Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/a6vE5tq9XV78WTqCER3ACAy46e0.roa
File: a6vE5tq9XV78WTqCER3ACAy46e0.roa (raw, json)
Hash identifier: hPpKuqfG5NifVoiOHDnYFeVbIYh6XcIoGGDAfgwjewY=
Subject key identifier: 6B:AB:C4:E6:DA:BD:5D:5E:FC:59:3A:82:11:1D:C0:08:0C:B8:E9:ED
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018D8D491DDC62D9866B388DD3747D793971
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/a6vE5tq9XV78WTqCER3ACAy46e0.roa
Signing time: Fri 09 Feb 2024 09:53:15 +0000
ROA not before: Fri 09 Feb 2024 09:53:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216050
IP address blocks: 37.49.146.0/24 maxlen: 24
109.203.162.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.167.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:49:1d:dc:62:d9:86:6b:38:8d:d3:74:7d:79:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 9 09:53:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6babc4e6dabd5d5efc593a82111dc0080cb8e9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:58:0c:4b:6b:63:a0:76:4f:67:4c:27:4e:
28:c4:06:d9:49:e7:41:fa:03:c5:b5:c5:89:e7:db:
ba:8a:74:e1:f4:3b:89:6c:fc:42:2c:9d:68:bc:74:
d0:24:f3:04:fc:1f:6f:dd:3f:77:ac:b3:ea:21:01:
31:38:70:42:17:fb:56:a4:e6:f0:36:c6:be:9d:50:
32:f1:96:d1:b9:a7:53:9e:6f:c4:31:49:e1:b3:d5:
aa:67:c2:43:f7:7e:5a:c7:18:a5:fd:99:1f:11:a9:
fd:6c:31:65:8e:89:b4:44:5b:e4:4f:02:5f:de:bd:
ea:37:d5:6c:f8:1f:d9:48:2b:4a:16:b1:05:11:a3:
8f:17:71:7a:f1:7f:14:0b:d4:38:8f:2e:08:18:89:
b5:d7:2d:e5:0c:d1:3e:b9:df:1a:7f:84:2a:9f:81:
2b:83:9e:e1:d7:05:13:91:0c:db:7e:02:a4:f8:bb:
a2:ca:1b:e2:ba:37:0d:46:22:34:f7:ad:26:bc:60:
34:9e:85:be:c5:fb:51:0c:73:d0:66:34:82:ed:54:
af:d1:ed:a0:05:a8:12:39:1b:f3:e8:dd:e3:3e:41:
5a:3a:95:44:f0:c8:95:c9:6d:6a:9c:d3:04:00:6e:
ac:8c:7f:62:e1:23:f7:8d:94:5e:fe:ad:45:e8:9a:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:C4:E6:DA:BD:5D:5E:FC:59:3A:82:11:1D:C0:08:0C:B8:E9:ED
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/a6vE5tq9XV78WTqCER3ACAy46e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
109.203.162.0/24
109.203.164.0/23
109.203.167.0/24
176.46.128.0/24
176.46.131.0/24
176.46.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a8:0f:89:87:f8:91:1b:01:e6:d3:41:49:3c:8a:58:cd:23:
bc:28:9d:b0:ba:51:10:95:b1:4a:02:cf:59:a1:34:11:bf:0f:
90:c6:6c:b7:19:98:b1:7f:b8:d0:6f:68:27:d1:12:27:d3:12:
a2:c2:5b:f7:f6:62:11:b2:b9:f9:9d:86:01:51:37:b3:98:fa:
2e:9b:2f:f4:78:db:40:9f:58:3e:bb:14:1d:ab:ba:6e:c4:70:
df:42:69:0d:fd:76:75:46:9d:3e:cf:50:a1:4d:8e:92:c7:90:
b2:0d:30:5a:55:aa:60:a1:09:bf:0e:f2:51:4b:0c:23:38:28:
25:11:51:be:72:41:95:0c:87:4c:1c:f4:b7:a4:7e:5f:1e:50:
7e:12:4d:87:e8:09:6a:28:df:7e:d7:f5:bd:d1:56:8c:09:9c:
37:27:59:e5:98:68:1a:e2:fb:60:76:d6:63:47:60:03:0b:18:
d5:17:b1:60:f4:46:74:12:bc:9c:9c:dc:10:8a:ae:c2:75:c9:
10:7a:8b:56:60:e1:03:58:41:48:d3:0d:2f:a3:41:d6:63:9f:
61:1a:e5:a5:46:4b:15:e8:a0:51:87:71:26:4b:9e:8a:ed:86:
c4:60:f7:d0:12:2f:7c:a5:19:12:c7:31:d6:9b:ae:53:71:bb:
9a:5a:02:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:50 2025 by rpki-client