Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/pmg46s26qhNt78w-vpWxx9CfOjU.roa
File: pmg46s26qhNt78w-vpWxx9CfOjU.roa (raw, json)
Hash identifier: DSvsJKyxYR8GARIm7U9YYr970tpfWr57OMGR2ak3vyU=
Subject key identifier: A6:68:38:EA:CD:BA:AA:13:6D:EF:CC:3E:BE:95:B1:C7:D0:9F:3A:35
Certificate issuer: /CN=41e48b13551c4f302722a80f8c62e6efd5369edc
Certificate serial: 066AA7F5
Authority key identifier: 41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeSLE1UcTzAnIqgPjGLm79U2ntw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/pmg46s26qhNt78w-vpWxx9CfOjU.roa
Signing time: Sat 01 Jan 2022 05:01:53 +0000
ROA not before: Sat 01 Jan 2022 05:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34660
IP address blocks: 185.52.220.0/22 maxlen: 22
178.23.160.0/21 maxlen: 21
217.168.144.0/20 maxlen: 20
2a00:1fb0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107653109 (0x66aa7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e48b13551c4f302722a80f8c62e6efd5369edc
Validity
Not Before: Jan 1 05:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a66838eacdbaaa136defcc3ebe95b1c7d09f3a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:a8:5c:2c:29:5a:99:37:ba:b3:f8:fb:01:
bd:0b:36:20:97:a7:af:d2:a8:41:b9:7e:e5:db:ea:
15:d3:92:79:ea:e0:71:c0:c3:c9:ed:63:17:ea:76:
99:8c:83:4c:5b:e4:fc:8e:de:22:a4:6e:da:1c:09:
93:5c:6a:15:c8:bb:0f:da:e1:00:ca:22:28:5e:9c:
40:88:5a:dd:9a:06:5b:40:e3:59:61:6f:da:22:d8:
e6:cd:bb:b6:6a:b0:15:86:90:f0:69:4e:8e:fb:97:
b4:67:7f:d7:59:0b:33:36:cb:88:fc:20:3f:b4:1a:
5a:a1:91:6c:0f:f1:f1:89:a8:00:b9:3e:ea:87:d7:
33:d2:c2:15:a4:6c:c7:53:57:cc:86:15:42:c4:cc:
64:ab:84:b3:09:e6:42:f7:83:50:b0:14:37:e4:94:
5d:63:bb:34:37:74:a4:3b:bd:77:aa:1b:bd:fa:bf:
9b:f9:2a:65:81:95:e0:c3:81:a5:82:b5:d8:79:7a:
f7:f7:6f:c7:64:28:0f:d5:da:7f:5d:b2:1c:fa:68:
42:14:23:ae:60:10:6d:34:df:12:26:b6:a4:8e:da:
39:d3:08:b9:c3:3e:c8:fe:8b:21:5d:fb:b0:35:03:
30:b7:3b:53:0d:1b:12:54:22:5b:7b:43:35:11:7d:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:68:38:EA:CD:BA:AA:13:6D:EF:CC:3E:BE:95:B1:C7:D0:9F:3A:35
X509v3 Authority Key Identifier:
keyid:41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeSLE1UcTzAnIqgPjGLm79U2ntw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/pmg46s26qhNt78w-vpWxx9CfOjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.160.0/21
185.52.220.0/22
217.168.144.0/20
IPv6:
2a00:1fb0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:07:0e:af:85:6e:9e:2c:82:d3:87:2c:d9:65:02:b0:21:4f:
27:d2:5d:5e:81:9f:ab:ac:4d:1d:c6:c5:77:d2:2d:a4:44:64:
1e:54:f8:b7:28:09:ee:77:35:d9:7d:ec:b1:94:c2:33:43:08:
38:d0:22:80:7d:8b:01:87:24:40:51:45:8a:6f:76:7d:01:80:
63:c9:44:6d:c5:39:6e:7f:2c:c0:9c:d9:59:0b:b3:36:5a:23:
f1:9a:c7:8b:78:c9:84:97:7b:1c:79:03:1b:17:bf:cf:d4:6f:
83:93:0b:86:00:4a:bd:5a:39:80:5d:8e:2f:cc:27:5e:af:dc:
a4:36:79:1d:12:f9:42:c1:d1:84:78:0d:c7:b3:ed:cd:11:72:
b3:8c:a3:40:c4:67:64:c5:46:31:59:62:13:6e:86:03:53:f5:
03:9e:43:eb:09:02:06:d9:39:80:b7:49:f4:56:ec:f0:17:f9:
24:db:c9:fa:b1:d5:80:e8:c0:ae:c9:b1:47:10:35:58:2a:17:
18:14:92:e4:78:46:fe:e1:53:5c:e0:d6:77:bd:1d:2a:73:e0:
d1:ed:60:73:76:33:94:4a:74:4d:e2:b7:32:86:74:de:9f:2e:
f0:41:bf:0a:6c:2b:e1:e8:a3:43:88:76:ca:b0:dc:22:5b:b2:
ec:3d:d3:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:27 2025 by rpki-client