Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xDpeq2Ljueow24sUjMOO91cfxyA.roa
File: xDpeq2Ljueow24sUjMOO91cfxyA.roa (raw, json)
Hash identifier: JfDLi3/Z2dX7YUIW4vkHRKEYEN7pL4kpb1L1OmrQ1bk=
Subject key identifier: C4:3A:5E:AB:62:E3:B9:EA:30:DB:8B:14:8C:C3:8E:F7:57:1F:C7:20
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01857BBD4D7F40ADA9AD34083EFB7B7D558A
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xDpeq2Ljueow24sUjMOO91cfxyA.roa
Signing time: Wed 04 Jan 2023 07:44:41 +0000
ROA not before: Wed 04 Jan 2023 07:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 176.46.133.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.137.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
31.170.55.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
37.49.144.0/22 maxlen: 24
37.49.148.0/22 maxlen: 24
94.74.137.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:bd:4d:7f:40:ad:a9:ad:34:08:3e:fb:7b:7d:55:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 4 07:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43a5eab62e3b9ea30db8b148cc38ef7571fc720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ef:7b:44:c7:9c:17:f0:2b:17:4a:ca:d8:2a:
8d:d3:95:19:91:3c:f8:3e:10:ee:fc:99:a8:81:37:
cd:ba:de:37:3f:5a:ae:98:27:15:a9:5b:86:f8:8a:
3f:e9:37:d3:6f:f9:65:71:f6:53:71:32:aa:e4:6a:
4b:df:6f:e8:d3:c5:b1:aa:b3:91:a9:02:6a:bf:10:
13:2a:37:bd:d9:93:aa:f8:30:5f:9e:79:e2:16:22:
30:5a:44:3c:7f:58:79:66:10:a1:bb:48:48:37:13:
d1:46:83:05:2f:7d:f1:cf:ef:c3:68:7e:43:e1:c7:
88:7b:3c:40:c0:3d:6c:76:0b:b7:f9:4d:de:5d:9c:
d5:13:50:81:47:96:88:cf:44:c8:c9:76:83:f4:23:
c0:ac:1a:35:73:7b:8a:2d:8c:de:02:50:65:b2:14:
79:e1:ce:48:08:69:a6:60:a8:f3:d1:86:30:2f:c0:
cd:61:8e:9a:34:21:55:10:b5:50:84:01:15:29:39:
10:00:db:28:ea:2a:97:cf:0c:15:09:e4:a9:a6:2e:
c1:66:90:78:c1:a4:d1:a8:ba:1a:c4:3e:c3:c1:c6:
ee:3e:f5:3f:bf:22:13:46:fb:cd:d8:83:57:f0:ec:
4f:78:6d:ee:32:c6:ab:c3:8c:8a:d0:06:e4:af:7a:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:5E:AB:62:E3:B9:EA:30:DB:8B:14:8C:C3:8E:F7:57:1F:C7:20
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xDpeq2Ljueow24sUjMOO91cfxyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/21
94.74.137.0/24
94.74.140.0/24
94.74.147.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.173.0/24
94.74.187.0/24
94.74.191.0/24
109.203.160.0/21
176.46.128.0-176.46.137.255
Signature Algorithm: sha256WithRSAEncryption
85:ce:d2:5f:f5:cb:7a:a4:c6:99:37:0a:4b:da:9b:17:4d:b6:
60:4b:b2:f3:bd:30:2b:0f:b1:5e:22:cf:52:12:a0:ab:48:80:
06:4c:03:aa:64:a5:27:39:19:4c:d3:09:48:aa:56:b4:c7:5f:
5f:4f:3b:08:9d:76:7f:b1:bd:d1:23:11:d4:5f:fd:0a:86:0a:
16:81:1e:d2:ba:c2:69:ed:2e:40:99:ad:e4:2f:57:26:ee:bb:
c4:ee:76:2c:e3:a1:57:de:c1:de:24:7b:9a:68:db:a7:9d:7d:
e6:3c:e2:b1:78:d3:6a:80:76:af:88:6b:df:5d:9b:64:7d:8e:
ac:62:52:9d:e9:08:ec:f3:97:de:e6:30:8b:d3:ba:a5:8f:0b:
f2:db:c2:be:f9:06:b3:be:51:aa:9c:2e:42:a0:bc:a3:a3:5c:
31:2b:23:4a:67:b3:73:5e:f2:4e:da:dc:0c:fc:b8:f8:ca:96:
62:fb:80:bf:c0:2a:33:d8:5f:b1:25:43:7f:b2:68:6f:96:80:
a6:b1:86:db:2c:95:7a:3d:89:96:0d:1a:59:af:57:6a:dc:3e:
90:59:5f:15:fa:02:1f:7b:fa:79:3f:36:fc:4a:7e:92:61:62:
05:b2:de:03:07:08:af:cc:ee:90:fc:87:c8:a3:09:83:de:d3:
78:e8:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:20 2025 by rpki-client