Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Iyq9UZL7CFhoHEFVat4zyqWRLzg.roa
File: Iyq9UZL7CFhoHEFVat4zyqWRLzg.roa (raw, json)
Hash identifier: 67LR8i1gI8yhDvtK3ztqOZa8Je1kzfmxNpGSfU1OMmQ=
Subject key identifier: 23:2A:BD:51:92:FB:08:58:68:1C:41:55:6A:DE:33:CA:A5:91:2F:38
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0182EEB03916DADEEE385A521910936D23BA
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Iyq9UZL7CFhoHEFVat4zyqWRLzg.roa
Signing time: Tue 30 Aug 2022 12:18:22 +0000
ROA not before: Tue 30 Aug 2022 12:18:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51775
IP address blocks: 95.82.0.0/19 maxlen: 19
95.82.0.0/18 maxlen: 18
176.221.16.0/21 maxlen: 21
176.221.16.0/20 maxlen: 20
95.82.32.0/19 maxlen: 19
176.221.24.0/21 maxlen: 21
37.128.240.0/20 maxlen: 20
37.128.240.0/21 maxlen: 21
37.128.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:b0:39:16:da:de:ee:38:5a:52:19:10:93:6d:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 30 12:18:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=232abd5192fb0858681c41556ade33caa5912f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:79:7d:7a:95:37:69:47:0d:85:ce:0e:33:
e0:27:e1:94:26:5b:49:f2:58:19:e9:33:4c:95:d3:
00:5a:d8:22:71:24:31:40:96:07:28:8e:0b:e0:40:
15:8a:d8:1b:e1:60:e4:3c:e1:59:47:dc:64:47:bb:
df:55:d4:cf:13:bb:71:12:c6:b2:54:42:f8:9f:1a:
c3:7d:a0:39:d8:12:5d:43:fa:61:04:c0:d6:57:c9:
35:55:74:4d:73:06:76:2c:8d:ee:4a:76:b9:53:23:
35:64:31:9b:ab:08:ef:23:69:ad:2d:46:a4:48:73:
5c:40:0f:58:c5:dd:eb:bf:08:e9:50:35:a8:b5:47:
2a:2d:40:a6:b0:f9:59:a1:62:e8:eb:f8:70:11:9a:
dc:3d:b6:a3:d5:47:dd:bd:0a:44:ef:ea:bf:bb:d2:
1d:e7:f1:6f:b8:03:35:84:c1:3d:11:90:2f:75:e4:
88:95:4f:49:9b:1d:c1:1a:20:66:48:56:ef:58:c5:
a6:78:68:eb:44:7f:91:18:d0:89:24:5c:b1:c0:d4:
98:92:f5:9e:10:8d:5d:e3:2d:4d:55:5f:53:32:f8:
11:ce:c6:0c:a4:84:9e:8f:53:d8:55:09:72:82:e3:
3c:eb:dd:c4:c0:a9:86:84:c8:81:e4:68:73:e8:37:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:BD:51:92:FB:08:58:68:1C:41:55:6A:DE:33:CA:A5:91:2F:38
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Iyq9UZL7CFhoHEFVat4zyqWRLzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.240.0/20
95.82.0.0/18
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
67:73:0a:b5:c5:f1:42:2b:f6:1d:bd:82:7a:ea:43:4c:a5:f0:
46:95:69:9b:09:32:af:35:20:a0:7f:fb:07:bf:3f:e0:c3:7f:
a3:4d:c6:21:03:0b:c8:8f:88:67:c1:c4:30:b6:c2:92:58:fe:
92:95:61:18:d2:24:8d:59:f7:b7:68:4d:37:94:1a:9c:37:44:
8b:cf:ac:9a:a8:d9:b7:74:57:58:00:20:0a:52:f9:cd:03:f6:
6d:92:9c:b6:65:80:1e:b0:e6:87:8a:38:48:14:75:db:70:15:
b3:dd:48:4f:8c:e2:53:37:cf:20:e1:19:ac:6a:52:c9:1b:59:
ec:d8:d9:75:7b:c7:6f:1d:fc:38:78:b4:04:44:3c:95:cb:2e:
05:a7:dc:59:92:5f:d5:84:47:6b:a9:21:ec:03:a5:73:92:31:
58:e4:33:bb:8e:15:b6:d8:e2:70:68:98:2f:98:fc:4e:c4:e7:
fc:f9:d5:70:38:3b:ce:c9:19:cb:e6:3c:06:91:1e:f2:5c:17:
eb:b0:80:84:72:21:80:b7:2b:44:00:99:ba:0c:14:3f:f8:3d:
67:94:54:a2:ca:a6:a7:37:35:97:d7:a2:ef:d9:80:0d:2f:ed:
44:79:03:bc:35:c8:77:74:91:5e:bc:41:cf:18:12:67:de:5a:
d3:af:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:09 2025 by rpki-client