Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wqt62qbs-sE2f5ZwvyZPa-I6Xw0.roa
File: wqt62qbs-sE2f5ZwvyZPa-I6Xw0.roa (raw, json)
Hash identifier: hE/KxKa5ce7q1W1IhET+f0Mw8pNmmuddV54n8wy/eTs=
Subject key identifier: C2:AB:7A:DA:A6:EC:FA:C1:36:7F:96:70:BF:26:4F:6B:E2:3A:5F:0D
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01869B81E0D7727CF1E136A5C3C202B37912
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wqt62qbs-sE2f5ZwvyZPa-I6Xw0.roa
Signing time: Wed 01 Mar 2023 04:50:25 +0000
ROA not before: Wed 01 Mar 2023 04:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44208
IP address blocks: 176.46.138.0/23 maxlen: 24
176.46.144.0/20 maxlen: 24
176.46.140.0/22 maxlen: 24
94.74.128.0/18 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
37.49.148.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:81:e0:d7:72:7c:f1:e1:36:a5:c3:c2:02:b3:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Mar 1 04:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2ab7adaa6ecfac1367f9670bf264f6be23a5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:fd:b0:ca:5b:ff:77:37:19:91:8a:b5:52:
d5:0f:6b:2e:81:78:69:6b:24:62:d2:d8:1d:78:e4:
35:8c:e9:07:f3:48:a3:91:a6:72:ba:37:e6:34:6c:
9f:69:12:fb:4f:6f:81:25:c0:99:6f:ac:74:a2:ff:
1b:43:8c:b9:43:ca:94:15:d9:26:c5:18:a7:66:a8:
35:6e:c3:ad:0b:19:90:b4:00:7a:7e:04:f1:80:9e:
71:89:34:ac:19:a7:30:06:dd:f7:4d:c6:4b:d6:12:
68:88:88:b5:06:bb:7c:d9:00:62:0f:1c:70:cb:37:
a5:8d:fb:f4:19:c9:46:69:46:76:df:30:1f:6f:7c:
41:12:ec:63:ae:81:6c:08:04:2f:b4:16:3d:73:4c:
44:5c:1a:08:7b:6e:8d:f9:22:a0:12:25:25:ce:f3:
f6:33:f6:68:a1:c3:fb:90:9d:60:b7:c6:05:15:ec:
18:cc:24:57:4f:64:75:96:6e:3d:d9:da:47:0d:42:
44:c7:61:0e:c3:b8:0f:e7:21:79:9d:c6:12:51:e1:
5a:fa:7a:d1:e2:6b:51:ee:e1:a4:f2:c8:1f:01:06:
9a:21:18:38:80:e4:e4:7a:bc:03:9e:24:34:99:4b:
a8:32:72:f1:27:c6:16:37:d7:14:03:b9:b3:d7:b0:
54:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:7A:DA:A6:EC:FA:C1:36:7F:96:70:BF:26:4F:6B:E2:3A:5F:0D
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wqt62qbs-sE2f5ZwvyZPa-I6Xw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
37.49.148.0/24
37.49.151.0/24
94.74.128.0/18
109.203.160.0/19
176.46.138.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
90:47:e8:93:fe:24:fe:20:71:27:b7:a0:ab:11:57:47:d0:73:
bc:68:d4:e1:42:14:d3:d6:2e:03:7b:20:14:0b:25:7e:df:3c:
a3:00:c1:12:67:63:67:cb:22:e4:3b:1c:37:28:cc:bc:83:0c:
61:48:42:85:d8:bf:ad:f4:8f:b4:72:2b:4d:88:0d:e2:e3:8b:
c1:85:82:5a:d9:db:88:08:1e:0d:ed:34:20:70:71:a6:4e:e0:
77:8c:f9:31:d3:3b:25:95:d1:bd:61:46:a9:c4:a1:ec:35:44:
f5:2f:53:b5:ef:ec:72:24:6b:57:d5:db:3d:34:49:f6:13:a9:
11:9e:ba:a4:32:8d:af:70:7e:72:ae:b5:dc:02:44:56:b2:e9:
14:ea:ac:29:00:b3:48:98:b7:63:a9:13:a5:97:d6:54:25:30:
8c:d2:ab:c2:be:61:7a:a8:95:25:50:4e:a3:34:a7:38:a2:17:
15:84:41:c0:24:04:98:95:80:c7:98:42:15:c6:0d:cd:c1:00:
57:5a:58:1c:94:4e:a5:2d:df:19:c7:e2:ab:a1:1f:2c:e9:da:
53:d3:9c:9c:32:bb:a8:82:83:1d:7d:73:02:bd:0c:d4:e0:6e:
ae:49:bc:55:01:a8:2a:d3:ac:a9:a1:8f:8e:7b:28:53:74:17:
a8:72:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:35 2025 by rpki-client