Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e4zUyIllGLD57xJtzpq0RBMRVsM.roa
File: e4zUyIllGLD57xJtzpq0RBMRVsM.roa (raw, json)
Hash identifier: 3AmodGIrTu2oISrQqahoFiMEyiteNDeTTneu7Aay3Fc=
Subject key identifier: 7B:8C:D4:C8:89:65:18:B0:F9:EF:12:6D:CE:9A:B4:44:13:11:56:C3
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B05B49A480AE133F51B17C9E5BDF98893
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e4zUyIllGLD57xJtzpq0RBMRVsM.roa
Signing time: Fri 06 Oct 2023 15:56:43 +0000
ROA not before: Fri 06 Oct 2023 15:56:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:b4:9a:48:0a:e1:33:f5:1b:17:c9:e5:bd:f9:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 6 15:56:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8cd4c8896518b0f9ef126dce9ab444131156c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:40:4d:40:5f:60:94:8c:cd:3b:0e:29:aa:
4c:b5:ac:84:3e:c9:dd:ba:6f:95:84:82:06:59:ca:
7c:58:7d:58:83:e6:6b:02:55:41:3d:72:07:53:8f:
7b:67:fd:38:e7:b5:86:02:dc:c6:04:49:47:37:64:
1f:57:d3:0c:1c:75:f9:24:a3:ba:20:38:ce:93:2c:
c6:d0:09:b3:b8:8d:08:50:32:fa:8b:9e:39:f5:14:
7a:e5:5c:14:09:46:50:2f:fa:48:2c:ed:4f:d7:b2:
3f:5b:ac:3c:d1:90:91:ee:5a:e7:2c:f6:cd:cb:42:
e7:ff:7c:f0:54:bc:42:52:2e:4b:dc:f9:4d:3a:89:
90:6e:ef:dc:3b:36:cc:4d:20:18:7b:7f:c5:72:ba:
24:2a:66:ea:1c:a8:25:2c:c7:cd:85:56:6f:4c:5d:
93:19:4b:42:15:b0:15:67:ac:a0:c9:69:b6:cd:12:
af:f9:2a:e9:cd:b3:da:5d:53:04:7a:24:3e:ed:30:
1e:37:9f:9b:00:3a:19:1a:0c:1b:c6:e0:2a:67:2e:
d9:87:a3:7b:b9:13:91:e4:99:56:85:b6:87:20:ec:
41:08:85:97:bd:43:ad:41:23:8b:10:90:1d:99:1f:
a8:68:a4:40:f9:2e:9e:dc:e7:b2:83:0f:e4:67:35:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:D4:C8:89:65:18:B0:F9:EF:12:6D:CE:9A:B4:44:13:11:56:C3
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/e4zUyIllGLD57xJtzpq0RBMRVsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
49:0e:36:a6:d3:b7:75:01:95:ea:5a:d2:f5:85:4d:da:41:7f:
e2:46:eb:a6:a9:aa:63:a8:52:b2:a2:42:e6:ee:0a:19:38:32:
0a:52:4d:90:c8:9c:7d:08:3d:b2:64:bc:f1:b5:84:d6:a3:22:
5b:a3:6c:87:e0:82:c1:bf:42:46:a4:61:a4:cd:c7:9f:ac:d0:
73:98:eb:37:f0:e2:cf:fd:44:cb:8b:8f:e8:7e:51:d0:aa:ff:
24:f9:48:40:2d:ea:e2:a8:db:36:4d:f4:9d:7b:f8:94:3a:19:
a5:b7:29:b4:e3:ae:45:46:9f:ef:d6:89:45:cc:5e:55:1f:4a:
b4:35:95:e8:83:af:37:21:cc:72:0b:d2:5d:a2:c5:ff:b0:fe:
8e:a9:06:2a:dc:a5:76:5f:b2:2c:3c:c2:1d:a4:3a:1d:a2:d5:
a6:33:6e:4b:63:8e:24:38:0c:36:83:db:37:1d:c3:6b:33:e6:
ed:89:99:db:88:b7:f6:40:bd:96:f6:cb:15:84:a9:b4:c8:4e:
c1:63:e2:d7:13:e3:24:d8:03:1b:fe:9d:e6:41:c7:68:54:aa:
1b:99:05:3f:48:ec:bb:3a:99:d7:dd:67:7a:0d:57:7b:db:54:
10:ba:b6:13:a2:da:de:9a:3f:61:20:49:ab:8a:28:77:a1:7c:
70:be:21:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsFtJpICuEz9RsXyeW9+YiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjMxMDA2MTU1NjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhjZDRjODg5NjUxOGIwZjllZjEyNmRjZTlhYjQ0NDEzMTE1NmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzVATUBfYJSMzTsOKapMtayEPsnd
um+VhIIGWcp8WH1Yg+ZrAlVBPXIHU497Z/0457WGAtzGBElHN2QfV9MMHHX5JKO6
IDjOkyzG0AmzuI0IUDL6i5459RR65VwUCUZQL/pILO1P17I/W6w80ZCR7lrnLPbN
y0Ln/3zwVLxCUi5L3PlNOomQbu/cOzbMTSAYe3/FcrokKmbqHKglLMfNhVZvTF2T
GUtCFbAVZ6ygyWm2zRKv+SrpzbPaXVMEeiQ+7TAeN5+bADoZGgwbxuAqZy7Zh6N7
uROR5JlWhbaHIOxBCIWXvUOtQSOLEJAdmR+oaKRA+S6e3Oeygw/kZzWVKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHuM1MiJZRiw+e8Sbc6atEQTEVbDMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvZTR6VXlJbGxHTEQ1N3hKdHpwcTBSQk1SVnNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCJYD4AwQD
X1IAAwQEsN0QMA0GCSqGSIb3DQEBCwUAA4IBAQBJDjam07d1AZXqWtL1hU3aQX/i
RuumqapjqFKyokLm7goZODIKUk2QyJx9CD2yZLzxtYTWoyJbo2yH4ILBv0JGpGGk
zcefrNBzmOs38OLP/UTLi4/oflHQqv8k+UhALeriqNs2TfSde/iUOhmltym0465F
Rp/v1olFzF5VH0q0NZXog683IcxyC9JdosX/sP6OqQYq3KV2X7IsPMIdpDodotWm
M25LY44kOAw2g9s3HcNrM+btiZnbiLf2QL2W9ssVhKm0yE7BY+LXE+Mk2AMb/p3m
QcdoVKobmQU/SOy7OpnX3Wd6DVd721QQurYTotremj9hIEmriih3oXxwviFe
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:57 2025 by rpki-client