Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/PT9g_wLcneBNjOxS5cSZh8KvoxU.roa
File: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (raw, json)
Hash identifier: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=
Subject key identifier: 3D:3F:60:FF:02:DC:9D:E0:4D:8C:EC:52:E5:C4:99:87:C2:AF:A3:15
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 0194221F93FE8DF80AECBA56DD9D6CA15D59
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/PT9g_wLcneBNjOxS5cSZh8KvoxU.roa
Signing time: Wed 01 Jan 2025 13:48:02 +0000
ROA not before: Wed 01 Jan 2025 13:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28978
IP address blocks: 176.32.160.0/20 maxlen: 20
176.32.168.0/24 maxlen: 24
176.32.170.0/24 maxlen: 24
185.115.44.0/22 maxlen: 22
185.115.44.0/24 maxlen: 24
195.39.216.0/23 maxlen: 23
2a00:8a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:93:fe:8d:f8:0a:ec:ba:56:dd:9d:6c:a1:5d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Jan 1 13:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3f60ff02dc9de04d8cec52e5c49987c2afa315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:f9:fa:5a:56:d8:65:ea:13:e2:3e:c2:a2:
b7:96:9f:56:f4:82:16:c5:32:df:41:5f:58:6d:5d:
7b:56:10:8d:30:b2:57:88:03:22:a8:06:01:a5:ad:
f6:ee:1a:d2:3b:4c:5c:34:3f:40:a2:38:fe:68:fd:
09:8a:8d:1d:a1:a6:eb:45:d0:9b:60:7d:43:08:dc:
6a:83:80:11:c0:3e:16:11:42:ad:28:de:75:56:8e:
f1:a1:83:7d:87:ca:60:4a:89:45:fc:40:80:7e:8b:
26:1e:51:41:2f:6d:e9:12:ff:05:25:80:42:26:b2:
63:d7:1b:32:70:bb:45:30:66:0e:6b:0f:33:20:1a:
9b:f7:cd:7e:bb:83:6a:7b:27:27:96:8f:6c:32:2d:
1c:48:23:77:3c:f2:4d:53:27:ef:2c:85:95:f3:2d:
19:3d:a4:91:6f:c9:77:fd:c3:27:6b:a9:97:7b:81:
d2:87:98:a8:2a:91:82:f5:76:53:ef:ba:41:c6:b9:
c9:eb:58:6a:5b:81:af:18:3f:f1:89:47:92:13:6a:
2a:61:9f:1e:c0:b5:dd:b4:11:96:41:b5:c0:b3:94:
f2:be:58:25:0a:0a:a5:51:de:4f:dd:12:81:10:50:
e1:79:3d:d8:9c:8c:6f:9a:0c:31:a1:86:cf:6d:90:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:60:FF:02:DC:9D:E0:4D:8C:EC:52:E5:C4:99:87:C2:AF:A3:15
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/PT9g_wLcneBNjOxS5cSZh8KvoxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.160.0/20
185.115.44.0/22
195.39.216.0/23
IPv6:
2a00:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
a0:3c:ae:33:88:3c:f1:fb:4a:8d:ec:0f:f4:81:35:84:03:83:
4b:f8:90:c1:cc:ca:06:c2:35:b0:76:a7:ad:74:3d:e8:17:43:
23:d7:c9:f8:bd:ca:4a:b3:e8:4c:b3:e9:b4:a4:01:a2:6d:d6:
b6:a0:4b:48:c4:fe:6f:f9:22:ac:f9:aa:56:bb:27:e7:0e:8e:
89:a3:2e:9b:06:dc:e7:54:c2:9e:93:40:2f:59:e7:58:39:bd:
71:0d:35:09:e6:c2:97:b3:ee:86:4f:16:84:a3:bd:ec:8a:29:
36:cc:03:8f:e4:68:32:e6:56:3b:68:10:c5:c6:77:40:7c:d5:
bc:d9:d9:14:18:69:32:99:b8:19:02:07:1c:a7:56:f6:7b:97:
fd:a3:6b:aa:3a:a0:c5:1a:26:67:9a:7f:15:70:f4:be:bd:3d:
a0:7e:ac:d5:e2:b3:95:e5:17:41:b4:c5:67:cf:47:4f:59:f0:
b0:35:9d:2c:79:c2:f8:9e:d8:56:5a:91:99:28:dd:85:93:f5:
1d:3a:41:88:b2:cd:32:1a:17:fa:32:a8:ee:f5:55:a6:03:85:
b4:e3:e0:98:a8:99:79:dd:b5:6b:f1:7d:b8:ae:dd:f0:90:53:
99:1d:05:19:08:c4:4e:32:0e:eb:7b:5b:1a:fb:c5:7a:ae:c2:
3a:fc:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net