Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zmwyEOI4f8-vL-mXgSDhJi-WWF8.roa
File: zmwyEOI4f8-vL-mXgSDhJi-WWF8.roa (raw, json)
Hash identifier: y6+/qBrls8wdarUcsEUk9NgBiVdr3CcexMo7cbJtEmk=
Subject key identifier: CE:6C:32:10:E2:38:7F:CF:AF:2F:E9:97:81:20:E1:26:2F:96:58:5F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C2D7F336D1ED543B58575A90224F
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zmwyEOI4f8-vL-mXgSDhJi-WWF8.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.135.0/24 maxlen: 24
176.46.133.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.151.0/24 maxlen: 24
176.46.148.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
176.46.156.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.153.0/24 maxlen: 24
185.34.160.0/22 maxlen: 24
176.46.132.0/24 maxlen: 24
176.46.129.0/24 maxlen: 24
176.46.130.0/24 maxlen: 24
109.203.160.0/24 maxlen: 24
109.203.168.0/21 maxlen: 24
109.203.176.0/21 maxlen: 24
109.203.184.0/21 maxlen: 24
37.49.145.0/24 maxlen: 24
37.49.147.0/24 maxlen: 24
94.74.152.0/22 maxlen: 24
94.74.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c2:d7:f3:36:d1:ed:54:3b:58:57:5a:90:22:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce6c3210e2387fcfaf2fe9978120e1262f96585f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:ae:b7:ee:6c:26:93:38:0d:56:03:a0:d4:
73:11:4d:fd:d3:ba:c5:a5:c9:11:e4:a4:81:a6:4c:
54:ee:8a:21:ca:45:d6:c1:39:12:c8:05:53:72:cf:
8f:b5:1b:8c:e5:17:2a:3f:db:74:45:39:70:d2:36:
a2:ea:37:87:aa:48:36:6c:6a:69:ba:cc:fe:79:4f:
2e:db:91:29:8a:6f:2b:f1:0d:d1:51:cf:02:6d:f1:
c8:43:2c:00:46:a1:ed:61:35:51:40:b3:6f:d2:48:
eb:5d:e8:aa:93:3e:1f:d0:4d:c4:c2:08:98:e1:ed:
d9:ea:35:43:37:3e:14:84:18:c5:c4:6a:0e:94:8b:
dd:cb:8e:dd:2c:cf:94:dc:01:ee:2b:71:97:7a:a7:
f7:d9:31:0b:5d:39:d6:6e:6f:0b:96:84:70:56:8f:
ba:23:fa:1a:8e:63:45:f6:56:e7:fd:55:4a:9a:c9:
43:a2:d4:c0:8b:2e:c0:8a:4d:8d:5b:9b:1b:27:13:
02:be:19:79:89:9a:4b:37:46:54:b0:cb:d5:8b:fb:
57:6a:2e:ca:53:81:90:16:49:c2:db:bf:8c:f0:ae:
a4:d9:92:85:cb:f9:5b:ef:5a:ba:7f:3d:13:16:4e:
0a:c0:03:28:f8:0a:29:4c:bb:e1:ab:42:d3:1f:0a:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:32:10:E2:38:7F:CF:AF:2F:E9:97:81:20:E1:26:2F:96:58:5F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/zmwyEOI4f8-vL-mXgSDhJi-WWF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.145.0/24
37.49.147.0/24
94.74.152.0-94.74.156.255
109.203.160.0/24
109.203.168.0-109.203.191.255
176.46.129.0-176.46.130.255
176.46.132.0-176.46.136.255
176.46.138.0-176.46.142.255
176.46.148.0/24
176.46.150.0/23
176.46.153.0-176.46.158.255
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
70:c7:92:c8:bf:3f:26:5f:e6:eb:dd:e1:18:fc:aa:28:9e:33:
2e:9b:62:ac:d3:2a:b3:5b:d9:4f:b9:8c:ba:ed:df:ce:80:82:
c5:97:bb:2c:cd:ce:50:0a:89:0e:fe:39:9a:db:c6:a7:81:90:
a5:2a:8b:a2:2a:65:5a:22:bd:b1:a1:c5:42:50:18:f0:d8:ef:
f6:b8:80:4e:15:15:37:c0:04:ad:91:81:54:1b:b2:ad:8b:48:
51:74:7c:3f:af:01:09:44:d6:1f:93:f6:67:ec:43:d7:34:0f:
50:7e:bb:f1:f3:bb:f3:45:2e:b6:f9:d0:7f:77:fe:7a:e6:bf:
9d:b2:cd:9a:30:f8:3e:55:4d:77:87:68:6f:38:3d:34:8b:e1:
36:1b:ce:db:d2:8c:85:56:76:b6:3a:ef:44:1a:d8:0a:c4:d7:
a0:02:f8:a1:e6:8c:74:46:82:6b:e4:ca:47:f4:9f:81:e3:7f:
e7:17:ec:4a:2f:fa:11:9d:1b:6e:39:dd:bf:bc:be:1b:75:58:
59:a0:76:32:3b:aa:1c:14:fd:2a:80:9b:64:a4:08:1d:6f:f6:
87:7b:9e:a6:a7:50:94:31:a7:8a:da:8b:3c:73:7c:5c:05:b9:
91:ae:51:a2:44:f9:87:eb:ad:b1:e9:78:76:22:bd:0e:a0:a7:
d4:9e:bb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:23 2025 by rpki-client