Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DODMVJ-fXh7PuzzEOvkvG-Fmg9Q.roa
File: DODMVJ-fXh7PuzzEOvkvG-Fmg9Q.roa (raw, json)
Hash identifier: HUGGE6bNPPU8bujxBEylwHeWYGSKHJ8SMdPBC4L/yKY=
Subject key identifier: 0C:E0:CC:54:9F:9F:5E:1E:CF:BB:3C:C4:3A:F9:2F:1B:E1:66:83:D4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F5FA7174A11DDC9E4E2F98F35EDE9A923
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DODMVJ-fXh7PuzzEOvkvG-Fmg9Q.roa
Signing time: Thu 09 May 2024 23:18:57 +0000
ROA not before: Thu 09 May 2024 23:18:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.8.0/21 maxlen: 24
95.82.16.0/20 maxlen: 24
109.111.32.0/21 maxlen: 24
109.111.52.0/22 maxlen: 24
109.111.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5f:a7:17:4a:11:dd:c9:e4:e2:f9:8f:35:ed:e9:a9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 9 23:18:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ce0cc549f9f5e1ecfbb3cc43af92f1be16683d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:eb:d7:a1:cb:67:49:38:42:26:5a:6a:9f:
11:87:34:f6:05:25:64:52:1e:c0:6e:6e:f1:57:e7:
5c:90:19:52:91:78:e0:34:c6:ed:13:cc:3d:46:c0:
20:8a:7a:aa:80:88:43:a1:42:3d:15:ed:2b:3e:a7:
69:1d:cf:4c:48:b2:46:a4:47:7b:ce:93:ab:1d:dc:
85:e7:2a:04:1d:27:92:b3:58:e8:44:3a:61:f0:75:
94:6d:7d:cc:d1:c6:5b:ff:aa:44:3a:4a:a9:f2:a0:
ed:cf:5f:4e:71:1c:34:7b:c5:09:34:62:74:3a:85:
fa:1b:e5:ef:79:e0:e4:cf:6a:ed:e3:f3:10:78:df:
9c:d0:86:e9:25:76:0e:77:cb:8e:c7:ed:ad:bb:cb:
64:4b:08:d3:7b:a2:5b:a8:3a:91:ea:1c:56:67:72:
37:e7:3b:a1:03:ad:10:ec:2d:52:2f:71:8d:5b:8d:
dd:12:f7:ec:dd:e0:bc:5a:d5:37:91:38:61:16:f3:
60:d2:81:80:6f:12:3e:07:f9:04:3c:04:38:39:90:
6c:fa:e5:7e:f2:11:5d:a0:00:33:6f:0f:17:3a:4e:
40:54:21:bb:11:1e:d6:64:53:c9:ad:46:97:a1:46:
22:19:41:48:8a:29:8c:83:b2:3b:6d:9b:03:fa:8d:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:CC:54:9F:9F:5E:1E:CF:BB:3C:C4:3A:F9:2F:1B:E1:66:83:D4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DODMVJ-fXh7PuzzEOvkvG-Fmg9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.32.0/21
109.111.52.0/22
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
39:19:36:f0:80:33:b2:72:8c:3a:38:a7:cc:4b:d4:e2:4b:43:
5e:86:b8:a2:24:15:e3:f4:98:d1:98:15:1f:23:fc:54:c8:df:
04:77:84:34:d7:d8:9a:e5:2f:0d:d9:34:79:c3:95:c3:c2:1c:
ec:2c:08:f0:58:e5:ff:fa:b9:e1:4a:56:14:37:c8:69:bd:f1:
07:1e:6c:ff:ba:63:e1:ca:fc:4d:87:2e:14:52:64:44:e6:8a:
be:e2:34:c8:52:5a:c5:35:84:fd:ff:6d:05:3d:0f:3d:92:73:
48:f6:b7:07:1f:cc:fe:d0:46:cb:12:15:02:5c:5c:bf:91:80:
9e:04:b9:74:e6:07:df:5e:8b:97:36:c7:4f:c4:04:05:a5:3d:
00:0d:bf:33:1d:4b:c2:ff:e3:5a:e3:7a:90:36:70:30:e2:44:
bb:ae:64:c3:2b:16:c8:df:74:19:71:26:1d:e6:19:13:e6:58:
7c:d6:58:74:54:9b:a9:97:ca:39:68:aa:66:91:a0:d1:da:0a:
fc:75:8d:e4:d8:e3:8d:8e:43:68:cc:48:7e:c8:e5:fa:46:99:
0e:ef:43:cb:76:75:06:a0:fa:2b:c6:53:ee:ba:af:d4:2d:d9:
d2:35:32:f6:69:4d:be:f5:2f:86:f5:69:e8:59:a7:7b:8f:3b:
c7:07:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:19 2025 by rpki-client