Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xsb7Bl8Z33dt12BtrXDlchhZAks.roa
File: xsb7Bl8Z33dt12BtrXDlchhZAks.roa (raw, json)
Hash identifier: 4D/5/X3W+jugY/QHXLxembeQge/NickZpH9EUDm7eO8=
Subject key identifier: C6:C6:FB:06:5F:19:DF:77:6D:D7:60:6D:AD:70:E5:72:18:59:02:4B
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018B282BB94FFDC7DA15C50DC1E6D325D148
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xsb7Bl8Z33dt12BtrXDlchhZAks.roa
Signing time: Fri 13 Oct 2023 08:33:55 +0000
ROA not before: Fri 13 Oct 2023 08:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:2b:b9:4f:fd:c7:da:15:c5:0d:c1:e6:d3:25:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 13 08:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6c6fb065f19df776dd7606dad70e5721859024b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:53:c0:07:e1:b2:f9:dc:3e:22:8e:1d:17:
91:c5:04:50:e8:ff:8b:4f:f7:3d:b6:bd:85:0f:fa:
7a:e6:9a:d7:10:8d:48:a4:12:22:84:bd:12:fb:2b:
2f:27:8e:2a:97:39:cf:26:23:02:fb:eb:78:10:bb:
89:c6:05:bd:b4:3e:22:75:10:f5:22:34:bf:a1:a4:
9a:ab:2d:bc:52:52:de:48:f5:77:7b:b1:52:e4:eb:
82:c7:29:73:47:6c:45:ef:d8:ec:e1:c5:51:01:a1:
33:78:08:b0:a6:d8:b8:96:e6:1a:f7:9d:f1:ea:a4:
c3:b6:d8:f7:41:d4:38:de:14:6a:20:84:11:25:79:
6e:9a:86:13:0c:ab:82:06:75:f2:d4:fb:07:0d:9e:
35:64:02:0e:11:fe:07:68:db:03:28:d4:f4:da:64:
ec:60:b7:91:82:04:aa:5a:17:43:50:03:b1:29:92:
0f:38:00:94:40:09:20:9e:87:a8:22:25:57:e8:6c:
1c:c3:a5:db:35:2a:6f:2f:a3:c5:c2:1f:58:dd:c8:
1f:d7:1d:3b:64:70:54:9c:71:10:aa:bd:9b:5c:5d:
2b:fa:33:bc:9b:a1:b0:ab:1b:95:4c:2b:1a:52:b6:
a7:da:ec:95:76:3a:b0:ce:68:eb:03:88:e5:8f:dc:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:FB:06:5F:19:DF:77:6D:D7:60:6D:AD:70:E5:72:18:59:02:4B
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/xsb7Bl8Z33dt12BtrXDlchhZAks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.129.0-176.46.130.255
176.46.133.0-176.46.136.255
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.148.0/24
176.46.150.0/24
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:df:cf:81:10:ce:fa:71:bc:83:32:64:c4:74:a8:48:55:9c:
59:ea:e2:b6:07:00:e8:53:36:0f:b9:7e:06:b5:8e:cc:0d:d3:
d8:5a:46:f4:f4:cb:5f:ea:ce:45:c0:cf:f8:ec:fb:7f:66:15:
24:ee:03:28:47:b7:d9:4a:e8:47:36:ec:91:04:f2:d0:5b:46:
34:be:aa:fd:82:9c:ae:16:f1:aa:84:ae:7a:53:9b:70:ad:ad:
48:75:19:08:a0:b5:86:f1:e4:28:54:44:9f:1e:4b:39:b6:8b:
4c:94:7c:77:95:de:44:4b:ef:fa:28:af:82:a0:d8:dd:ec:3c:
08:1a:38:b2:73:98:89:a0:7c:82:a4:2b:05:f9:88:2b:5d:83:
d4:d3:c8:ed:bf:17:d2:44:b1:59:9c:81:82:30:5f:bb:f7:0e:
a0:7d:9a:b7:65:d7:5d:6e:ef:78:d8:14:56:a3:94:98:bc:f0:
a6:5d:47:1f:c5:1f:66:c8:8d:3e:8e:3d:43:a9:1a:6a:0b:a6:
4d:23:41:43:80:2a:cf:f1:e6:e5:dc:be:11:67:f2:34:fc:db:
57:4a:41:15:b6:ef:14:de:61:dc:75:26:76:d1:f7:d7:13:b4:
70:3d:22:1c:57:29:65:1f:49:5c:da:19:d4:4d:86:7a:5b:ca:
ab:ab:7c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:39 2025 by rpki-client