Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SzPsapJqzxru0-jKHim4LvevOY4.roa
File: SzPsapJqzxru0-jKHim4LvevOY4.roa (raw, json)
Hash identifier: A/CoxH7VjZYZ2qPmygPd5TLZi85Q5t1VpstQxfVk1uI=
Subject key identifier: 4B:33:EC:6A:92:6A:CF:1A:EE:D3:E8:CA:1E:29:B8:2E:F7:AF:39:8E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01858095DC46711B01F53E51DA2FB79A1EBF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SzPsapJqzxru0-jKHim4LvevOY4.roa
Signing time: Thu 05 Jan 2023 06:19:42 +0000
ROA not before: Thu 05 Jan 2023 06:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:95:dc:46:71:1b:01:f5:3e:51:da:2f:b7:9a:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 5 06:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b33ec6a926acf1aeed3e8ca1e29b82ef7af398e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:91:57:30:8e:b1:ee:3f:d3:dd:e9:e6:f4:
80:4e:8c:de:db:9d:ab:e8:1d:1c:c5:ed:ea:5e:01:
6b:44:98:43:de:39:70:57:88:4a:f3:c3:53:62:ba:
ef:8f:69:2e:34:a1:52:4c:32:94:87:76:ca:23:a3:
9b:e4:7a:00:82:dc:d6:52:b1:a8:cd:31:53:81:40:
2a:20:c3:ae:5f:38:56:ae:6c:74:6f:f8:92:56:fe:
ab:3c:60:70:58:f6:bc:f7:a7:74:50:8b:c0:1e:59:
60:ec:c7:d9:2d:ce:f2:f8:5f:28:f5:b5:1f:12:28:
3a:57:02:f8:ec:9b:5c:16:ff:d1:25:73:d4:f4:32:
86:eb:a4:26:9b:ab:d6:69:08:3c:a7:46:6f:e4:fc:
0a:13:21:74:e8:23:03:2f:70:21:7c:8d:b7:6c:5b:
d8:da:bc:f9:8a:17:a3:ef:65:9d:7c:5e:27:c7:06:
b0:f6:a5:1f:19:22:33:2c:34:5a:4b:d3:88:9b:97:
29:71:5b:d9:b2:ff:c9:a6:61:5d:80:90:81:15:40:
e0:18:17:61:b4:5e:0a:81:05:63:e1:eb:df:bb:6d:
ae:3c:9a:6c:cc:76:21:57:0b:49:ba:35:98:da:57:
13:32:4e:ea:75:28:0c:67:ff:29:56:f0:42:9f:da:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:33:EC:6A:92:6A:CF:1A:EE:D3:E8:CA:1E:29:B8:2E:F7:AF:39:8E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/SzPsapJqzxru0-jKHim4LvevOY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.16.0/20
Signature Algorithm: sha256WithRSAEncryption
09:43:64:7e:f7:b6:55:7b:5e:cb:66:68:f6:ee:f9:71:bd:90:
73:7a:22:09:1d:59:3d:66:53:62:29:40:7a:a5:1b:e2:03:2b:
2c:12:d5:45:9b:e6:59:1e:aa:f4:27:dc:03:c5:88:77:7d:21:
8a:56:a5:57:24:74:fd:7b:78:9d:13:70:14:75:08:57:34:02:
e0:6b:f4:da:85:a9:e2:91:f9:eb:d4:f0:4b:cd:ac:af:8f:a0:
ce:91:e9:9b:e1:1f:10:0d:d0:6a:7a:ba:90:e3:3c:1b:bf:b5:
48:57:a1:a5:03:44:29:42:57:81:9b:a4:3f:30:e5:bb:d6:7c:
15:86:05:43:8e:8e:24:d8:23:af:68:38:5f:cc:80:9b:07:ec:
cb:05:ce:e5:99:b1:03:c3:18:84:b7:65:94:a6:56:7c:eb:cd:
26:56:3a:fd:79:a7:fe:72:45:8b:c4:3b:a0:76:b1:80:7b:cb:
5e:65:1c:ff:53:c3:12:0a:e4:59:f2:28:4f:6c:ba:33:dc:ba:
ef:b6:62:9c:84:de:ab:a2:b3:24:54:5f:13:02:1f:53:f5:3a:
29:70:c0:50:a6:49:36:e7:27:d7:85:d3:8e:e5:72:99:1a:cb:
a6:a0:3c:48:fd:41:5b:81:32:08:8d:ed:c7:00:77:07:cc:2e:
5d:e7:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:24 2025 by rpki-client