Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ehI-VRTVSOnkARWWyBKNTbXUFXM.roa
File: ehI-VRTVSOnkARWWyBKNTbXUFXM.roa (raw, json)
Hash identifier: /UEJ7iybRspxdjx4IcW3Jr+wn0fH8UGwMwL/1M7QJ84=
Subject key identifier: 7A:12:3E:55:14:D5:48:E9:E4:01:15:96:C8:12:8D:4D:B5:D4:15:73
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0189F85B6C8BDFF2348F86FB02C644604463
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ehI-VRTVSOnkARWWyBKNTbXUFXM.roa
Signing time: Tue 15 Aug 2023 08:41:28 +0000
ROA not before: Tue 15 Aug 2023 08:41:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:5b:6c:8b:df:f2:34:8f:86:fb:02:c6:44:60:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 15 08:41:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a123e5514d548e9e4011596c8128d4db5d41573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:6b:ca:bd:14:4e:1e:aa:d3:47:1e:7d:f4:
ef:b2:a5:16:78:7a:5f:14:ca:07:79:7b:ce:c7:e5:
97:0e:a3:81:b2:fe:d5:6d:de:1a:9e:48:e5:c5:e2:
3f:4f:51:e5:89:8d:5c:37:6a:29:bf:53:b7:2a:2a:
80:ed:9f:d9:6a:e3:1f:b2:3f:6c:a1:ed:0c:4b:c3:
fe:cf:a5:f5:20:70:e1:1a:97:c9:1a:83:fd:76:67:
dc:85:2b:30:9b:da:27:12:25:ae:c7:7d:50:8d:ca:
0f:45:e9:86:3f:22:db:2f:90:f7:36:e3:bd:22:b9:
d5:75:6d:3a:c4:26:98:04:a4:84:58:3d:35:ba:17:
77:7a:6d:60:35:21:6c:06:73:fd:62:d5:49:de:1d:
77:71:e6:a2:b1:9a:e2:e7:25:3c:92:bf:bb:c2:e4:
5f:ec:8a:55:c6:fb:69:9f:0d:e5:9d:a1:dd:a0:41:
5c:4c:f5:78:cb:a8:f1:84:17:a6:14:61:5d:cf:dd:
44:43:56:69:5c:2f:77:8e:b1:76:fa:41:e1:f1:a6:
b7:31:d7:77:fd:9b:c2:6d:05:63:ca:84:f0:b7:a6:
b1:92:f8:36:77:46:b5:73:9c:43:b6:76:15:2c:38:
30:1b:5d:0d:93:bd:be:a0:fe:b4:af:ad:29:cd:98:
57:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:12:3E:55:14:D5:48:E9:E4:01:15:96:C8:12:8D:4D:B5:D4:15:73
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ehI-VRTVSOnkARWWyBKNTbXUFXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
94.74.140.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.187.0/24
109.203.164.0/24
109.203.166.0/24
176.46.128.0/24
176.46.131.0-176.46.132.255
176.46.137.0/24
176.46.140.0/24
176.46.143.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
90:29:94:e5:75:0a:ef:d2:e9:5d:2f:05:47:21:d7:ad:b3:fb:
89:d1:e0:14:a5:c7:6a:4b:ee:e6:47:2b:06:67:41:b6:62:89:
81:88:7c:9d:3b:3c:00:ac:98:03:c3:e1:b0:70:be:d1:91:32:
88:88:36:11:53:7e:f8:8f:c1:da:62:52:d8:24:56:6e:e1:46:
31:ad:e2:e5:db:3c:e6:27:81:70:e1:8d:0d:c3:41:57:2d:aa:
6b:8d:51:79:97:bd:a0:b9:94:ab:13:58:13:36:fb:5e:e3:c2:
7f:29:6c:7d:3e:be:13:21:a3:5f:a2:e1:58:ee:10:ec:3d:8f:
32:16:27:36:1b:23:c3:cb:a8:d3:4f:88:68:f9:bf:0b:0c:60:
45:b7:00:79:19:0b:c7:6d:c4:6f:3f:ac:5e:40:1f:5c:e9:f8:
83:ba:64:62:d3:a6:95:2c:69:cb:2a:e7:ec:b6:4c:84:52:59:
78:21:31:c4:34:03:08:29:14:02:cf:5b:4d:8d:54:ff:46:7c:
63:e9:94:9e:c9:02:f8:94:bd:f3:2f:ed:9c:91:0f:0e:54:2e:
72:f8:a7:32:32:89:27:34:a9:5a:a0:f8:7f:37:3e:19:1a:02:
94:37:aa:f7:08:9e:c1:ec:dc:85:f6:8d:97:b8:fd:c2:ff:f7:
1c:8d:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:00 2025 by rpki-client