Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/prrkow_AVqXTQax2FzKyfZaXvMc.roa
File: prrkow_AVqXTQax2FzKyfZaXvMc.roa (raw, json)
Hash identifier: V3QcRERAEe/X0PZzFjhyjNVyhYSVW2KwsvttTSgbchM=
Subject key identifier: A6:BA:E4:A3:0F:C0:56:A5:D3:41:AC:76:17:32:B2:7D:96:97:BC:C7
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0187178C5A7A23BD0A699ECE499B6FC11533
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/prrkow_AVqXTQax2FzKyfZaXvMc.roa
Signing time: Sat 25 Mar 2023 06:54:46 +0000
ROA not before: Sat 25 Mar 2023 06:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.163.0/24 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:8c:5a:7a:23:bd:0a:69:9e:ce:49:9b:6f:c1:15:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Mar 25 06:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6bae4a30fc056a5d341ac761732b27d9697bcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:e4:f8:5f:27:40:db:68:7f:66:24:0b:b7:
18:13:d0:7f:b5:09:65:12:f6:17:1e:a8:0a:06:a3:
b9:3e:3b:49:ff:f3:7f:ec:cb:e1:00:67:cc:ab:f2:
22:0d:0a:23:7d:3b:61:f1:4c:65:00:e4:29:b7:e8:
f6:6d:14:6e:92:3c:31:b2:b0:55:fe:d6:72:23:1e:
a9:0f:95:79:a8:ae:5b:b9:94:50:d3:2b:56:fc:d3:
49:b3:e0:3e:fa:ef:7c:fa:99:d0:c2:5a:b0:86:81:
ff:78:7f:16:94:ba:71:21:93:5f:32:53:63:6e:28:
f2:e2:79:74:c3:27:fc:c4:69:ad:89:59:3b:27:95:
31:f8:88:f9:72:20:f3:31:77:e9:6c:d7:0e:19:2c:
e0:96:e8:43:fc:d8:ae:16:d8:fc:bc:1f:6a:93:44:
a0:d7:d1:30:da:73:78:32:73:38:c3:76:e6:16:64:
b6:1e:04:1e:e9:6a:d9:a1:97:9b:50:14:3d:74:fd:
57:6e:cc:71:f6:b6:51:02:1a:9b:6d:dd:b9:ee:f6:
d4:ea:5b:87:c0:ac:c1:1d:d5:f2:5e:bb:04:61:85:
14:1b:78:e1:cb:8b:f1:6d:0f:b1:51:84:2b:34:d3:
5d:19:95:5e:93:a0:6f:ef:e7:83:96:dd:3f:21:c1:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BA:E4:A3:0F:C0:56:A5:D3:41:AC:76:17:32:B2:7D:96:97:BC:C7
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/prrkow_AVqXTQax2FzKyfZaXvMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0-176.46.137.255
Signature Algorithm: sha256WithRSAEncryption
0d:0e:87:3c:2b:d7:5b:cc:23:ee:c0:7d:5c:cd:bc:bd:72:3e:
84:33:0b:ad:d3:1c:d6:37:a2:d0:41:0a:07:4b:11:9c:3a:6b:
01:7d:a9:a3:d1:5b:19:7a:e0:c2:bc:5a:10:23:aa:7b:38:91:
dd:54:cb:6c:40:5e:f9:fb:4c:3d:a4:46:a3:bc:14:c8:ec:3c:
4e:95:a9:f0:3a:39:9e:4b:63:bc:4d:95:19:cd:fd:79:30:0b:
06:76:3a:21:ba:13:98:06:6d:20:d7:ce:77:53:bf:db:4f:33:
4a:84:ec:73:cd:2f:71:1a:18:3c:44:d3:02:e8:42:ce:75:28:
5a:92:bf:97:fa:34:e2:d2:61:61:30:c1:d5:51:af:21:93:cc:
0e:d5:00:f3:7f:9d:c5:eb:40:66:16:47:7e:76:2b:96:0e:e3:
bc:c7:ea:86:1c:b8:3d:ab:e4:3d:a6:d2:06:78:a9:0a:d5:7d:
58:d0:c1:d7:b7:7b:ea:0a:2f:00:d6:15:2c:85:10:cb:65:3c:
ff:bf:ab:76:62:70:cf:27:af:fb:ce:a2:c9:92:4b:42:94:9c:
36:12:bd:85:f6:e5:f2:c3:d4:d7:1d:01:e4:1f:f2:42:22:6d:
ed:ce:a5:05:2b:9b:47:44:84:61:85:19:ff:ff:36:0e:4b:94:
3f:6b:b8:55
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAYcXjFp6I70KaZ7OSZtvwRUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwMzI1MDY1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJhZTRhMzBmYzA1NmE1ZDM0MWFjNzYxNzMyYjI3ZDk2OTdiY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pPk+F8nQNtof2YkC7cYE9B/tQll
EvYXHqgKBqO5PjtJ//N/7MvhAGfMq/IiDQojfTth8UxlAOQpt+j2bRRukjwxsrBV
/tZyIx6pD5V5qK5buZRQ0ytW/NNJs+A++u98+pnQwlqwhoH/eH8WlLpxIZNfMlNj
bijy4nl0wyf8xGmtiVk7J5Ux+Ij5ciDzMXfpbNcOGSzgluhD/NiuFtj8vB9qk0Sg
19Ew2nN4MnM4w3bmFmS2HgQe6WrZoZebUBQ9dP1Xbsxx9rZRAhqbbd257vbU6luH
wKzBHdXyXrsEYYUUG3jhy4vxbQ+xUYQrNNNdGZVek6Bv7+eDlt0/IcHa9QIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFKa65KMPwFal00Gsdhcysn2Wl7zHMB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvcHJya293X0FWcVhUUWF4MkZ6S3lmWmFYdk1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAH6o3AwQD
JTGQAwQAXkqJAwQAXkqMAwQAXkqTAwQAXkqcAwQBXkqeAwQAXkqkAwQBXkqoAwQA
XkqrAwQAXkqtAwQAXkq7AwQAXkq/AwQDbcugMAwDBAewLoADBAGwLogwDQYJKoZI
hvcNAQELBQADggEBAA0Ohzwr11vMI+7AfVzNvL1yPoQzC63THNY3otBBCgdLEZw6
awF9qaPRWxl64MK8WhAjqns4kd1Uy2xAXvn7TD2kRqO8FMjsPE6VqfA6OZ5LY7xN
lRnN/XkwCwZ2OiG6E5gGbSDXzndTv9tPM0qE7HPNL3EaGDxE0wLoQs51KFqSv5f6
NOLSYWEwwdVRryGTzA7VAPN/ncXrQGYWR352K5YO47zH6oYcuD2r5D2m0gZ4qQrV
fVjQwde3e+oKLwDWFSyFEMtlPP+/q3ZicM8nr/vOosmSS0KUnDYSvYX25fLD1Ncd
AeQf8kIibe3OpQUrm0dEhGGFGf//Ng5LlD9ruFU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:10 2025 by rpki-client