Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5BlPxBnS_glYMnDpqM1tfViH7j4.roa
File: 5BlPxBnS_glYMnDpqM1tfViH7j4.roa (raw, json)
Hash identifier: pIjKyRUQ/o1HXlo5bj9ZoMyLAAgBsXOFYexL6hBVwm8=
Subject key identifier: E4:19:4F:C4:19:D2:FE:09:58:32:70:E9:A8:CD:6D:7D:58:87:EE:3E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018FD9BC002CCEE2753D9DA0E4F5153BE331
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5BlPxBnS_glYMnDpqM1tfViH7j4.roa
Signing time: Sun 02 Jun 2024 16:15:27 +0000
ROA not before: Sun 02 Jun 2024 16:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 95.82.8.0/21 maxlen: 24
95.82.16.0/20 maxlen: 24
109.111.52.0/22 maxlen: 24
109.111.60.0/22 maxlen: 22
176.221.20.0/23 maxlen: 24
176.221.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:bc:00:2c:ce:e2:75:3d:9d:a0:e4:f5:15:3b:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 2 16:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4194fc419d2fe09583270e9a8cd6d7d5887ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:2f:b7:d8:0f:a1:85:4c:69:0a:28:dc:8f:
37:76:11:00:24:e2:44:01:47:5e:cb:de:45:5b:d1:
bd:0b:85:c1:9e:68:c9:fe:5a:21:38:a0:b0:d6:52:
d9:a7:ea:9b:62:ea:7a:cf:2d:db:7a:31:22:76:64:
88:c3:e1:4b:79:00:23:a7:55:80:79:64:7c:bf:d9:
14:80:fb:27:07:5b:0c:23:b0:d1:a5:81:3b:d1:78:
10:67:91:14:a5:f8:ba:6c:73:89:df:60:e0:e6:af:
73:a0:64:e7:6c:e9:ef:72:cc:d6:ef:14:e1:77:24:
a8:84:d5:81:86:fb:77:17:81:1b:62:22:47:97:af:
71:aa:fb:8c:76:31:5a:3a:17:26:ea:df:7e:93:3a:
fd:1b:8d:81:40:c6:18:4a:88:80:28:51:78:8b:26:
84:16:09:f9:8b:f8:87:03:02:09:84:e6:67:2a:2c:
f7:16:27:80:81:d9:eb:5a:1d:5d:a4:5b:98:40:a8:
88:1a:4f:01:00:9b:97:6c:05:3c:29:0b:9d:79:12:
a5:1d:bb:68:de:f6:2e:3a:49:80:67:70:81:b8:2f:
ef:3d:ab:68:fa:c2:1f:73:5a:f2:3c:2e:10:f3:54:
6d:28:f2:d6:cf:0a:7b:83:02:e3:10:51:2b:a4:35:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:4F:C4:19:D2:FE:09:58:32:70:E9:A8:CD:6D:7D:58:87:EE:3E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/5BlPxBnS_glYMnDpqM1tfViH7j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.52.0/22
109.111.60.0/22
176.221.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:79:4c:0c:27:ca:4f:00:09:14:e9:c4:b9:b5:aa:9b:3a:95:
bb:de:d7:c9:c6:7d:cd:38:45:a3:14:dd:60:0b:41:df:bb:35:
84:62:51:ab:32:a0:32:b8:a9:1f:e3:1d:39:4e:5b:0c:e0:cd:
ce:ff:e4:6e:52:c3:5c:f4:25:c7:8f:53:73:58:01:de:a6:38:
24:9e:40:fa:59:d8:bd:28:0f:c5:3d:be:ad:a8:aa:5d:6c:f3:
11:99:a8:d9:7a:8f:74:ab:7d:b9:aa:18:4e:c3:9e:81:8e:82:
72:3e:76:d3:e8:14:ac:0a:59:2b:2f:34:d6:b8:0f:c9:ea:23:
70:2c:ed:24:ec:7f:8f:44:ea:ed:79:f7:1a:a1:b6:00:2f:2c:
fb:88:45:7a:96:46:e7:9b:b9:8f:e8:2a:81:24:d6:3a:47:62:
38:4d:c8:a2:01:f9:71:33:ff:6c:d6:06:35:4d:2b:92:f6:42:
f9:8e:a0:00:74:b4:d1:30:e3:76:72:2d:64:9e:b3:ae:f9:17:
84:18:6c:08:d3:a3:c1:f4:2b:4f:dd:d2:b0:8d:d1:eb:4a:70:
80:b1:c1:d8:39:32:2e:18:75:39:b9:02:27:93:d1:12:d7:1a:
83:15:29:9e:f3:04:a4:ad:9b:e0:a4:e7:c4:9d:af:98:e3:3f:
e8:7b:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:07 2025 by rpki-client