Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dB0wVtIV5j9kSv7shLnUz6xM8tI.roa
File: dB0wVtIV5j9kSv7shLnUz6xM8tI.roa (raw, json)
Hash identifier: /IaCkdTg7ApHX8EkLCcfpds9tSQm9UprzX75fKmnnOs=
Subject key identifier: 74:1D:30:56:D2:15:E6:3F:64:4A:FE:EC:84:B9:D4:CF:AC:4C:F2:D2
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018987B0A213CFDFC6BDB573A030BC48B021
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dB0wVtIV5j9kSv7shLnUz6xM8tI.roa
Signing time: Mon 24 Jul 2023 11:37:27 +0000
ROA not before: Mon 24 Jul 2023 11:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:b0:a2:13:cf:df:c6:bd:b5:73:a0:30:bc:48:b0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 24 11:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=741d3056d215e63f644afeec84b9d4cfac4cf2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:cd:ec:69:e3:05:ea:0b:cb:27:dc:d9:2a:
28:bd:b4:f3:95:2b:e1:7a:b7:62:c5:3a:1f:4e:02:
c6:a1:89:9e:79:12:66:f1:80:c6:c5:a7:19:41:c3:
bf:90:27:23:f5:61:31:92:c9:e7:91:2c:1a:e9:75:
37:4e:41:45:d0:c7:0b:18:4b:60:01:c5:65:87:84:
f3:28:aa:52:0f:33:64:1e:8e:5d:d2:4b:df:ca:e8:
61:02:f3:0e:05:cb:24:40:64:30:e1:61:2b:8e:eb:
7d:a0:2d:bc:08:7f:82:ad:c2:6a:1b:0b:ab:42:ee:
01:50:62:22:15:ad:82:3f:e7:16:e2:7b:62:34:5c:
8d:35:06:6a:8b:19:4f:44:6b:22:50:54:a0:84:e0:
20:a2:b5:3e:39:41:ca:cb:8a:7d:f6:aa:75:7b:11:
f8:d1:3a:49:74:dd:47:9c:01:cd:0f:fa:d1:ff:3d:
d6:2a:33:53:08:19:69:c3:4e:63:46:65:fd:f6:d7:
2f:69:f8:25:e4:7c:6a:ce:dd:3d:61:18:34:ee:9a:
ec:92:43:07:4d:e6:7d:c9:52:ba:75:77:f9:ee:cb:
6a:1b:9a:31:ca:bd:df:98:bd:c8:2e:c2:35:be:34:
54:49:4d:41:98:ec:e8:68:42:d4:22:11:58:4c:6f:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:30:56:D2:15:E6:3F:64:4A:FE:EC:84:B9:D4:CF:AC:4C:F2:D2
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/dB0wVtIV5j9kSv7shLnUz6xM8tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.168.0/23
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/19
Signature Algorithm: sha256WithRSAEncryption
07:02:4c:77:4a:4d:ea:30:10:b4:44:a7:2e:d7:67:4c:c9:bc:
93:a1:a3:1d:9a:3f:57:03:b9:a8:dd:d0:54:00:9f:26:4a:68:
aa:72:69:fd:80:fd:e3:e7:22:46:58:aa:09:a4:63:fe:1b:ee:
dd:c0:19:a8:e6:da:77:47:76:d2:78:9c:f5:b4:a7:dd:82:cb:
17:5c:e7:78:41:93:39:2b:a6:f7:c5:7c:ca:49:58:4d:66:7c:
ec:e5:9c:8d:6d:be:34:55:45:0a:9d:60:8d:41:e9:6f:d2:6e:
de:21:c5:56:d9:f9:93:7f:c8:8a:eb:c8:c7:5b:48:b6:ed:69:
17:ff:d4:44:a7:6a:8b:d4:a1:65:c4:40:55:27:52:76:6f:74:
6f:13:c9:82:02:3b:f6:08:c9:c0:92:de:0e:45:ca:e9:dc:9f:
a2:23:24:f0:fe:41:8d:4a:78:45:70:2f:32:a3:df:f2:cd:11:
b9:d9:46:b1:84:36:4c:ca:86:7e:89:e6:b9:be:15:c9:28:91:
18:f0:55:e0:2d:f4:70:46:fe:73:36:e4:93:8a:a2:a7:51:9e:
b7:a2:43:de:53:29:53:27:17:06:73:27:57:90:ad:5d:75:91:
a7:84:ff:60:d8:cd:39:5e:86:bc:0c:48:bf:83:a6:0f:b1:c9:
2c:a7:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:15 2025 by rpki-client