Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J6zdojfqPAaZ7STfHR14XwQ5tH0.roa
File: J6zdojfqPAaZ7STfHR14XwQ5tH0.roa (raw, json)
Hash identifier: MF5zXpK81TRivVrUBvv84QPSZHf0uEoUJW8xaS5QHuE=
Subject key identifier: 27:AC:DD:A2:37:EA:3C:06:99:ED:24:DF:1D:1D:78:5F:04:39:B4:7D
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01941FFA841B1C7DE56104D338FD41FC2126
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J6zdojfqPAaZ7STfHR14XwQ5tH0.roa
Signing time: Wed 01 Jan 2025 03:48:19 +0000
ROA not before: Wed 01 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 95.82.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:84:1b:1c:7d:e5:61:04:d3:38:fd:41:fc:21:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27acdda237ea3c0699ed24df1d1d785f0439b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:ca:dc:e7:96:a3:20:97:a0:c3:92:0e:a0:
d6:24:db:69:55:bc:52:72:a5:5a:ef:75:34:03:b1:
3d:f5:16:99:a9:e9:52:96:ef:98:c8:40:fc:3a:11:
e0:f5:49:93:75:5e:1d:fd:4e:63:53:73:29:95:bc:
ef:b4:43:f4:39:1d:18:d0:75:c3:05:32:ca:73:66:
84:06:4c:5c:2b:c6:41:08:74:ef:cc:5b:f4:5d:90:
b4:ab:61:b9:88:f5:7f:70:1a:b4:b4:ac:de:ff:d9:
38:dd:d9:61:a3:ec:6a:ed:c1:9b:8a:29:65:b8:7b:
85:fa:64:7e:d4:df:7c:72:a4:03:6a:74:85:b2:4d:
09:b3:7b:e8:0b:a9:e3:64:57:fe:2b:79:c8:fd:0b:
2d:c4:20:08:dd:32:15:ac:1c:b5:aa:4b:11:53:19:
dc:86:41:0c:89:ca:97:f3:4e:35:46:39:07:df:e2:
84:4b:8e:76:a6:35:23:20:ae:fe:69:d1:ba:70:25:
ad:8f:b8:e4:98:ba:f8:57:01:72:a0:29:f3:9f:f4:
71:67:e6:89:5f:91:44:64:58:06:d1:8e:24:b0:26:
ab:02:8a:cd:15:aa:25:83:f1:9f:1d:dc:01:ea:71:
fd:65:25:a9:d0:eb:dd:c0:16:e4:11:1d:64:c2:e4:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:DD:A2:37:EA:3C:06:99:ED:24:DF:1D:1D:78:5F:04:39:B4:7D
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J6zdojfqPAaZ7STfHR14XwQ5tH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:e9:ae:c6:f1:f6:c3:18:f2:59:9b:77:82:cf:48:95:b5:af:
1b:0b:3b:55:f6:72:0c:af:ae:88:44:5b:c2:f6:74:c1:9d:23:
f9:de:84:1b:92:d5:2c:49:13:b9:1f:02:6e:86:d6:c2:c2:84:
33:db:76:35:80:b2:db:46:09:fb:b7:19:cf:50:eb:18:8e:7e:
eb:92:aa:ed:15:b9:ee:5c:46:35:5a:d7:27:2b:d4:2a:92:04:
10:35:05:d0:77:98:06:88:0d:e2:08:f1:a2:4a:33:8f:86:56:
a8:4f:e7:ea:c8:f2:fb:d2:b6:b5:f4:b9:fd:9e:06:a2:cb:a1:
25:7b:ec:cd:5c:3f:21:a3:e7:2b:ee:04:17:19:11:ab:60:db:
0b:36:b9:a1:b8:f0:7b:0f:d8:31:9f:25:95:47:4d:19:fa:98:
e0:12:da:53:35:58:0f:7a:ed:28:b0:b1:fb:6f:fd:dc:c1:b6:
ef:04:11:07:81:b4:01:5d:aa:4e:c6:de:c6:8a:6a:6e:4e:05:
1d:88:e5:62:29:5c:fb:1a:a8:20:5f:fc:50:18:47:7f:42:38:
12:2a:7c:69:7c:d4:75:25:dd:d4:47:4b:8c:b6:a8:12:21:51:
0b:a6:80:19:f1:bd:c9:55:b8:b3:fe:53:40:9c:16:79:72:52:
29:2f:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:00 2025 by rpki-client