Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/h9mxVF352HAlbHJDDUDd_n18CVs.roa
File: h9mxVF352HAlbHJDDUDd_n18CVs.roa (raw, json)
Hash identifier: BH1ey0a8q6dBjYUjeUElSWgUZBBGEDBBfun8llPnZu8=
Subject key identifier: 87:D9:B1:54:5D:F9:D8:70:25:6C:72:43:0D:40:DD:FE:7D:7C:09:5B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E480A6731906CE4D9377B9EDBC5E7DF62
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/h9mxVF352HAlbHJDDUDd_n18CVs.roa
Signing time: Sat 16 Mar 2024 16:13:45 +0000
ROA not before: Sat 16 Mar 2024 16:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
95.82.32.0/21 maxlen: 21
109.111.32.0/20 maxlen: 24
109.111.52.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
176.221.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:0a:67:31:90:6c:e4:d9:37:7b:9e:db:c5:e7:df:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 16 16:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87d9b1545df9d870256c72430d40ddfe7d7c095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a6:3f:68:75:45:3e:5b:49:cf:7b:bd:30:d0:
db:d5:32:2d:17:1a:0d:62:f2:6b:bc:94:ce:7a:d8:
20:49:9c:a6:7f:83:84:59:6b:6a:01:16:99:1a:17:
94:b7:a6:9a:ca:81:9b:9d:37:93:4f:11:3f:4c:c5:
97:cc:73:49:e0:7e:e3:08:21:e8:a0:5e:8b:01:d0:
14:9b:05:0e:e7:ba:68:94:9c:95:de:b4:27:d1:f5:
52:72:87:e4:54:2a:4f:0d:13:76:34:2e:77:a5:c3:
28:5f:27:8e:a7:a2:bb:4b:0a:ce:4d:10:47:46:2c:
57:44:4b:ef:c0:ee:24:16:ad:80:28:a8:a0:5f:84:
f4:25:c9:e1:7f:e5:71:62:9a:c9:a5:40:42:00:a3:
2d:06:22:4e:8e:ce:90:e7:01:7c:cf:8d:c8:1e:4c:
11:bc:4a:76:26:e9:7f:aa:1e:26:dd:94:a1:72:6e:
9b:82:27:50:55:5b:35:92:84:57:80:df:20:66:40:
9d:a4:e9:9b:5a:7c:b0:89:de:87:56:c6:f4:a2:51:
88:bf:12:57:ae:1f:9f:96:e9:31:90:df:e0:b6:06:
d9:9c:7c:6e:33:eb:4e:48:83:b1:a3:84:5f:44:14:
5e:01:22:fb:71:99:0d:22:3e:73:c6:1e:65:e7:50:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D9:B1:54:5D:F9:D8:70:25:6C:72:43:0D:40:DD:FE:7D:7C:09:5B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/h9mxVF352HAlbHJDDUDd_n18CVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
95.82.32.0/21
109.111.32.0/20
109.111.52.0/22
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
7d:e5:b2:a8:47:5f:dd:79:f5:0c:db:0f:e9:fb:af:ff:db:07:
8f:ab:b1:7b:65:dc:37:b4:f2:9f:eb:41:fe:9d:ce:52:30:9c:
9c:7e:ed:69:5a:20:60:60:ac:5d:d5:c2:23:63:c3:f1:6d:bd:
81:f2:aa:15:de:02:09:2b:58:4a:60:ca:f8:d5:4a:b8:43:7e:
70:17:64:0b:c3:6c:ef:f1:e3:aa:bc:ab:c2:30:d8:fe:28:f0:
e1:de:6f:76:a5:43:38:82:72:7b:dd:e4:49:df:8e:d2:25:50:
9c:fd:e7:30:9b:9a:f4:1b:33:ba:ec:f2:e8:13:aa:9d:e1:0a:
37:cf:58:57:f2:3f:26:6a:6a:41:0e:29:45:fe:ef:52:ab:96:
d2:87:f2:8c:70:3c:0a:32:0c:25:ef:0d:9a:81:bc:67:f6:ca:
da:9e:53:72:b1:b7:40:9f:ff:e2:1e:b4:86:38:10:98:b9:49:
ce:73:a7:e9:9f:1e:27:e7:43:95:91:e9:80:92:bc:3a:32:da:
a0:3f:66:2a:2c:15:8b:01:54:08:5b:2b:fb:59:93:dd:06:84:
1a:c5:e6:a3:5d:ff:69:02:df:bd:c0:38:f0:24:10:9e:cc:9d:
24:dc:00:59:c3:37:85:af:37:2c:c6:9e:d1:f0:6a:95:b6:8d:
ea:c9:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:02 2025 by rpki-client