Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DNBITUzIHnCXOt5PB-boBVA-ilo.roa
File: DNBITUzIHnCXOt5PB-boBVA-ilo.roa (raw, json)
Hash identifier: cYd6gajru/BT97dHU5jLeZ/EfMElfQXHbo82taC4bOk=
Subject key identifier: 0C:D0:48:4D:4C:C8:1E:70:97:3A:DE:4F:07:E6:E8:05:50:3E:8A:5A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BCD5F9DD991FB1B0BE59ACFE6C9869E91
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DNBITUzIHnCXOt5PB-boBVA-ilo.roa
Signing time: Tue 14 Nov 2023 10:27:57 +0000
ROA not before: Tue 14 Nov 2023 10:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
95.82.32.0/21 maxlen: 24
176.221.24.0/21 maxlen: 21
176.221.30.0/23 maxlen: 24
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:5f:9d:d9:91:fb:1b:0b:e5:9a:cf:e6:c9:86:9e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 14 10:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cd0484d4cc81e70973ade4f07e6e805503e8a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:8b:f4:49:43:ea:03:63:f8:9c:06:2a:a3:
65:77:8a:61:4e:31:38:1f:fb:6a:92:e1:e9:e7:42:
64:4b:68:7e:c0:a9:5d:ac:ca:2b:5a:71:ce:e7:23:
f7:5b:8a:11:ee:e7:e7:f6:48:47:32:b6:f3:a4:ff:
f9:4f:51:55:d9:b1:97:49:fd:33:9b:74:2c:24:c5:
1d:af:bb:18:2d:47:d6:0c:9e:ca:0e:00:08:ac:e2:
63:7a:a8:df:d6:ea:9f:1c:91:7f:a3:ac:e9:d5:ff:
94:f7:42:94:32:50:00:5e:6f:2f:1a:d0:09:3a:7c:
d9:90:5c:19:2a:8a:b1:31:fe:ac:2c:ca:1f:8c:a5:
ad:fc:b3:9e:5c:aa:ef:1b:44:8a:0d:a6:34:57:9f:
16:f5:b5:4c:10:4b:be:d0:c1:9f:50:c9:d1:91:72:
e8:96:3c:c1:f6:dd:21:ae:62:a2:d0:3b:b8:4a:97:
35:8e:1c:ef:33:a0:79:c4:87:cd:4e:2a:f3:5d:b7:
36:2e:cb:11:6f:2d:51:2a:d6:42:15:cc:e6:7b:0e:
ac:8b:49:0f:48:a8:f9:cd:89:48:d9:96:a7:76:8f:
88:97:ea:d3:33:87:2a:71:5a:2c:a7:5d:23:52:43:
d4:f6:ba:27:77:07:fa:8b:23:85:49:69:f9:d7:bf:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:48:4D:4C:C8:1E:70:97:3A:DE:4F:07:E6:E8:05:50:3E:8A:5A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DNBITUzIHnCXOt5PB-boBVA-ilo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
95.82.32.0/21
109.111.32.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
79:b9:06:66:9a:b7:a8:49:91:3e:3f:3f:ac:33:d1:9e:7a:40:
7f:7b:fe:43:20:ff:61:78:a2:9a:a3:d7:11:6f:2f:3f:12:dc:
2c:38:4d:1e:0c:66:45:c4:9d:18:e6:a8:f1:64:e3:d2:a3:de:
a4:85:cb:22:eb:f1:ef:03:04:92:45:c8:69:f6:f2:d1:ef:cb:
96:29:36:74:f2:f7:69:c1:1c:e5:e2:28:fe:b9:c3:47:69:4f:
c8:ff:85:3b:28:d2:d2:4c:cc:51:61:f0:bc:83:24:42:dc:8a:
5d:2a:76:a1:61:b2:8a:ba:85:1a:30:a7:1a:e5:cf:09:e1:b4:
dc:94:1a:fb:16:4f:0e:b7:89:91:58:80:f3:89:7c:71:7f:d0:
47:ad:5b:42:fd:5d:a5:ce:85:5e:b5:eb:5e:1c:dd:85:bf:e0:
4a:7e:24:7f:a5:50:03:ac:f2:78:fe:2a:ae:f9:8b:13:01:dc:
38:00:5c:d0:36:c0:73:06:b0:4e:f4:93:3e:fc:29:4c:6f:d1:
6c:b8:17:8e:cc:a5:27:c3:9b:d6:cc:76:ec:61:c5:3b:0d:81:
a1:a7:be:61:c3:5f:ff:e3:16:af:5c:01:7a:c3:cc:a6:06:8c:
6f:e3:ab:c3:49:06:75:f5:5b:3c:32:2d:03:b3:58:43:ab:3c:
fb:77:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:32 2025 by rpki-client