Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xF8tX-toNsoWlNF-m5n6eZQ0h_4.roa
File: xF8tX-toNsoWlNF-m5n6eZQ0h_4.roa (raw, json)
Hash identifier: fBApk5X1IM1ikQcS41SxIA/DK/Nda1zoJsOAiqmbs1Y=
Subject key identifier: C4:5F:2D:5F:EB:68:36:CA:16:94:D1:7E:9B:99:FA:79:94:34:87:FE
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018BCCE5D97694304DAFE649FCCBC266C166
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xF8tX-toNsoWlNF-m5n6eZQ0h_4.roa
Signing time: Tue 14 Nov 2023 08:14:57 +0000
ROA not before: Tue 14 Nov 2023 08:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.146.0/24 maxlen: 24
176.46.159.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:e5:d9:76:94:30:4d:af:e6:49:fc:cb:c2:66:c1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Nov 14 08:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45f2d5feb6836ca1694d17e9b99fa79943487fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e0:b0:9f:82:3c:bf:21:78:7e:1f:74:ae:b9:
ca:e3:b3:ee:b2:c3:ee:d6:41:e0:b9:c9:fc:d0:9c:
27:07:7c:fe:36:d2:8f:65:2c:70:b6:85:ff:46:cd:
a7:83:8b:95:0c:0c:85:04:42:a6:51:34:19:94:4e:
db:a2:48:5f:e1:d5:ce:44:1d:f5:b7:44:61:32:86:
d2:70:94:f2:63:72:c1:f7:41:d2:29:a7:2b:c9:35:
d9:c7:9f:16:2c:7c:aa:b9:d0:3f:bf:16:40:47:cf:
08:b3:fc:66:33:83:dd:ba:3f:44:e8:a7:e8:1c:8b:
a9:dc:36:ec:7e:0e:5d:c4:0c:33:25:71:21:8e:a5:
74:cd:11:27:c4:c2:23:88:c1:34:71:45:b4:2b:7a:
c6:d3:75:cf:2b:03:78:9d:69:36:85:59:ff:90:c6:
fa:c1:a3:e3:39:fb:e3:be:fd:5e:41:15:0a:df:70:
58:4a:e8:c0:79:41:71:83:66:35:82:d2:97:ff:fa:
60:5b:a0:6a:30:25:e0:71:16:fa:e8:73:3c:06:2b:
20:27:97:17:b4:7b:30:f4:7c:18:0e:a5:cb:70:5e:
b3:31:66:d3:4b:87:ad:4d:96:a6:12:ea:ce:e8:a9:
0c:ba:1f:38:ad:c6:d5:1b:71:09:c1:28:b3:37:8f:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:2D:5F:EB:68:36:CA:16:94:D1:7E:9B:99:FA:79:94:34:87:FE
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xF8tX-toNsoWlNF-m5n6eZQ0h_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.129.0-176.46.130.255
176.46.132.0-176.46.136.255
176.46.138.0-176.46.143.255
176.46.146.0/24
176.46.148.0/24
176.46.150.0/23
176.46.153.0-176.46.159.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
22:b3:9f:47:ce:63:61:52:24:10:a2:10:19:b6:7d:8b:ad:76:
b0:52:8c:88:25:24:07:9f:41:49:03:10:35:ed:cf:bb:c7:52:
87:ff:5d:11:57:1c:9a:84:a2:6d:01:ab:7a:b5:93:a7:3f:1f:
2b:89:d9:d0:b2:31:88:43:b8:87:e0:66:6f:93:eb:3b:00:3d:
92:43:e5:f8:43:3e:58:a4:b6:79:34:ed:bb:fe:ac:1c:98:88:
51:47:a7:e9:5f:1a:c4:97:a7:43:35:31:f3:7d:35:ce:fb:6a:
07:aa:5f:9a:b2:78:ce:72:46:7f:7c:be:6c:63:bd:8a:f8:34:
37:6c:73:61:31:a5:ed:1b:43:ef:81:98:18:03:64:0a:65:de:
8a:cb:06:c7:de:13:c7:90:48:4e:c3:fa:ef:d9:87:d8:c3:5a:
3a:30:c9:91:07:f6:fc:31:1a:b0:7d:eb:5a:de:34:08:61:df:
f8:2c:33:c7:b1:60:0e:49:aa:d7:80:f0:bf:81:c0:77:06:fa:
a7:e5:33:42:f0:90:10:3d:6f:3b:ba:54:ac:c6:c8:d3:59:02:
0f:85:9b:61:b8:23:19:b9:12:ee:d4:e2:11:11:29:b2:69:74:
11:b8:cb:cc:8f:4e:21:15:52:ca:31:6a:b2:20:61:cf:7c:96:
ba:21:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:11 2025 by rpki-client