Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hq8gscE9caB_6pWY81zaSRcFBtc.roa
File: hq8gscE9caB_6pWY81zaSRcFBtc.roa (raw, json)
Hash identifier: S6cmBsiXZFlDlDaSuR49Yio0whp/dbyIpbLbUrPeUgs=
Subject key identifier: 86:AF:20:B1:C1:3D:71:A0:7F:EA:95:98:F3:5C:DA:49:17:05:06:D7
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B0E061F63F9F377CF4E4D2AF99C52FFA3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hq8gscE9caB_6pWY81zaSRcFBtc.roa
Signing time: Sun 08 Oct 2023 06:42:44 +0000
ROA not before: Sun 08 Oct 2023 06:42:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:06:1f:63:f9:f3:77:cf:4e:4d:2a:f9:9c:52:ff:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 8 06:42:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86af20b1c13d71a07fea9598f35cda49170506d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:48:85:c7:9a:d6:21:39:aa:3a:ab:c5:c0:
d3:4b:a0:3e:a7:54:ef:56:13:cf:bb:d9:c7:48:6e:
9d:40:36:d7:4e:f2:68:7a:e3:c2:76:f6:61:8e:a5:
39:b2:41:19:37:7c:2b:d1:94:6c:bc:b5:24:c5:bc:
d1:95:1f:26:ce:e2:59:aa:c6:85:60:9a:73:51:b8:
13:30:bb:6f:75:da:db:88:12:db:a5:18:6f:85:a0:
cb:94:cc:fd:22:84:54:73:df:15:cb:f2:96:e5:f1:
b2:84:ac:e1:4a:31:ec:a3:87:d2:bc:58:c2:d2:e5:
67:24:63:fd:14:2c:af:96:7e:0d:45:85:fb:bd:8c:
5f:95:b3:09:08:fe:1a:46:67:37:36:b7:a3:23:3e:
be:fe:e0:61:03:e3:f0:c5:24:d7:43:23:f3:ac:43:
55:03:17:41:3a:d5:28:98:60:24:ee:f4:f9:71:0d:
25:d2:44:ba:67:1a:56:64:f7:59:75:df:66:67:5d:
8c:53:c2:a9:74:93:ae:9b:ab:6f:76:20:07:bd:c7:
d4:08:df:8e:59:b2:b6:d4:bd:1e:19:c9:d3:1c:c3:
26:49:aa:6a:f6:4c:a5:7e:50:3c:35:41:b7:75:81:
5c:ca:eb:7a:f1:f3:87:d4:8c:d6:7f:78:1e:e8:ef:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:20:B1:C1:3D:71:A0:7F:EA:95:98:F3:5C:DA:49:17:05:06:D7
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/hq8gscE9caB_6pWY81zaSRcFBtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/21
109.111.32.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
96:3e:32:cd:76:79:50:b8:0d:f8:7d:4b:b7:16:ae:a8:0c:64:
f0:45:c9:56:40:29:49:f3:4f:90:2c:26:c8:e5:bf:86:76:f2:
33:67:e5:72:19:33:48:32:cb:86:bf:1d:3e:59:2f:44:53:98:
cf:1b:42:cb:b4:25:d8:c6:4a:2e:21:ac:cb:77:e8:02:46:7e:
15:b8:bd:2c:18:03:8b:ae:f0:fc:13:bd:2b:74:79:11:6f:8e:
4f:18:50:19:2a:3a:00:d5:09:63:17:8f:7b:08:38:5f:5a:20:
0a:66:ec:93:8e:44:69:5e:0d:51:05:d4:20:d1:e7:32:69:3e:
6e:dd:f4:89:89:43:a6:25:a5:a3:a2:0f:38:bc:43:a7:72:18:
05:a0:e2:8a:c3:32:6a:da:71:54:32:df:50:16:94:d2:68:44:
33:02:37:c1:55:06:4a:4f:d3:be:34:53:3f:82:ef:e0:99:e4:
19:7f:70:d1:fd:83:2a:7f:ac:8a:d1:80:78:04:7d:37:f4:f1:
e5:4d:45:c2:97:0c:f6:17:d4:ae:43:27:32:d5:64:45:83:0c:
5f:e1:43:b5:35:29:4b:1a:11:7d:1a:83:3f:78:6e:19:60:4e:
a8:0c:0d:5a:54:18:95:09:40:5a:c3:c4:23:03:98:69:13:4e:
9d:d8:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:52 2025 by rpki-client