Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Pa3folBX1B4DIl0gl8Xr_ElsRCI.roa
File: Pa3folBX1B4DIl0gl8Xr_ElsRCI.roa (raw, json)
Hash identifier: Uo0LyTE7PMrL1XncOneVhhSDK/hZZhzllRL9CQJnvPI=
Subject key identifier: 3D:AD:DF:A2:50:57:D4:1E:03:22:5D:20:97:C5:EB:FC:49:6C:44:22
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BA9D9FDD440DF1FB641914966FA7AB5C6
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Pa3folBX1B4DIl0gl8Xr_ElsRCI.roa
Signing time: Tue 07 Nov 2023 12:55:17 +0000
ROA not before: Tue 07 Nov 2023 12:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:d9:fd:d4:40:df:1f:b6:41:91:49:66:fa:7a:b5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 7 12:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3daddfa25057d41e03225d2097c5ebfc496c4422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:ad:de:4e:63:45:2c:8c:f7:34:67:22:b3:
da:c5:a2:6c:44:d7:39:73:be:2b:b5:9e:58:22:86:
d3:89:89:a8:21:14:f5:85:fa:96:cc:41:fd:8f:c5:
d7:15:70:9c:b3:83:c5:e4:09:00:3f:9a:b7:f4:0b:
bb:b3:48:65:83:75:e5:14:87:54:b1:12:b2:65:19:
01:ee:b7:94:9b:0c:81:5b:35:00:57:7f:6b:ff:16:
98:30:ee:ad:d5:e6:ab:88:f2:cc:df:58:c8:d6:e7:
92:d3:d1:63:bc:30:fb:04:c0:64:bf:0b:32:7b:91:
30:c9:5f:20:70:05:e4:84:39:25:6c:5e:15:9d:f8:
33:71:48:45:2c:e3:57:cc:cc:f9:24:94:b7:04:0a:
28:4a:ed:c1:18:45:e2:01:14:52:4c:7a:ef:29:ea:
5b:6d:84:d8:69:14:7b:03:c6:25:0a:3a:f0:64:7d:
68:3e:33:1f:9d:60:27:b0:55:bd:be:fb:d5:a9:97:
fd:a1:dc:84:67:c8:9d:7f:13:cf:88:96:06:51:ba:
b6:eb:47:5d:9c:92:b1:d5:e8:18:e2:76:88:ee:4e:
75:ba:4d:97:39:c4:c5:48:9c:c3:37:c2:a4:67:36:
b7:e9:24:49:c4:0b:5a:35:2a:02:af:a1:60:7f:61:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AD:DF:A2:50:57:D4:1E:03:22:5D:20:97:C5:EB:FC:49:6C:44:22
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/Pa3folBX1B4DIl0gl8Xr_ElsRCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:da:9a:b1:9a:96:ba:bd:78:27:0e:90:7a:4b:37:c7:1d:4a:
c3:a4:dc:4c:99:34:24:10:76:cd:9a:40:08:db:e9:9f:55:c9:
e5:d4:fb:15:2f:3a:e5:2a:3e:ee:8c:dd:e2:43:14:a4:42:e5:
58:54:81:3e:8c:2a:13:0d:bd:d5:01:f0:48:a1:09:96:df:4e:
9d:6f:d2:85:21:87:d2:36:98:da:74:b8:a2:be:55:c6:ea:fc:
f6:0f:3f:9c:11:30:13:13:41:79:0f:5b:a6:d9:28:1a:48:36:
81:8b:a5:7d:27:50:7e:e5:27:88:17:a5:0f:93:0c:36:24:2d:
45:95:61:2e:01:d2:7a:67:19:66:ea:82:97:b1:80:5b:29:a1:
92:3a:47:30:f2:8e:c0:e0:dd:53:08:93:e4:ce:b0:46:98:a9:
33:a2:f3:ed:02:50:5d:f7:26:d8:5d:e2:f1:fd:40:21:da:9f:
b1:cc:c8:18:28:ca:e8:d4:cc:0e:5f:96:5f:75:0e:91:21:c0:
09:d6:8b:83:07:ea:25:14:a9:3a:c8:1d:6c:e1:9a:8f:59:d8:
81:47:69:08:6e:4d:79:ea:2e:1d:80:6a:75:75:ce:8b:a9:33:
dc:0d:29:94:0d:35:3e:90:33:98:35:28:bd:ad:c6:56:48:6d:
72:5a:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:38 2025 by rpki-client