Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hRVFR9p2Ja0CPV7IBwreRbO0O5Y.roa
File: hRVFR9p2Ja0CPV7IBwreRbO0O5Y.roa (raw, json)
Hash identifier: mXA0bpe60i95mdpfgmLput8XWxdWyaGyNvEzmxqHEDI=
Subject key identifier: 85:15:45:47:DA:76:25:AD:02:3D:5E:C8:07:0A:DE:45:B3:B4:3B:96
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F6E6B4F28567BA9312B9406E05B929753
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hRVFR9p2Ja0CPV7IBwreRbO0O5Y.roa
Signing time: Sun 12 May 2024 20:07:57 +0000
ROA not before: Sun 12 May 2024 20:07:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.82.8.0/21 maxlen: 24
95.82.16.0/20 maxlen: 24
109.111.52.0/22 maxlen: 24
109.111.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6e:6b:4f:28:56:7b:a9:31:2b:94:06:e0:5b:92:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 12 20:07:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85154547da7625ad023d5ec8070ade45b3b43b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:4e:f1:b4:ae:f6:49:48:24:07:8a:ef:f3:
67:ee:50:f2:41:e2:64:a7:e6:cc:c6:b1:7e:b1:61:
d9:c5:94:80:a4:3f:4a:2b:08:d7:8f:b0:89:12:44:
73:b1:75:ec:54:2a:71:5b:c7:4d:59:dd:d7:08:84:
70:6e:06:d9:3d:d7:be:bb:e1:09:fe:2c:81:95:60:
4e:6f:ad:af:a9:1f:50:ec:62:45:43:13:eb:7f:80:
1b:7e:33:63:7f:6f:c0:fb:ad:ea:da:bb:6d:67:f6:
aa:58:94:06:62:53:15:b1:54:29:32:b2:30:71:d4:
b9:7e:60:8a:f5:31:c6:b7:7f:a5:87:8c:9b:46:4b:
86:76:62:48:c5:f4:5b:35:4b:52:2c:5d:ce:06:93:
f8:89:4c:4f:97:62:be:a5:7f:38:6f:e9:85:16:20:
0e:7f:fe:31:84:e0:0b:fb:ab:e0:2a:62:01:d9:4e:
e0:b0:06:9f:78:48:46:35:c6:35:39:6a:7d:81:ba:
51:75:c6:4b:97:df:cc:bd:65:a6:22:e7:20:7f:87:
c2:a2:91:a7:df:81:06:0f:a1:14:9b:51:71:da:82:
ee:e4:f4:7a:8d:8d:af:39:ae:05:6a:35:99:6b:3f:
d8:08:65:a5:8c:ef:73:21:ef:e1:58:28:5b:88:7d:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:45:47:DA:76:25:AD:02:3D:5E:C8:07:0A:DE:45:B3:B4:3B:96
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hRVFR9p2Ja0CPV7IBwreRbO0O5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.8.0-95.82.31.255
109.111.52.0/22
109.111.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:8a:75:02:1c:52:0b:82:a8:60:36:df:cc:ba:c5:88:3c:a0:
da:a3:72:8d:6d:d7:bd:15:c8:a5:a6:db:93:3b:21:0f:bd:1d:
a8:b9:0e:25:48:7d:d7:aa:f7:bf:67:5a:d1:e4:4f:e7:86:93:
19:8f:2f:9b:b9:12:56:06:9c:44:69:92:5f:15:18:2c:bd:45:
99:ea:e5:e9:8c:db:73:76:db:c2:36:11:b6:aa:45:11:38:e6:
b1:ab:c1:d6:b8:0d:b1:81:86:e9:85:54:dd:2e:ab:f9:6b:b6:
fe:ea:37:4d:26:df:6d:78:3c:a6:be:95:c8:50:3e:83:b0:ef:
c7:dd:17:e4:47:f9:b3:0f:c2:01:3e:16:62:d6:25:5d:37:68:
8d:b5:4a:63:6c:36:0b:81:b9:f3:c7:61:de:6b:99:cd:98:d0:
f5:b6:5d:9a:15:58:20:0e:7e:e7:b4:d4:23:85:62:c4:9c:0d:
e3:5a:68:7d:d0:b7:bd:14:5c:8f:0a:e0:59:39:f0:50:ff:fd:
b2:f2:e1:84:d4:88:ed:ff:a6:af:a5:22:68:7c:eb:f8:9b:b3:
fa:dc:08:9c:ee:88:43:23:b3:56:a4:f4:f5:c6:05:d8:19:fa:
37:5d:f0:b8:99:ad:a8:76:f8:42:44:18:fe:67:fe:8b:a8:76:
ef:b1:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:08 2025 by rpki-client