Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hiw9x9M7apKuRetj8qEUAbmQtf0.roa
File: hiw9x9M7apKuRetj8qEUAbmQtf0.roa (raw, json)
Hash identifier: JkGusM+dPuvy9HsNZt/bKA3hTyV4JBTt3zO2F1piB10=
Subject key identifier: 86:2C:3D:C7:D3:3B:6A:92:AE:45:EB:63:F2:A1:14:01:B9:90:B5:FD
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0195607C1719BAD7206F5FD75C7963422A60
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hiw9x9M7apKuRetj8qEUAbmQtf0.roa
Signing time: Tue 04 Mar 2025 09:28:19 +0000
ROA not before: Tue 04 Mar 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:7c:17:19:ba:d7:20:6f:5f:d7:5c:79:63:42:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Mar 4 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=862c3dc7d33b6a92ae45eb63f2a11401b990b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:da:5a:29:15:d2:86:df:c7:e6:ea:2f:50:0d:
49:af:7b:a7:8d:53:36:9e:4b:20:12:15:cd:0b:60:
f4:1d:cd:ff:b8:e5:fc:ac:a4:00:9a:48:7c:96:d2:
3b:e3:b5:1d:32:b9:b5:22:81:fb:25:59:5d:6b:ae:
cf:47:64:45:da:8f:75:a3:4a:70:c3:73:61:ab:dc:
df:94:35:da:c2:94:24:39:01:fa:2f:93:7e:67:96:
6a:f9:9a:8f:4e:e1:c4:5e:01:49:44:c4:a5:17:28:
66:01:f7:e2:00:6e:52:92:a7:76:8d:a5:e1:06:ef:
39:85:04:dc:b7:c9:60:25:14:64:6a:9c:b3:5f:26:
34:58:94:74:ca:2c:bc:70:2f:b3:2a:84:a0:fa:a5:
87:fa:00:9a:32:57:42:f7:23:16:98:06:a7:19:20:
6c:9e:03:11:92:2d:36:89:25:95:6b:5c:77:af:a4:
b2:c9:8c:3a:57:d2:ea:4f:dd:d3:d1:c4:0f:83:8b:
50:5f:cd:18:f9:da:db:de:eb:d9:72:ac:ce:ee:e6:
81:9d:b6:f8:a2:5c:bd:ec:bb:32:2d:ec:60:b1:e0:
36:1b:8a:78:b7:38:58:86:59:eb:13:e9:41:59:4c:
99:21:4c:e5:9f:f5:a9:c7:e6:66:6c:86:77:4f:a4:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:3D:C7:D3:3B:6A:92:AE:45:EB:63:F2:A1:14:01:B9:90:B5:FD
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/hiw9x9M7apKuRetj8qEUAbmQtf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.169.0/24
94.74.171.0/24
94.74.182.0/24
94.74.191.0/24
109.203.163.0/24
176.46.136.0/24
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.144.0/24
176.46.150.0/24
176.46.152.0/24
176.46.155.0/24
176.46.157.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
9d:a3:76:91:66:b3:45:76:e1:94:80:54:8c:0f:aa:f9:2a:9e:
c0:2c:3e:4b:2a:f6:e8:26:6c:d3:88:d5:9e:69:c1:e8:17:8e:
74:0b:70:30:ab:86:d0:0f:8b:9e:84:c3:3e:6f:38:5d:0d:55:
27:52:81:4c:a8:f9:5e:35:a2:d3:5f:97:2c:0f:fc:4f:9e:95:
5f:ff:4b:75:ec:79:96:8e:44:1c:8a:39:da:6b:b4:49:0a:21:
8b:b7:c3:1f:5e:48:f1:79:52:68:2e:39:b8:18:dd:ae:2a:7c:
dc:b4:68:4e:08:3c:7a:4f:37:2b:a4:fc:02:d1:6b:63:bd:70:
23:89:c5:0e:39:ac:09:48:ed:67:df:66:c4:86:d9:3b:52:63:
09:dc:54:22:8a:7b:af:53:89:3b:66:0f:d6:b6:38:9f:c0:39:
3d:fa:95:fb:e1:5e:ec:33:2c:f8:94:2b:a7:ab:ca:45:13:2e:
e6:51:d7:79:e1:ea:58:ba:8b:b5:61:0a:89:61:da:0e:15:2b:
8d:9a:2e:ae:27:b3:8e:96:4a:6c:71:26:0b:08:21:9f:66:65:
ab:8e:e7:8a:53:a1:66:cf:f3:ed:03:fd:9d:5a:29:36:08:05:
4e:9b:2d:89:bd:f7:48:cb:a2:89:bb:56:f8:5c:31:0b:51:df:
0a:6e:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:49 2025 by rpki-client