Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uVE1gXN2iMIkN_mYUgmpjwONBOw.roa
File: uVE1gXN2iMIkN_mYUgmpjwONBOw.roa (raw, json)
Hash identifier: 7SuExWYQnAv47fn3hCJvGGJ+t4K01/KR0LeTeUZVEms=
Subject key identifier: B9:51:35:81:73:76:88:C2:24:37:F9:98:52:09:A9:8F:03:8D:04:EC
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018A3DB705B9C31E72917CAC3EF03667E87C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uVE1gXN2iMIkN_mYUgmpjwONBOw.roa
Signing time: Mon 28 Aug 2023 19:55:19 +0000
ROA not before: Mon 28 Aug 2023 19:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.134.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.144.0/21 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:b7:05:b9:c3:1e:72:91:7c:ac:3e:f0:36:67:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 28 19:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9513581737688c22437f9985209a98f038d04ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1e:65:29:20:c2:f8:f6:a1:01:41:b1:0c:ed:
c5:b2:2a:e6:8c:03:fc:09:d4:c6:45:2d:55:9a:09:
94:85:ae:b8:4e:d8:8c:74:4e:65:ba:2f:0c:81:23:
1c:7e:3c:dc:f7:8b:80:e1:03:5a:f7:fe:a4:f0:17:
3a:68:4c:60:0f:f2:a7:71:fe:bb:39:b8:2f:9d:37:
40:9d:9e:2a:e3:98:c2:53:64:3b:34:1f:ed:1b:1e:
95:ab:57:30:51:f8:2c:c5:79:7d:33:2e:f5:4d:e4:
86:b9:a3:77:52:48:48:10:2d:5b:1b:4b:fa:0b:26:
12:22:66:51:55:0e:6f:9c:fb:e4:36:09:2d:21:e1:
84:cb:73:f1:4e:55:0b:c3:11:ad:29:c2:f1:e5:2e:
e7:fe:7d:e1:b5:ea:61:f6:8a:9a:69:b3:2d:19:f9:
25:e5:92:be:5c:17:31:11:ed:48:82:ad:3f:5e:95:
62:12:ae:59:8d:27:6e:39:a9:22:35:73:a3:33:1d:
b2:28:da:f1:c5:41:36:ae:c1:3b:dd:0a:bf:50:f1:
95:ad:9b:e7:5c:84:ea:25:c8:87:06:b1:b2:73:a7:
ae:83:07:7c:19:e4:d0:9b:d1:5a:bb:af:0c:e2:a8:
e7:75:98:71:74:53:34:de:ae:ef:e1:e7:15:bb:22:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:35:81:73:76:88:C2:24:37:F9:98:52:09:A9:8F:03:8D:04:EC
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/uVE1gXN2iMIkN_mYUgmpjwONBOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.144.0/21
94.74.137.0/24
94.74.156.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0/24
176.46.130.0-176.46.132.255
176.46.134.0/24
176.46.136.0/24
176.46.138.0-176.46.140.255
176.46.143.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
24:55:9d:82:7e:88:f5:e9:46:8d:37:94:ec:76:6a:77:fc:c9:
5a:a9:9f:34:26:04:19:a8:46:da:68:c6:28:ad:2d:6c:0c:b0:
d0:99:32:16:1a:63:28:e4:4b:02:66:03:1c:19:07:b0:02:0d:
41:13:55:19:9d:74:10:fd:05:c3:2a:90:f9:7b:a4:b8:c7:b8:
b4:8d:e3:76:b5:58:a8:4c:ca:10:6c:e1:22:ba:18:8f:ac:2b:
e0:15:1d:61:5d:df:be:2b:f1:04:85:3d:72:47:37:3c:8f:60:
aa:3b:b2:8c:a5:60:fb:7e:1f:68:3e:a1:7c:52:78:88:9e:34:
98:6e:7c:79:20:66:84:55:a2:6a:0e:58:16:d9:05:56:52:29:
f5:c1:8b:66:03:13:32:86:4a:90:ef:b1:fb:76:7a:26:be:7a:
4e:40:05:1c:8d:af:2a:f5:4d:2a:5a:9a:63:bf:2b:f7:6a:8a:
b3:60:38:cf:43:28:96:f2:27:e8:26:3f:94:6a:0b:c9:23:35:
75:76:aa:7d:5e:1f:c6:a6:12:73:7e:5f:b4:2d:0f:48:01:a6:
53:47:31:63:b2:12:8b:f7:00:96:51:0a:85:ff:59:c8:c9:5a:
94:bf:c0:24:e9:09:47:9a:8f:43:13:1c:4b:ab:16:eb:e2:ee:
5e:ac:97:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:23 2025 by rpki-client