Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/2NiCiBOSVHO9XRM07hgO1Iu5Aao.roa
File: 2NiCiBOSVHO9XRM07hgO1Iu5Aao.roa (raw, json)
Hash identifier: uvcLmHfGWyy7n//yX98gSgf7Vr/WnM6nLVtRSIIg9ek=
Subject key identifier: D8:D8:82:88:13:92:54:73:BD:5D:13:34:EE:18:0E:D4:8B:B9:01:AA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01902113F4EDF675BA62996081813EFDB7CF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/2NiCiBOSVHO9XRM07hgO1Iu5Aao.roa
Signing time: Sun 16 Jun 2024 12:44:34 +0000
ROA not before: Sun 16 Jun 2024 12:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
95.82.40.0/21 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:21:13:f4:ed:f6:75:ba:62:99:60:81:81:3e:fd:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 16 12:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8d8828813925473bd5d1334ee180ed48bb901aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7e:59:8f:18:29:94:20:5f:22:b4:93:fd:1b:
04:5e:b4:9a:37:4e:04:c1:79:5d:a0:2b:e9:38:5c:
a6:3c:26:05:c4:84:00:1c:50:a9:91:79:20:d2:77:
43:2a:57:45:06:14:04:4d:ab:6f:0d:40:5c:0e:32:
4d:61:1e:2a:a5:3e:0d:d6:39:e7:72:05:19:79:0a:
f4:9f:c5:07:96:48:2b:a9:68:9c:45:d4:c0:54:d7:
31:24:f2:3c:c8:69:42:60:20:8f:f8:b7:c4:8b:2c:
d0:bc:c7:20:68:ee:dc:81:cf:ff:c4:a2:f9:03:71:
5b:23:c7:f5:8d:2a:2e:76:9b:34:4c:c1:1c:0c:21:
db:7d:7f:d8:05:0d:86:dd:5a:34:fd:3c:ee:df:37:
70:39:e5:ca:55:d9:05:a8:83:62:84:e9:fd:6c:eb:
0c:34:c7:06:e2:ea:3d:b9:8b:74:2e:f1:a2:20:c6:
ee:f1:34:a0:85:43:81:45:b6:97:59:2a:26:3f:2f:
30:ba:47:d7:06:e2:39:4f:d7:56:60:ec:19:69:fa:
d6:73:f6:1a:41:be:82:6c:ed:e9:0d:ac:81:b4:4b:
15:52:c7:03:fb:12:d7:1b:68:a9:d7:f9:8b:9d:28:
14:3d:62:d7:15:c0:e7:ef:06:af:b7:71:e4:46:58:
25:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:82:88:13:92:54:73:BD:5D:13:34:EE:18:0E:D4:8B:B9:01:AA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/2NiCiBOSVHO9XRM07hgO1Iu5Aao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
95.82.40.0/21
109.111.32.0/20
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
6d:47:e3:fc:a0:ed:8a:a9:ce:53:ea:97:48:df:28:82:ab:ad:
a4:d8:b5:7c:75:e5:81:4c:94:87:b8:75:a4:12:ff:0d:2d:2e:
9b:59:19:20:cf:6f:c5:1f:f3:17:cf:1f:f2:29:b6:56:a0:19:
15:20:2f:64:76:a2:0e:da:02:6a:d4:b7:18:72:39:03:21:94:
30:70:99:3a:23:9c:39:3e:7b:d3:a0:a8:ef:70:db:4e:29:22:
7a:eb:5a:91:41:02:93:59:b3:ea:20:cf:d4:7d:6c:48:67:88:
9b:df:0a:78:e6:33:3b:c8:c7:2a:57:39:a8:87:26:18:c6:00:
1b:a0:dc:5d:90:5d:d7:20:81:51:1c:82:93:10:83:3f:c2:99:
91:c9:f0:eb:a8:b9:25:a4:c6:51:d3:b7:cd:75:2c:f1:c8:46:
96:09:60:5c:07:c8:c6:74:96:f5:c7:5d:9f:19:7e:19:60:4b:
41:ce:36:2d:49:d6:18:e1:b5:45:92:bf:42:62:33:09:94:d1:
cd:d5:19:bf:15:32:e6:4c:2c:d0:14:6d:b9:5a:d4:71:9d:5b:
d0:f5:5d:6a:9a:ed:5d:fd:e7:59:6c:23:4a:05:24:86:a5:23:
aa:00:89:19:51:71:42:20:e1:b8:5c:2b:d8:e5:a4:5f:74:7b:
29:9f:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:21 2025 by rpki-client