Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/95sBxXtEIDQPrEsF-SV3Zw3eoEs.roa
File: 95sBxXtEIDQPrEsF-SV3Zw3eoEs.roa (raw, json)
Hash identifier: JC5TwbRn/sLEcpajtDF8GQ1mPVVi/3BsxHJLeMcSTwM=
Subject key identifier: F7:9B:01:C5:7B:44:20:34:0F:AC:4B:05:F9:25:77:67:0D:DE:A0:4B
Certificate issuer: /CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Certificate serial: 0182AB44A07A9272015993CD59764D214609
Authority key identifier: 6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/95sBxXtEIDQPrEsF-SV3Zw3eoEs.roa
Signing time: Wed 17 Aug 2022 10:06:17 +0000
ROA not before: Wed 17 Aug 2022 10:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21021
IP address blocks: 194.116.132.0/23 maxlen: 23
193.200.118.0/23 maxlen: 23
194.149.240.0/24 maxlen: 24
195.93.134.0/23 maxlen: 23
62.61.32.0/19 maxlen: 19
193.43.240.0/22 maxlen: 22
37.131.128.0/19 maxlen: 19
94.251.128.0/17 maxlen: 17
94.78.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:44:a0:7a:92:72:01:59:93:cd:59:76:4d:21:46:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcf621a127dda08d89a1242674934a9ed23c1ee
Validity
Not Before: Aug 17 10:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f79b01c57b4420340fac4b05f92577670ddea04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:4e:cc:2d:e6:8d:e2:f7:1b:2b:88:01:e5:
d6:e1:ab:75:e2:7d:5e:3c:ee:a5:cd:c3:a4:cd:c0:
98:09:44:90:06:70:b8:bf:4f:13:13:04:aa:03:1f:
20:78:2a:c7:58:4a:b1:50:cc:d5:20:f2:07:18:e6:
6d:df:24:92:6e:8c:de:db:76:cf:4b:aa:19:f8:d8:
b9:07:53:48:b8:5a:41:59:f6:e2:c4:c2:d4:4f:56:
ac:ad:8b:0c:b9:6d:99:96:d7:62:6c:2b:cd:b2:c1:
26:cc:55:f1:a1:c7:93:5f:8c:df:74:d9:57:b7:62:
c9:2a:62:8a:c4:59:5b:d3:af:ba:be:17:e0:26:25:
26:3d:b1:af:68:60:fb:df:ef:3a:58:f3:49:d2:54:
af:a8:28:00:10:67:d8:c5:6e:06:cc:bd:76:e0:cf:
5f:c6:c7:21:a6:a7:16:b4:c2:82:91:7d:18:ef:4f:
a0:27:51:be:94:2c:53:94:8d:e8:7d:58:3b:3f:ab:
4c:c9:de:a9:97:38:34:38:61:67:37:83:03:e5:c7:
77:ab:cc:eb:f3:d8:23:92:d1:b4:35:19:12:de:73:
af:9c:d3:d9:88:10:b4:38:ef:e2:24:36:cb:f9:ce:
42:4b:24:10:67:a3:4a:ba:e2:1f:67:c1:96:e6:bd:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:01:C5:7B:44:20:34:0F:AC:4B:05:F9:25:77:67:0D:DE:A0:4B
X509v3 Authority Key Identifier:
keyid:6D:CF:62:1A:12:7D:DA:08:D8:9A:12:42:67:49:34:A9:ED:23:C1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/95sBxXtEIDQPrEsF-SV3Zw3eoEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9b58d4-38ec-4d59-9e21-a9164322c91c/1/bc9iGhJ92gjYmhJCZ0k0qe0jwe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.128.0/19
62.61.32.0/19
94.78.128.0/18
94.251.128.0/17
193.43.240.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
Signature Algorithm: sha256WithRSAEncryption
55:28:f5:06:48:4b:34:be:14:5e:0c:4c:91:a0:e0:7f:41:b5:
06:20:64:3d:6d:94:47:63:bd:05:66:2e:96:10:92:04:e4:aa:
4b:96:88:94:c9:04:a1:d0:0d:0d:6f:ef:4b:a5:d2:d4:a3:83:
ca:6e:31:4f:3c:bb:27:50:24:f7:f0:45:ff:c5:22:84:f7:40:
10:4d:cc:96:e9:e4:75:0c:97:40:99:56:c1:96:9a:de:16:12:
e3:a6:f5:23:53:3b:7d:81:bf:1f:cb:69:b7:20:71:79:db:27:
e3:0b:8b:52:2f:14:ff:72:eb:d1:b0:d9:67:6e:96:0d:ab:bd:
7b:9f:e6:7a:1a:ac:c9:87:c6:c2:19:dc:41:25:33:fe:ae:c4:
0d:ce:06:ca:56:9c:a9:88:d3:12:3a:9b:c9:13:13:f1:b9:ba:
db:d1:20:c0:f3:72:7b:5d:d4:bb:f4:98:f8:07:23:75:2f:9b:
ca:26:7d:fe:8f:ef:b2:66:10:ea:39:19:5b:ff:f0:ec:6d:16:
a1:1d:82:7b:40:7e:00:90:3a:9e:9b:a2:16:e8:e0:01:50:4d:
24:76:30:a0:1d:c2:90:c8:81:96:93:80:2d:99:04:9f:a7:2c:
aa:47:6d:4b:b9:08:c9:94:8d:39:c4:d4:1e:88:5f:7d:03:8f:
09:95:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:00 2025 by rpki-client