Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZsac2SNHqHzRghVtFXCoeREN44.roa
File: SZsac2SNHqHzRghVtFXCoeREN44.roa (raw, json)
Hash identifier: bJr6qjXh/n0vCaj0cQsEaixXY2xE82B7FHKEJcb7guU=
Subject key identifier: 49:9B:1A:73:64:8D:1E:A1:F3:46:08:55:B4:55:C2:A1:E4:44:37:8E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01951876F17753A49F70AC8177AE19105F15
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZsac2SNHqHzRghVtFXCoeREN44.roa
Signing time: Tue 18 Feb 2025 09:50:03 +0000
ROA not before: Tue 18 Feb 2025 09:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.156.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
94.74.182.0/24 maxlen: 24
94.74.191.0/24 maxlen: 24
109.203.163.0/24 maxlen: 24
176.46.136.0/24 maxlen: 24
176.46.138.0/24 maxlen: 24
176.46.139.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
176.46.142.0/24 maxlen: 24
176.46.144.0/24 maxlen: 24
176.46.150.0/24 maxlen: 24
176.46.152.0/24 maxlen: 24
176.46.155.0/24 maxlen: 24
176.46.157.0/24 maxlen: 24
176.46.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:76:f1:77:53:a4:9f:70:ac:81:77:ae:19:10:5f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 18 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=499b1a73648d1ea1f3460855b455c2a1e444378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ad:ca:e6:76:9b:a6:b3:e9:e4:04:ed:48:e4:
c1:a0:c5:eb:e4:a6:4d:05:18:5c:02:c8:07:7b:4e:
4f:9a:64:5c:14:94:c0:69:7c:68:ea:09:d6:85:8e:
e8:19:f4:1c:fe:6a:2a:2c:4a:b7:4b:8f:10:32:ae:
be:3b:0c:47:99:51:4e:6c:f9:ac:ff:d6:ab:0d:8d:
e0:21:5d:70:8c:09:49:1a:52:bd:8c:ce:ce:2b:4c:
54:ae:a8:4a:01:ab:a8:af:5e:99:4c:f6:a8:45:73:
a2:61:6e:90:63:b3:24:0a:40:e6:06:6a:2c:ab:2b:
20:de:37:ec:7d:02:94:26:7e:09:cb:0b:e7:50:b7:
f3:77:f8:3d:5a:a5:2e:e4:a9:e8:7d:d4:83:bf:94:
3f:4f:f6:95:6a:37:2a:2c:8a:27:79:4b:96:aa:27:
b9:4c:be:fe:38:3b:c4:64:4d:77:07:d3:41:82:84:
27:e8:55:14:d5:a7:cf:ed:76:64:43:1c:e2:8e:d1:
de:01:07:8e:b2:bd:9c:17:8d:92:17:bb:49:47:0e:
d0:fb:91:42:ba:ba:bc:a6:de:f8:38:f4:82:90:dc:
ec:cb:0f:db:6a:1b:55:3d:1b:48:77:c5:18:9c:82:
27:a7:db:ad:ef:17:bd:0c:d9:53:7e:79:7a:b6:59:
0f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:1A:73:64:8D:1E:A1:F3:46:08:55:B4:55:C2:A1:E4:44:37:8E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/SZsac2SNHqHzRghVtFXCoeREN44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.156.0/24
94.74.158.0/23
94.74.164.0/24
94.74.171.0/24
94.74.182.0/24
94.74.191.0/24
109.203.163.0/24
176.46.136.0/24
176.46.138.0/23
176.46.141.0-176.46.142.255
176.46.144.0/24
176.46.150.0/24
176.46.152.0/24
176.46.155.0/24
176.46.157.0-176.46.158.255
Signature Algorithm: sha256WithRSAEncryption
a4:70:2c:1e:6a:f8:4f:06:7b:f9:7a:ce:23:34:93:b5:f7:ec:
45:96:d3:4f:fd:4b:8e:9f:4e:2f:b2:9b:b5:6b:7b:4b:f8:b1:
87:12:a4:bf:96:e3:34:68:f4:87:28:fd:db:21:41:dc:91:b3:
4e:00:7b:bb:d2:94:49:23:59:b3:f0:55:b3:54:ab:d8:d6:88:
90:54:36:6f:cd:5e:08:a3:6e:33:17:e5:c3:85:e7:fd:b2:98:
0a:76:9d:cf:70:d5:39:ef:3f:76:cd:19:9c:81:b2:84:45:fd:
d4:05:f8:83:73:e4:4d:1b:cd:27:8c:73:e7:ad:8d:52:99:2e:
77:5f:18:54:0f:63:9e:ef:0f:ae:90:06:a1:05:7b:b1:a8:af:
33:c5:ba:e2:ce:db:a5:c0:35:c1:d8:72:f4:b0:94:40:4b:00:
10:71:e3:54:1b:cd:60:62:c2:d2:1b:30:31:f6:5a:b6:9b:77:
56:ae:43:0d:ee:3c:56:60:ec:7f:cf:d2:e4:b7:73:40:8d:18:
df:ea:2e:0d:5e:4e:e9:3b:42:3b:bc:28:88:6f:06:6b:9d:fe:
b8:b6:af:d2:f1:1d:dd:f6:dc:fa:f5:bd:00:f9:99:e3:f3:62:
42:f0:50:4a:91:4e:a8:df:26:ad:bd:92:6c:b6:99:79:99:09:
0f:75:01:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:01 2025 by rpki-client on console.sobornost.net