Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/r_pf9tkfQ7dGX_DUvUX_kLZjaLg.roa
File: r_pf9tkfQ7dGX_DUvUX_kLZjaLg.roa (raw, json)
Hash identifier: uQlf8KCDMT5Czi45u8vSejSwv4rZQC5akjQvfDaVYbE=
Subject key identifier: AF:FA:5F:F6:D9:1F:43:B7:46:5F:F0:D4:BD:45:FF:90:B6:63:68:B8
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A1851711D6654CA5F24526DC1AD4E7ED5
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/r_pf9tkfQ7dGX_DUvUX_kLZjaLg.roa
Signing time: Mon 21 Aug 2023 13:38:25 +0000
ROA not before: Mon 21 Aug 2023 13:38:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.165.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
37.49.145.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:51:71:1d:66:54:ca:5f:24:52:6d:c1:ad:4e:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 21 13:38:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=affa5ff6d91f43b7465ff0d4bd45ff90b66368b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:88:70:69:47:84:57:ab:12:ee:aa:16:b9:
c8:2e:35:4a:35:db:76:00:fd:0b:9d:77:a7:9e:76:
cb:fe:bb:4a:d0:3e:af:0a:f5:30:33:f0:cb:fc:1d:
4f:de:9a:e7:6f:17:60:35:44:09:5f:9b:40:c3:93:
fb:79:ea:a1:0e:fc:9f:3b:f8:b1:2c:ff:ea:0a:ca:
e7:04:cd:d5:b1:4d:7b:aa:6f:42:a8:ce:68:ca:ea:
50:9c:03:3c:a6:6b:73:a4:c7:67:a6:68:7d:72:c7:
93:bb:2d:4f:45:96:2a:2c:1d:b0:db:22:d6:f1:f1:
cc:77:55:d5:3a:8c:a5:b5:58:b6:93:ad:6e:5d:ff:
5e:d4:4b:88:53:9c:e4:d3:10:12:dc:ce:f6:4e:38:
05:f5:77:b6:99:0c:f8:ac:f8:50:30:a1:73:4c:5c:
db:3d:05:66:3e:49:e3:f9:d6:2a:d7:fe:6e:c9:d6:
79:40:2a:ba:af:46:c1:23:75:02:cc:95:5a:3f:9b:
6a:66:5c:51:06:eb:b3:b7:36:c0:70:b3:06:1f:a1:
05:e0:40:ab:45:09:2e:aa:1c:6f:96:1f:3e:34:ef:
62:0e:0a:f3:e0:fe:a7:eb:e6:cd:0d:16:c3:1a:fa:
20:d8:da:e1:6f:11:c1:05:1c:51:7e:f3:6c:08:74:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:5F:F6:D9:1F:43:B7:46:5F:F0:D4:BD:45:FF:90:B6:63:68:B8
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/r_pf9tkfQ7dGX_DUvUX_kLZjaLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/23
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.164.0-109.203.166.255
176.46.128.0/24
176.46.130.0-176.46.137.255
176.46.140.0/23
176.46.143.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
9e:3f:32:00:f5:30:2b:d4:f1:64:75:04:ac:34:9c:03:e8:72:
b7:f6:17:db:f8:39:9b:8f:46:19:de:8f:27:cd:b0:7c:33:2c:
c8:20:b7:35:c6:26:4b:f7:ac:aa:f8:7c:41:e9:bf:5c:ce:27:
03:f6:b6:5b:dd:d0:b6:ee:14:d9:59:2e:a1:cd:1b:ab:62:72:
73:cd:bd:29:d0:41:94:11:45:f7:75:8e:fb:0f:82:8d:67:94:
f3:cd:6c:c8:fa:6d:f7:42:4a:cf:68:38:67:c2:87:ae:36:e1:
a9:8e:95:70:bd:2d:b0:f2:00:02:36:0a:c2:c9:94:d6:fb:ce:
db:a1:b9:6f:7e:67:01:60:20:8e:b9:a6:9b:96:af:6c:6b:f7:
b6:64:b3:fd:ee:f4:d5:07:82:f5:72:07:bd:37:87:7e:3d:af:
f2:f9:e3:11:ce:d4:87:bb:60:66:b9:5a:06:ed:98:9b:e7:91:
66:ce:8b:c3:29:61:ea:fe:59:c8:dd:df:90:13:99:fe:c9:38:
0a:24:80:d2:ea:7b:dc:37:da:9d:ed:7a:15:7c:5d:22:2c:84:
4e:30:95:32:33:2b:95:e5:7b:f3:b2:d2:91:d8:46:d2:ff:6b:
53:e0:0d:a8:cc:5d:f8:8e:af:64:ca:59:81:32:d9:85:b0:d1:
15:6f:4e:6c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYoYUXEdZlTKXyRSbcGtTn7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMwODIxMTMzODI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmZhNWZmNmQ5MWY0M2I3NDY1ZmYwZDRiZDQ1ZmY5MGI2NjM2OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr72IcGlHhFerEu6qFrnILjVKNdt2
AP0LnXennnbL/rtK0D6vCvUwM/DL/B1P3prnbxdgNUQJX5tAw5P7eeqhDvyfO/ix
LP/qCsrnBM3VsU17qm9CqM5oyupQnAM8pmtzpMdnpmh9cseTuy1PRZYqLB2w2yLW
8fHMd1XVOoyltVi2k61uXf9e1EuIU5zk0xAS3M72TjgF9Xe2mQz4rPhQMKFzTFzb
PQVmPknj+dYq1/5uydZ5QCq6r0bBI3UCzJVaP5tqZlxRBuuztzbAcLMGH6EF4ECr
RQkuqhxvlh8+NO9iDgrz4P6n6+bNDRbDGvog2NrhbxHBBRxRfvNsCHT+CQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFK/6X/bZH0O3Rl/w1L1F/5C2Y2i4MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvcl9wZjl0a2ZRN2RHWF9EVXZVWF9rTFpqYUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAB+q
NwMEASUxkAMEAF5KjAMEAF5KkwMEAF5KnAMEAV5KngMEAF5KpAMEAV5KqAMEAF5K
qwMEAF5KrQMEAF5KuwMEAF5KvzAMAwQCbcukAwQAbcumAwQAsC6AMAwDBAGwLoID
BAGwLogDBAGwLowwDAMEALAujwMEBbAugDANBgkqhkiG9w0BAQsFAAOCAQEAnj8y
APUwK9TxZHUErDScA+hyt/YX2/g5m49GGd6PJ82wfDMsyCC3NcYmS/esqvh8Qem/
XM4nA/a2W93Qtu4U2Vkuoc0bq2Jyc829KdBBlBFF93WO+w+CjWeU881syPpt90JK
z2g4Z8KHrjbhqY6VcL0tsPIAAjYKwsmU1vvO26G5b35nAWAgjrmmm5avbGv3tmSz
/e701QeC9XIHvTeHfj2v8vnjEc7Uh7tgZrlaBu2Ym+eRZs6Lwylh6v5ZyN3fkBOZ
/sk4CiSA0up73Dfane16FXxdIiyETjCVMjMrleV787LSkdhG0v9rU+ANqMxd+I6v
ZMpZgTLZhbDRFW9ObA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:03 2025 by rpki-client