Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/apYKDqTGQtndwvGNFaeClWzhL9Q.roa
File: apYKDqTGQtndwvGNFaeClWzhL9Q.roa (raw, json)
Hash identifier: 3AY4TEJwGF+xBTprWODE8u+VFFDuCKrrGpGeatOKg7o=
Subject key identifier: 6A:96:0A:0E:A4:C6:42:D9:DD:C2:F1:8D:15:A7:82:95:6C:E1:2F:D4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0185C8C0D83FEBA5DDA46A8249EFBD40C0D1
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/apYKDqTGQtndwvGNFaeClWzhL9Q.roa
Signing time: Thu 19 Jan 2023 06:39:19 +0000
ROA not before: Thu 19 Jan 2023 06:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 95.82.8.0/21 maxlen: 24
37.128.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:c0:d8:3f:eb:a5:dd:a4:6a:82:49:ef:bd:40:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 19 06:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a960a0ea4c642d9ddc2f18d15a782956ce12fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:df:91:b3:8a:73:32:c3:56:11:22:3c:8e:
51:dd:eb:f7:aa:bf:17:b1:e6:e7:48:d3:6b:04:4f:
b5:fa:34:89:b9:05:53:c6:68:ff:a1:68:c3:d2:46:
01:ea:d3:df:b9:3a:0b:ab:81:5f:aa:5f:99:2d:20:
63:69:83:ad:a0:87:00:e9:f0:ac:a9:81:f0:eb:27:
de:19:86:c7:a0:c4:1a:36:b0:9b:06:b9:b9:b6:b7:
dd:27:07:b9:e5:d6:dc:9b:95:25:84:80:cc:08:80:
1d:21:96:5c:4f:66:4a:52:34:a9:6d:2d:0d:cf:ff:
67:13:1d:82:10:05:2d:1e:be:c1:11:f4:04:11:dc:
5e:5d:50:cf:b2:ab:a4:80:39:d9:b3:f0:04:9a:ec:
2e:ef:e2:7e:a1:b1:cd:ee:88:56:64:90:3d:e7:79:
18:9b:9d:be:45:1c:3a:1c:e2:28:ea:30:53:1e:bd:
fe:91:3e:0d:c0:61:94:9c:2b:cc:b8:c7:16:ca:79:
7c:62:5c:6b:f6:ca:30:67:04:af:50:5a:5e:fe:2f:
a1:9c:c1:67:78:ec:f8:5e:20:54:55:b2:5d:8e:76:
c2:10:90:ae:ea:31:c7:d3:7c:39:49:37:86:cd:21:
4f:0c:6f:74:ca:52:e4:00:eb:d1:6b:26:93:1c:b9:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:96:0A:0E:A4:C6:42:D9:DD:C2:F1:8D:15:A7:82:95:6C:E1:2F:D4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/apYKDqTGQtndwvGNFaeClWzhL9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/22
95.82.8.0/21
Signature Algorithm: sha256WithRSAEncryption
af:42:41:6e:16:34:b9:b3:b8:bb:f8:4c:3f:d0:4c:03:eb:14:
98:ca:86:ef:f0:e6:56:55:e6:a5:bd:2c:a4:63:f8:8b:df:e2:
27:c6:0e:4e:c2:6c:c6:ec:0f:11:f6:02:2f:14:f3:5d:45:c9:
aa:29:01:19:b1:65:0f:1a:32:79:9e:99:28:ac:c8:9c:14:54:
e0:ef:8d:66:dd:09:8d:c0:df:a6:e3:81:17:69:a9:09:f1:69:
00:6c:4f:7e:01:90:df:dc:47:00:58:32:41:6f:f3:2c:66:64:
a6:f0:d0:f5:36:a2:04:e9:a5:38:51:63:d4:cb:44:cb:92:61:
d6:b0:07:42:a9:0e:5d:36:d9:97:03:d2:35:40:dc:d0:d6:09:
7b:9d:7e:0c:9f:db:ee:15:20:de:8c:49:8a:7f:dd:15:f2:7b:
0a:82:a6:75:b4:76:4b:8b:1e:d3:80:87:87:12:ef:a7:44:03:
ca:ab:f0:fe:cf:c5:56:fa:a4:67:2c:8b:92:00:28:13:c4:de:
fe:7a:0f:ab:e0:41:dd:f3:04:83:24:00:db:a9:71:f1:1f:df:
1d:af:75:f3:81:20:9f:b2:91:8c:e5:6b:98:08:86:6d:e9:6d:
74:5b:a7:f3:1d:89:02:d7:41:be:8d:92:af:d4:e4:ac:2a:69:
4c:ad:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:20 2025 by rpki-client