Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J_MRPIaqHto2ek2_S4Jvtgtv_Dg.roa
File: J_MRPIaqHto2ek2_S4Jvtgtv_Dg.roa (raw, json)
Hash identifier: z10de9iKd9PqJn097VvC89QJR1qk9DXL90D3nVHmfXc=
Subject key identifier: 27:F3:11:3C:86:AA:1E:DA:36:7A:4D:BF:4B:82:6F:B6:0B:6F:FC:38
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018948D209E46CC7AC94794652872044DE7E
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J_MRPIaqHto2ek2_S4Jvtgtv_Dg.roa
Signing time: Wed 12 Jul 2023 06:37:51 +0000
ROA not before: Wed 12 Jul 2023 06:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.32.0/21 maxlen: 24
37.128.252.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
37.128.254.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:48:d2:09:e4:6c:c7:ac:94:79:46:52:87:20:44:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 12 06:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27f3113c86aa1eda367a4dbf4b826fb60b6ffc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:80:66:83:bd:c7:d4:90:b8:e5:64:7a:c7:
ef:f6:aa:a4:9d:bb:a5:14:43:82:68:79:35:6c:55:
45:03:88:34:3c:26:44:74:e2:9a:ff:1a:ae:cc:81:
ad:b7:5b:2c:18:90:e5:87:d0:c4:cb:de:bb:aa:5c:
6d:4b:fb:d9:de:8f:9a:de:88:24:8e:50:d1:7e:7f:
cd:7d:5a:c4:f5:1c:c1:f9:71:35:29:55:a2:5c:df:
cb:8b:bb:f2:31:7a:47:3d:77:94:c2:3c:9a:67:b6:
13:02:ae:23:12:29:2c:33:75:12:d4:90:ea:7e:7c:
30:63:a9:c1:1c:f0:2d:f0:a8:3d:79:12:66:6b:a8:
6b:c9:45:b6:4c:0f:1e:44:ca:31:62:44:a1:31:10:
c7:7c:b0:e2:ff:14:78:09:f0:a6:13:b7:4c:be:1c:
54:c9:85:19:ef:a2:a0:88:b3:26:89:cc:b6:4b:3d:
a9:12:01:00:ca:65:0e:d7:9f:a2:31:4c:92:cc:81:
d1:7e:b8:2e:91:24:18:eb:15:b4:45:19:1e:b2:9b:
b0:64:1a:65:06:eb:98:c3:f0:90:1e:34:0b:59:2d:
e7:3f:6d:02:ee:6e:6e:59:f1:23:69:1d:7b:f2:c5:
86:f5:0a:7a:8b:0a:0d:bd:60:47:bc:48:44:d3:6c:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F3:11:3C:86:AA:1E:DA:36:7A:4D:BF:4B:82:6F:B6:0B:6F:FC:38
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/J_MRPIaqHto2ek2_S4Jvtgtv_Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/21
95.82.0.0/21
95.82.32.0/21
Signature Algorithm: sha256WithRSAEncryption
29:97:ef:04:f6:a2:a4:97:3c:51:da:48:22:70:b5:95:da:64:
f4:90:c9:c3:c0:d6:5e:ea:b7:cb:46:1b:eb:d0:24:b6:22:66:
de:9f:9b:2b:42:84:5f:b0:13:78:f0:a6:03:b8:8b:7a:53:9c:
fa:dd:a5:42:c2:a7:fe:31:80:49:b2:da:c4:26:c4:7e:78:16:
af:c3:56:ef:42:6a:55:be:35:bb:87:b6:b1:29:01:a9:e5:ad:
16:78:76:0f:59:55:65:93:ec:e9:7c:8d:e6:55:91:1d:e3:8c:
46:f3:37:65:44:50:6e:35:f7:d7:53:a3:90:49:ff:bb:6e:59:
4c:a1:d7:15:c7:5d:45:63:27:00:c9:3b:c6:79:7f:c7:09:85:
4a:f0:f7:c9:66:b1:2b:4c:aa:23:96:44:96:7d:3a:6c:9f:e2:
6c:48:8c:1c:64:e5:ef:d7:49:e0:9f:47:1f:b3:4c:20:4a:25:
24:d4:c4:f4:d2:9e:4e:d7:41:9c:03:83:8a:a8:5c:7f:85:1d:
61:56:48:fa:12:de:c3:23:84:2d:88:de:15:85:ba:f3:52:d8:
4c:b1:66:c1:f9:cb:b3:f5:68:60:e0:2b:f4:4d:11:fd:5e:68:
9f:dc:a9:6c:35:7d:54:bf:a7:92:a7:93:aa:0c:e7:bb:2f:ba:
03:b8:49:a6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYlI0gnkbMeslHlGUocgRN5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMwNzEyMDYzNzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2YzMTEzYzg2YWExZWRhMzY3YTRkYmY0YjgyNmZiNjBiNmZmYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtOAZoO9x9SQuOVkesfv9qqknbul
FEOCaHk1bFVFA4g0PCZEdOKa/xquzIGtt1ssGJDlh9DEy967qlxtS/vZ3o+a3ogk
jlDRfn/NfVrE9RzB+XE1KVWiXN/Li7vyMXpHPXeUwjyaZ7YTAq4jEiksM3US1JDq
fnwwY6nBHPAt8Kg9eRJma6hryUW2TA8eRMoxYkShMRDHfLDi/xR4CfCmE7dMvhxU
yYUZ76KgiLMmicy2Sz2pEgEAymUO15+iMUySzIHRfrgukSQY6xW0RRkespuwZBpl
BuuYw/CQHjQLWS3nP20C7m5uWfEjaR178sWG9Qp6iwoNvWBHvEhE02wAMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCfzETyGqh7aNnpNv0uCb7YLb/w4MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvSl9NUlBJYXFIdG8yZWsyX1M0SnZ0Z3R2X0RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDJYD4AwQD
X1IAAwQDX1IgMA0GCSqGSIb3DQEBCwUAA4IBAQApl+8E9qKklzxR2kgicLWV2mT0
kMnDwNZe6rfLRhvr0CS2Imben5srQoRfsBN48KYDuIt6U5z63aVCwqf+MYBJstrE
JsR+eBavw1bvQmpVvjW7h7axKQGp5a0WeHYPWVVlk+zpfI3mVZEd44xG8zdlRFBu
NffXU6OQSf+7bllModcVx11FYycAyTvGeX/HCYVK8PfJZrErTKojlkSWfTpsn+Js
SIwcZOXv10ngn0cfs0wgSiUk1MT00p5O10GcA4OKqFx/hR1hVkj6Et7DI4QtiN4V
hbrzUthMsWbB+cuz9Whg4Cv0TRH9Xmif3KlsNX1Uv6eSp5OqDOe7L7oDuEmm
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:15 2025 by rpki-client