:96:96:5d:1e:7b:a1:99:f3:2f:f7:31:6c:88:f9:1f:
89:a8:b7:c4:fa:e8:d9:d5:a0:03:1f:4a:c9:2d:77:f7:f3:ca:
1e:ee:9a:73:ce:b8:34:62:d9:11:55:95:3e:15:62:30:26:02:
26:e4:83:c9:76:de:d7:c5:eb:21:1e:83:18:18:be:37:79:3e:
ab:98:c6:1f:18:f2:7d:4b:02:0e:98:d9:b7:68:ee:d5:f8:9d:
80:b2:eb:f4:86:7e:d1:cb:ff:49:d0:42:24:0b:28:1e:43:84:
8e:60:02:97:3d:89:c3:20:03:97:eb:24:f9:35:c3:2d:e1:13:
4e:4e:ea:2d:18:0c:55:5a:49:db:28:c1:40:e1:53:2c:29:f7:
11:35:dd:64:8b:18:5e:1c:63:0f:7f:93:ff:5e:94:2e:57:dd:
d7:a3:fe:64:fa:20:7d:a5:12:02:e8:06:ab:01:5e:51:12:f9:
ee:6a:22:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:56 2025 by rpki-client