Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1OVoNA8Tt7qKPBMzqwmDy7HBYno.roa
File: 1OVoNA8Tt7qKPBMzqwmDy7HBYno.roa (raw, json)
Hash identifier: yGxb0W1L3lCvF96s2smLlBxmt0WpPtdxYkWZ54fV20c=
Subject key identifier: D4:E5:68:34:0F:13:B7:BA:8A:3C:13:33:AB:09:83:CB:B1:C1:62:7A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0186E59452D7696A1B9DE4CA1D83414E2CF3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1OVoNA8Tt7qKPBMzqwmDy7HBYno.roa
Signing time: Wed 15 Mar 2023 14:02:28 +0000
ROA not before: Wed 15 Mar 2023 14:02:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207645
IP address blocks: 95.82.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:94:52:d7:69:6a:1b:9d:e4:ca:1d:83:41:4e:2c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 15 14:02:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4e568340f13b7ba8a3c1333ab0983cbb1c1627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:cc:2f:7e:14:13:58:08:0d:4a:41:ba:df:
3b:ce:e3:ef:3c:95:56:d9:13:23:b1:08:e8:ae:5f:
88:ca:d8:2b:9d:58:8f:5d:54:e2:08:8c:39:55:3a:
f2:96:8c:b6:ff:88:16:8f:87:79:87:2e:f3:ef:03:
b0:dc:a5:de:9e:46:e4:e2:01:77:22:b5:d2:ff:db:
ea:1a:41:a0:21:a3:aa:e2:35:a7:e0:37:64:ee:2b:
1d:c1:0e:b0:43:9a:1c:95:a5:dd:fd:ec:0d:56:99:
02:97:f2:35:24:e3:de:fc:0b:80:5d:15:df:52:ab:
d3:80:8a:ad:ce:66:13:90:db:b2:8f:58:87:69:c7:
3c:0a:90:52:f5:78:50:57:ac:02:71:16:fa:29:d3:
01:a4:c7:6f:4c:59:31:03:df:04:8c:4e:84:15:99:
f5:a2:e5:f0:a7:b0:18:fc:cb:68:5e:cc:71:94:dd:
b3:de:a0:70:ad:d9:30:90:54:b9:00:45:61:b7:3b:
a3:bd:92:e6:6f:58:93:2c:5a:32:14:68:6c:41:b9:
64:3d:fe:c2:5b:ed:90:b9:f0:7a:f5:8f:a3:be:db:
d7:95:6c:5f:ca:e1:4c:f9:6b:7d:e0:61:b0:4a:6e:
2f:6a:63:e5:6c:ef:30:46:19:e7:85:5c:60:74:e0:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:68:34:0F:13:B7:BA:8A:3C:13:33:AB:09:83:CB:B1:C1:62:7A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/1OVoNA8Tt7qKPBMzqwmDy7HBYno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.40.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:b9:6c:cf:4d:3c:80:2f:b1:3b:eb:4e:bf:92:f9:e3:50:0c:
bc:38:20:50:2a:db:f6:07:40:9b:d5:27:0a:f9:f0:21:36:85:
6a:b0:30:f0:38:38:46:90:d2:28:6e:1f:d3:25:0a:1b:52:99:
15:0c:b8:4f:92:0e:0d:29:05:72:e2:83:ef:fb:15:fe:df:ee:
b6:5c:d3:a7:60:f8:76:39:34:8d:57:a5:c3:ca:56:fc:50:0b:
94:03:bf:72:fe:df:b5:41:91:31:14:a7:42:ac:ff:79:64:f1:
27:c8:24:20:0a:52:31:b5:f4:da:80:3a:0b:e9:45:65:d5:0e:
6a:99:fc:7f:b9:8f:06:70:22:44:0c:9d:c0:8b:27:2f:96:d6:
b1:e1:13:71:d2:2e:9e:4c:7d:47:6f:47:00:3b:62:9f:e8:6e:
f5:fc:d5:64:29:0a:3b:b0:97:ed:f5:ad:2a:bc:2c:cf:9f:ad:
f0:e6:50:83:06:19:8d:22:0a:74:b8:7b:65:03:35:80:18:20:
22:1a:13:e9:97:09:08:86:72:75:c8:2a:ed:2a:25:ca:42:f4:
60:4b:dd:38:8b:10:7d:e8:1c:24:0b:31:bd:80:08:a8:a0:59:
31:8c:46:6a:10:77:6d:cf:b9:83:71:05:2f:ff:f1:06:d0:a9:
82:8b:b5:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbllFLXaWobneTKHYNBTizzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwMzE1MTQwMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGU1NjgzNDBmMTNiN2JhOGEzYzEzMzNhYjA5ODNjYmIxYzE2MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQXML34UE1gIDUpBut87zuPvPJVW
2RMjsQjorl+IytgrnViPXVTiCIw5VTryloy2/4gWj4d5hy7z7wOw3KXenkbk4gF3
IrXS/9vqGkGgIaOq4jWn4Ddk7isdwQ6wQ5oclaXd/ewNVpkCl/I1JOPe/AuAXRXf
UqvTgIqtzmYTkNuyj1iHacc8CpBS9XhQV6wCcRb6KdMBpMdvTFkxA98EjE6EFZn1
ouXwp7AY/MtoXsxxlN2z3qBwrdkwkFS5AEVhtzujvZLmb1iTLFoyFGhsQblkPf7C
W+2QufB69Y+jvtvXlWxfyuFM+Wt94GGwSm4vamPlbO8wRhnnhVxgdOA+4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNTlaDQPE7e6ijwTM6sJg8uxwWJ6MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvMU9Wb05BOFR0N3FLUEJNenF3bUR5N0hCWW5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX1IoMA0G
CSqGSIb3DQEBCwUAA4IBAQAauWzPTTyAL7E7606/kvnjUAy8OCBQKtv2B0Cb1ScK
+fAhNoVqsDDwODhGkNIobh/TJQobUpkVDLhPkg4NKQVy4oPv+xX+3+62XNOnYPh2
OTSNV6XDylb8UAuUA79y/t+1QZExFKdCrP95ZPEnyCQgClIxtfTagDoL6UVl1Q5q
mfx/uY8GcCJEDJ3Aiycvltax4RNx0i6eTH1Hb0cAO2Kf6G71/NVkKQo7sJft9a0q
vCzPn63w5lCDBhmNIgp0uHtlAzWAGCAiGhPplwkIhnJ1yCrtKiXKQvRgS904ixB9
6BwkCzG9gAiooFkxjEZqEHdtz7mDcQUv//EG0KmCi7Xr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:19 2025 by rpki-client