Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/0OrP9JiJGxVA0K1YY31VAA0swFY.roa
File: 0OrP9JiJGxVA0K1YY31VAA0swFY.roa (raw, json)
Hash identifier: va2lXHWBEZYpALrhVs6GMkiGBX8ghPdULhnHrsMCszE=
Subject key identifier: D0:EA:CF:F4:98:89:1B:15:40:D0:AD:58:63:7D:55:00:0D:2C:C0:56
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0192B1453A3F8B86FC74E97FFB5BCCBF07B5
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/0OrP9JiJGxVA0K1YY31VAA0swFY.roa
Signing time: Mon 21 Oct 2024 22:49:17 +0000
ROA not before: Mon 21 Oct 2024 22:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.40.0/22 maxlen: 24
109.111.42.0/23 maxlen: 24
109.111.60.0/22 maxlen: 22
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b1:45:3a:3f:8b:86:fc:74:e9:7f:fb:5b:cc:bf:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 21 22:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0eacff498891b1540d0ad58637d55000d2cc056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:25:d8:01:97:d8:21:97:3f:19:a8:f3:db:
f4:4d:c6:d0:8a:2f:7d:b9:25:a4:02:ee:f0:cf:1f:
ce:e4:ea:d9:7c:ab:f9:a8:cd:64:cd:2c:66:4e:de:
4d:20:9e:cd:7c:1b:cc:f4:98:19:3c:c3:db:2f:b0:
d1:b2:d0:99:c1:2a:56:c6:0f:49:31:8c:ae:6e:cc:
82:1a:2c:ad:69:ee:8f:31:4a:be:ce:b7:19:4a:f3:
85:05:43:c2:1c:7a:94:0f:3c:87:ba:e2:4d:da:3c:
94:1c:8c:21:51:d7:0f:84:26:e2:fa:39:5e:38:b8:
35:13:7d:a5:c9:e8:00:1d:61:48:34:b1:50:7a:5a:
91:25:73:1b:92:59:b3:43:57:e8:eb:c9:af:32:c8:
b7:76:bf:30:86:27:d4:4d:e1:8c:c1:bc:c8:f5:d0:
3a:fc:ab:83:17:58:f1:ca:44:f9:68:2d:80:d1:00:
2b:b8:83:bb:fc:fd:ad:71:66:ba:c3:ce:0f:1f:50:
64:3e:2e:d0:af:0e:e2:9d:c6:45:cc:79:16:67:2c:
92:b3:cc:b8:cf:0f:f2:8b:39:cd:38:6b:03:eb:e7:
43:ba:15:10:21:4d:72:70:31:e9:c1:86:f8:38:b9:
ad:3d:aa:b6:b8:8c:eb:95:5d:93:28:7c:f5:a0:5d:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:CF:F4:98:89:1B:15:40:D0:AD:58:63:7D:55:00:0D:2C:C0:56
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/0OrP9JiJGxVA0K1YY31VAA0swFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
109.111.32.0/20
109.111.60.0/22
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
73:55:c8:00:14:3d:a7:f5:22:07:96:f5:d7:1f:31:78:cb:c4:
25:24:f5:41:d1:2d:c8:90:50:6c:0b:5f:6b:0d:e4:7f:b5:ce:
6b:bf:db:59:0a:54:4c:60:bf:c7:8a:41:f9:c3:02:79:06:19:
5d:ad:71:8c:a9:7c:01:75:81:df:b3:71:b9:ce:6f:e4:54:78:
b1:4e:c9:68:20:74:8e:44:b4:fe:15:03:49:df:7b:f6:3c:75:
45:fd:40:ad:17:7d:11:2b:4c:34:07:02:c3:4a:75:66:3b:a8:
6c:2b:fa:63:7e:f0:52:07:6a:62:98:dd:f5:12:08:a7:ac:55:
1a:1c:42:b9:49:a5:1c:10:bb:fb:99:dd:fc:d9:5f:f7:c5:13:
fe:e5:b9:1e:50:05:0c:14:f3:bb:53:69:c9:ed:6b:72:24:97:
d4:72:c1:db:fa:1d:a3:55:a9:98:32:c2:30:38:d8:79:b5:a1:
d2:df:90:b9:73:3e:a7:3e:07:bb:48:5c:9f:6c:8e:9f:67:26:
b9:43:8f:5a:5f:5a:ce:60:60:b8:1c:a0:9a:96:de:7b:ec:35:
3d:56:1e:04:81:d0:7f:22:97:f3:9e:14:82:e7:98:b0:52:f1:
7c:c6:e8:1d:47:71:08:7a:7b:87:d8:bd:71:35:a0:06:fa:03:
11:58:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:28 2025 by rpki-client