Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JRZhzyhwWof9W0lHaWEe_tTcX7Y.roa
File: JRZhzyhwWof9W0lHaWEe_tTcX7Y.roa (raw, json)
Hash identifier: Qvh8W7Vm/UsHEp19OHWK4c054aRq1RdNXIONd9IGBa8=
Subject key identifier: 25:16:61:CF:28:70:5A:87:FD:5B:49:47:69:61:1E:FE:D4:DC:5F:B6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018A4533E915ED610100B5BFA30EB7D2250C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JRZhzyhwWof9W0lHaWEe_tTcX7Y.roa
Signing time: Wed 30 Aug 2023 06:49:04 +0000
ROA not before: Wed 30 Aug 2023 06:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 176.221.24.0/22 maxlen: 24
109.111.56.0/22 maxlen: 24
176.221.28.0/22 maxlen: 24
37.128.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:33:e9:15:ed:61:01:00:b5:bf:a3:0e:b7:d2:25:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 30 06:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=251661cf28705a87fd5b494769611efed4dc5fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:8c:55:58:46:4a:48:c2:52:17:26:a3:ad:
93:9e:0b:cd:ce:83:8f:3c:6a:a5:f7:1b:9f:49:60:
b3:57:5e:a8:81:71:19:91:79:3c:b8:73:e4:97:f5:
db:4b:d3:45:15:5d:96:c7:be:8c:a2:cc:76:23:5e:
2b:c8:38:cf:f8:ae:5c:13:71:49:4d:61:8f:13:73:
40:66:14:d0:f9:05:af:a0:31:ba:e3:00:73:2e:df:
87:b7:e0:5c:61:29:7a:02:df:38:c8:3a:e0:c3:bb:
b8:d4:60:ce:64:ce:e7:94:c1:b4:78:b1:61:98:06:
7f:28:91:66:84:9b:da:85:fb:57:07:15:17:5c:1f:
e6:69:c3:8a:3b:6c:2a:99:b2:4e:84:69:01:4c:28:
47:58:3c:7d:b1:5d:16:7d:e9:54:fa:bc:a5:f1:37:
ad:71:b1:4c:d3:4e:f8:2c:74:bf:90:17:a1:e9:c0:
63:b2:95:ed:12:e0:f8:fd:37:8c:1e:c5:f9:d1:4c:
eb:e6:51:80:35:85:b9:e4:b1:6d:5f:b2:9f:82:79:
e4:a8:4b:d5:da:f3:00:d6:ee:79:ec:ef:20:23:de:
bb:aa:e0:37:84:10:4e:62:9f:0b:3d:c0:02:b9:6c:
6b:66:3a:20:c5:cf:13:5e:da:13:63:af:e5:9a:a2:
94:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:16:61:CF:28:70:5A:87:FD:5B:49:47:69:61:1E:FE:D4:DC:5F:B6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/JRZhzyhwWof9W0lHaWEe_tTcX7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
109.111.56.0/22
176.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
14:cc:c1:59:2b:a7:84:54:3e:12:cd:0f:93:e9:53:d7:d6:1e:
a3:04:a7:9a:c6:3e:da:c1:51:f3:d2:6e:25:a3:3d:54:02:83:
03:b9:99:c1:75:49:d6:ff:e3:77:9c:c9:87:ac:ce:46:79:69:
2d:48:38:57:14:f5:63:c2:c1:e3:f1:b4:c1:d8:83:06:27:69:
f3:e3:bc:d9:b5:22:62:14:39:a4:d2:06:da:43:6b:c5:e4:6e:
15:54:97:8e:1a:9a:e3:71:ac:bf:c0:a2:5f:1d:cc:44:c4:fc:
69:dd:13:92:a9:7e:9d:bb:8f:a7:57:4c:e8:ac:7a:3e:85:cc:
73:b2:87:14:85:02:6c:03:78:09:7b:4d:ff:ad:bc:0d:68:5f:
b2:15:9c:80:76:0c:6d:7c:b2:b3:c0:5b:60:ee:0d:1d:29:71:
3d:1e:10:be:55:59:d6:53:37:80:bb:7e:66:84:ae:12:20:ba:
2d:00:dd:3c:4e:71:5b:3f:cb:5a:51:df:81:75:62:a1:1d:b1:
25:46:a0:06:6d:19:09:da:c5:e7:58:3e:7e:39:0c:d4:4d:b7:
8f:f4:f3:01:8e:af:a1:53:45:c1:5b:6e:0b:06:25:90:17:13:
0d:09:96:40:e0:35:9b:b0:c2:96:8a:55:66:f5:5b:43:97:ce:
9f:5c:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:22 2025 by rpki-client