Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/M7DWGkZwP1K3-QZrRNnl-nVlEqo.roa
File: M7DWGkZwP1K3-QZrRNnl-nVlEqo.roa (raw, json)
Hash identifier: pfM3144TXyUSm9Ll/FVQaGn/20GRw48h/2SgcLTDj6o=
Subject key identifier: 33:B0:D6:1A:46:70:3F:52:B7:F9:06:6B:44:D9:E5:FA:75:65:12:AA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BBD2A7131EE573CC759C889908C74A02B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/M7DWGkZwP1K3-QZrRNnl-nVlEqo.roa
Signing time: Sat 11 Nov 2023 06:55:57 +0000
ROA not before: Sat 11 Nov 2023 06:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.30.0/23 maxlen: 24
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:2a:71:31:ee:57:3c:c7:59:c8:89:90:8c:74:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 11 06:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b0d61a46703f52b7f9066b44d9e5fa756512aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:ff:b0:65:dd:33:fc:6e:db:e1:7c:bd:ac:
ec:04:c8:86:76:60:6a:6a:32:71:57:47:66:df:dc:
a6:15:a3:a6:e2:73:0e:8c:04:48:1d:db:0b:04:9f:
26:ff:27:12:26:49:62:bc:bd:a7:ac:80:ba:4d:dc:
a1:0e:c1:f2:be:da:26:70:5a:69:f4:4c:2b:4e:8a:
4e:19:32:f7:73:fb:95:d0:10:75:25:da:ed:58:5d:
4c:df:bb:81:65:9d:5a:d1:9c:15:fd:ac:67:05:7d:
e9:0c:53:e8:a0:1c:ef:2f:ed:a2:a8:88:85:ce:d7:
6c:4a:4c:a6:3c:1c:31:c9:ef:b7:98:ee:ae:39:9a:
53:b7:6c:ef:2a:b6:35:04:02:2f:47:d1:52:bc:30:
e8:82:5f:9d:68:ae:56:63:5b:8a:a0:88:5b:b2:c1:
c6:a1:e6:4a:1e:6d:4b:62:ca:d5:48:3f:10:d7:c8:
e1:84:91:0c:d0:a9:c1:b8:1e:eb:00:bb:9d:b3:b1:
d4:64:e2:7a:06:2c:a0:c5:50:c3:54:90:17:85:f4:
38:6d:5d:e1:5d:c8:54:9e:d1:72:47:20:5e:55:a5:
35:37:bb:7f:90:ea:62:51:c5:95:46:54:6e:5c:a2:
27:c7:18:97:94:e6:a0:7a:36:73:82:d3:99:a1:05:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:D6:1A:46:70:3F:52:B7:F9:06:6B:44:D9:E5:FA:75:65:12:AA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/M7DWGkZwP1K3-QZrRNnl-nVlEqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
36:2d:04:56:85:4c:24:b0:71:9b:17:1c:12:3e:96:e3:22:b1:
83:70:04:86:29:c0:52:27:fa:23:64:00:d2:1a:f0:05:61:34:
80:05:c8:82:18:b8:f7:5a:0f:44:ff:b9:54:36:a1:d9:d7:35:
44:2f:e7:10:d6:72:b2:81:f8:93:27:b9:1c:6c:31:6e:ae:71:
c0:54:a0:d8:60:14:06:b8:f7:d2:a2:dc:a6:ec:e7:38:17:41:
e1:94:5e:0a:7f:f9:a9:6b:d8:cd:72:bc:84:5d:eb:8a:39:3a:
fe:9b:66:ff:28:fa:0d:47:df:82:57:fb:62:e6:04:82:be:1e:
f6:88:bc:3e:31:83:e6:3d:d6:03:ed:ae:9e:ca:fb:fd:91:cc:
64:4a:d9:f6:17:79:d1:70:11:2e:f9:f2:cc:c4:fa:e0:64:8d:
de:c9:cb:b9:3f:d3:ad:b6:b3:3a:65:30:de:26:4b:91:8a:52:
f5:ce:7c:7a:89:4b:49:16:4a:d6:1a:c7:8f:9b:93:b3:25:a8:
bf:1c:87:57:7b:c0:94:15:b3:f1:89:13:67:68:a9:1a:0e:55:
53:14:ec:0a:3d:c5:13:e0:74:69:ea:3c:7d:9f:70:35:13:05:
8d:7a:31:29:e1:2c:53:af:c7:a0:31:0e:1b:38:ce:4c:b0:b4:
0a:c9:01:a2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYu9KnEx7lc8x1nIiZCMdKArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMxMTExMDY1NTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2IwZDYxYTQ2NzAzZjUyYjdmOTA2NmI0NGQ5ZTVmYTc1NjUxMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeP/sGXdM/xu2+F8vazsBMiGdmBq
ajJxV0dm39ymFaOm4nMOjARIHdsLBJ8m/ycSJklivL2nrIC6TdyhDsHyvtomcFpp
9EwrTopOGTL3c/uV0BB1JdrtWF1M37uBZZ1a0ZwV/axnBX3pDFPooBzvL+2iqIiF
ztdsSkymPBwxye+3mO6uOZpTt2zvKrY1BAIvR9FSvDDogl+daK5WY1uKoIhbssHG
oeZKHm1LYsrVSD8Q18jhhJEM0KnBuB7rALuds7HUZOJ6BiygxVDDVJAXhfQ4bV3h
XchUntFyRyBeVaU1N7t/kOpiUcWVRlRuXKInxxiXlOagejZzgtOZoQWFZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDOw1hpGcD9St/kGa0TZ5fp1ZRKqMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvTTdEV0drWndQMUszLVFaclJObmwtblZsRXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCJYD4AwQE
X1IAAwQEbW8gAwQEsN0QMA0GCSqGSIb3DQEBCwUAA4IBAQA2LQRWhUwksHGbFxwS
PpbjIrGDcASGKcBSJ/ojZADSGvAFYTSABciCGLj3Wg9E/7lUNqHZ1zVEL+cQ1nKy
gfiTJ7kcbDFurnHAVKDYYBQGuPfSotym7Oc4F0HhlF4Kf/mpa9jNcryEXeuKOTr+
m2b/KPoNR9+CV/ti5gSCvh72iLw+MYPmPdYD7a6eyvv9kcxkStn2F3nRcBEu+fLM
xPrgZI3eycu5P9OttrM6ZTDeJkuRilL1znx6iUtJFkrWGsePm5OzJai/HIdXe8CU
FbPxiRNnaKkaDlVTFOwKPcUT4HRp6jx9n3A1EwWNejEp4SxTr8egMQ4bOM5MsLQK
yQGi
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:35 2025 by rpki-client