Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/E3XShpyvQrJphZ5Hqb5JeIOyu2Q.roa
File: E3XShpyvQrJphZ5Hqb5JeIOyu2Q.roa (raw, json)
Hash identifier: OzaQDnduMUpy7fn1S4EHCoStB6luYl3bRu/ZQd4YkK8=
Subject key identifier: 13:75:D2:86:9C:AF:42:B2:69:85:9E:47:A9:BE:49:78:83:B2:BB:64
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018CE34F844528CBFFC04C234402B8CF8879
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/E3XShpyvQrJphZ5Hqb5JeIOyu2Q.roa
Signing time: Sun 07 Jan 2024 09:44:48 +0000
ROA not before: Sun 07 Jan 2024 09:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 95.82.8.0/21 maxlen: 21
95.82.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:4f:84:45:28:cb:ff:c0:4c:23:44:02:b8:cf:88:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 7 09:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1375d2869caf42b269859e47a9be497883b2bb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:32:e3:03:75:cc:46:58:6d:1f:5d:33:bb:
59:a3:b7:d4:db:f6:f1:41:99:07:1d:0c:d7:b9:8c:
53:a1:e1:ad:54:c9:2b:af:b7:ea:8a:10:ee:8f:f1:
6c:02:2a:8f:9f:50:f4:cc:13:86:80:d1:4a:4b:58:
fe:6e:da:09:c2:38:59:f1:61:62:22:f7:dd:60:74:
ee:af:6a:24:3e:10:8a:f2:42:c0:22:38:d3:60:b5:
40:87:49:31:05:4c:1b:3b:7d:1a:44:ce:c8:58:95:
e0:02:05:8c:29:4d:1f:c9:77:0e:a9:0e:9b:85:2c:
0a:cf:92:67:4a:9c:b7:36:c6:94:67:75:d7:48:28:
9a:7c:b7:7d:d5:84:9a:f4:bc:53:8a:0d:a0:c0:35:
3e:f4:c3:c8:01:00:95:3a:e8:b0:c6:79:db:42:0f:
d4:df:4b:20:a8:ed:72:ad:6e:bf:52:e3:c9:fb:2c:
47:cf:08:82:1a:51:5a:d9:35:2f:d4:61:28:e0:08:
2c:f1:7e:35:e6:d8:1c:56:27:21:92:71:d7:bb:29:
ea:10:ec:60:bc:f5:ac:d2:d7:c3:23:fd:18:f3:6e:
d3:23:f6:c6:57:f1:92:5b:5f:95:58:6a:9a:f0:22:
22:a9:a7:8c:49:0c:61:df:60:06:35:de:02:b6:e8:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:D2:86:9C:AF:42:B2:69:85:9E:47:A9:BE:49:78:83:B2:BB:64
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/E3XShpyvQrJphZ5Hqb5JeIOyu2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0/21
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
97:23:a2:41:e4:49:67:d2:43:5e:d5:11:80:2c:62:d0:f7:c2:
e4:40:34:f9:08:ae:c2:93:87:3f:8b:f5:25:23:96:f7:01:c0:
33:b2:1a:7d:e9:20:46:07:58:d3:25:8f:79:2c:e0:af:b1:c7:
bd:53:90:70:9c:d7:6f:b4:96:cc:7a:34:82:c3:93:38:48:55:
64:36:19:bd:78:f4:9f:83:0c:0a:4d:ad:94:54:17:47:1c:93:
b7:ae:16:2a:0b:c8:44:2b:09:d5:e9:50:1c:0f:94:6c:c8:da:
71:b6:c7:4f:1b:80:0a:68:bc:83:af:e6:86:d9:e6:99:a2:9d:
75:97:54:62:f8:20:cc:d7:f8:96:5a:83:84:aa:78:eb:2f:b9:
3f:14:84:63:1f:f8:74:75:2f:b4:b4:d0:19:03:76:22:21:ca:
4e:39:e0:b8:84:73:2d:b6:ea:41:68:06:49:61:c0:03:e9:66:
44:3d:fc:38:83:79:ce:89:63:a6:29:18:8e:40:bf:ef:d4:bd:
aa:c9:43:ca:1c:e5:bc:34:20:f0:f9:8d:df:35:0e:bb:83:0e:
80:54:d0:b8:92:0f:a6:7e:1f:92:85:6e:24:28:c5:b1:e2:46:
ee:55:c9:3d:cb:38:68:e2:85:92:0b:30:32:aa:01:04:07:35:
d3:74:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:42 2025 by rpki-client