Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/FYSGloqD6aPu0gaAQUWaOzJ7aHI.roa
File: FYSGloqD6aPu0gaAQUWaOzJ7aHI.roa (raw, json)
Hash identifier: UlJB04LLApmYDlzdUg883aRtTSZZALc2xkmwo5zjYiI=
Subject key identifier: 15:84:86:96:8A:83:E9:A3:EE:D2:06:80:41:45:9A:3B:32:7B:68:72
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0182E9EB9249726626F25DC4857BD50B1481
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/FYSGloqD6aPu0gaAQUWaOzJ7aHI.roa
Signing time: Mon 29 Aug 2022 14:05:05 +0000
ROA not before: Mon 29 Aug 2022 14:05:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51775
IP address blocks: 95.82.0.0/19 maxlen: 19
95.82.0.0/18 maxlen: 18
95.82.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:eb:92:49:72:66:26:f2:5d:c4:85:7b:d5:0b:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 29 14:05:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158486968a83e9a3eed2068041459a3b327b6872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:2f:49:88:63:0c:4b:68:e8:d3:6c:ea:d0:
b1:d6:0a:96:4a:c7:9d:cd:2e:64:de:86:ae:b2:3f:
41:3d:ae:ac:7c:41:0c:78:ce:3d:0a:37:89:a0:8d:
97:86:b0:a9:8b:c3:03:1f:ca:bb:72:e6:a5:0c:9e:
2c:38:c9:7c:14:7b:ff:46:a8:8e:de:cf:ec:11:9e:
d1:f4:3e:2d:e4:ac:4b:96:79:aa:06:73:ce:eb:d0:
ed:be:b3:fb:90:92:4e:66:7b:f1:fd:6e:ff:1a:96:
5f:2d:5f:04:e7:84:05:0c:e5:4e:ff:a5:5a:5c:5f:
07:6b:67:d7:0f:b2:37:41:c1:43:5e:7b:8f:b5:42:
79:95:81:6d:cc:39:60:76:01:fb:7d:7a:66:92:4e:
94:7a:72:ff:05:64:6f:c0:4e:ce:d7:18:7e:c5:11:
af:e6:cf:6b:b9:10:97:fb:87:f2:33:95:53:0d:d9:
5d:1f:3b:c9:da:bc:a7:a8:7f:25:2a:82:4c:a7:fc:
08:56:31:1d:6a:62:7f:e0:f6:70:68:32:06:8a:7a:
18:1d:1e:8d:94:71:4f:49:e0:59:dc:71:b3:91:9e:
3d:b6:28:c1:27:3e:7a:a3:88:0d:8e:fb:48:41:b4:
32:08:5f:c0:80:94:7c:f2:c3:9a:49:52:aa:d4:8c:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:84:86:96:8A:83:E9:A3:EE:D2:06:80:41:45:9A:3B:32:7B:68:72
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/FYSGloqD6aPu0gaAQUWaOzJ7aHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/18
Signature Algorithm: sha256WithRSAEncryption
31:93:73:33:9c:1b:98:ae:84:18:30:15:57:42:68:64:40:66:
31:cb:21:25:65:99:ed:2e:9f:c1:5d:83:cc:b2:a8:3a:45:6e:
19:82:cc:63:28:34:87:d8:e0:00:99:73:88:14:66:a3:77:7a:
25:39:39:e1:77:c0:30:86:20:1a:e2:8f:1b:5f:0a:df:ca:e6:
0c:20:2c:eb:ca:e1:45:85:70:26:ea:23:ee:77:cd:e6:40:d8:
df:f5:88:89:7d:cb:18:6e:5f:98:ef:67:87:17:3d:89:1b:24:
4b:e5:52:f7:79:be:2c:21:cb:fa:75:74:6b:71:70:1a:3f:72:
9d:d4:ff:7f:51:26:e1:3f:8c:15:0b:59:ba:6f:63:b0:1a:e0:
6d:c5:b2:45:d8:53:ca:1a:cc:fc:5e:b2:2e:24:37:f7:d4:d1:
30:d9:45:0b:e0:91:38:91:88:54:6a:98:65:6f:63:a9:f1:48:
b8:f7:55:88:ad:ef:fd:f8:66:a2:10:00:71:cd:1a:a9:39:fc:
18:bd:ad:4b:24:1c:9d:e9:6f:5e:b8:5e:c2:ed:09:db:e5:d4:
75:4e:83:49:2b:24:89:4d:3c:25:9a:50:e2:66:3a:96:d7:4f:
18:7d:91:75:fc:a0:75:14:89:76:cf:d3:c9:c4:0f:66:20:72:
ff:f3:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:50 2025 by rpki-client