Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/i_xUcpvus9dqI1GOlXDGuRaWdxI.roa
File: i_xUcpvus9dqI1GOlXDGuRaWdxI.roa (raw, json)
Hash identifier: c9smln0Zt8L+2xYjnRgviTRofwz7H66Z9myhWirR/kg=
Subject key identifier: 8B:FC:54:72:9B:EE:B3:D7:6A:23:51:8E:95:70:C6:B9:16:96:77:12
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0191418A3E2A4CFB836462CE57C2530ABE2B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/i_xUcpvus9dqI1GOlXDGuRaWdxI.roa
Signing time: Sun 11 Aug 2024 13:04:24 +0000
ROA not before: Sun 11 Aug 2024 13:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.40.0/22 maxlen: 24
109.111.56.0/22 maxlen: 24
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:8a:3e:2a:4c:fb:83:64:62:ce:57:c2:53:0a:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 11 13:04:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8bfc54729beeb3d76a23518e9570c6b916967712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:fc:2c:52:0a:6b:46:73:de:c5:97:62:c3:
d3:e8:89:98:0b:02:6a:5c:ce:ab:46:12:ec:cb:09:
a6:b7:83:07:3d:20:1a:4a:f3:9e:c3:33:a8:93:c2:
b9:0c:51:80:a7:3b:57:08:1b:80:1f:c3:f3:00:b4:
c0:8e:b2:9d:e6:95:e9:b0:7f:21:bb:08:fb:ba:3a:
e0:c0:8b:c1:4a:1f:f3:4d:bd:78:0a:a0:42:fa:6f:
da:75:b6:85:65:04:a1:66:f3:79:20:4d:e5:ba:79:
33:7d:ce:a4:11:47:22:ac:c7:f4:33:b0:27:26:e9:
55:19:8e:e8:9d:d6:97:4d:b3:aa:8a:c3:92:c9:97:
9d:2a:03:47:70:84:19:e5:e4:ba:db:59:c5:c1:72:
e3:87:f4:38:5e:66:02:f7:e8:55:14:c7:9c:7d:da:
1d:47:e9:fc:8d:d4:56:9d:81:be:24:ae:92:44:07:
90:f1:6e:df:5d:98:41:37:74:9d:ee:fd:38:51:6c:
64:da:ac:75:88:4d:67:74:e5:44:2f:7a:fc:ab:c4:
30:07:b7:69:14:6a:aa:1c:47:be:1a:6e:8d:5f:c8:
8c:06:9a:e7:43:1e:c6:36:0c:59:c4:bd:fd:cd:96:
05:3c:40:98:9b:64:08:d5:8a:6e:1d:fa:75:21:59:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:54:72:9B:EE:B3:D7:6A:23:51:8E:95:70:C6:B9:16:96:77:12
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/i_xUcpvus9dqI1GOlXDGuRaWdxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
109.111.32.0/20
109.111.56.0/22
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
56:f4:2d:63:fa:8f:47:a9:bd:c4:dd:12:e4:bf:48:70:c0:b1:
50:17:bf:34:65:80:42:7c:5c:dc:a0:6a:4a:34:f9:fe:ea:a0:
e4:b8:1c:61:1c:d0:68:86:46:66:b8:97:70:e6:f2:cf:58:2a:
de:76:a1:74:ad:48:ad:07:bb:e7:ac:58:b5:1c:4b:74:aa:37:
31:ba:77:82:77:79:02:8e:6a:d2:2a:1a:e7:4d:1e:e0:45:37:
a2:a2:1f:5f:14:e4:fa:51:87:7c:2f:5a:5c:c2:74:d7:80:8d:
dd:d5:c7:cd:e0:44:87:c8:88:33:0b:a1:64:5f:74:05:28:55:
82:94:fd:28:d3:d2:a1:ea:5e:30:65:a0:8e:96:8c:e7:11:ef:
bd:50:ad:a4:da:66:6f:b3:f8:60:86:32:d5:97:83:d2:11:85:
9e:b8:12:74:ec:5e:ab:2f:07:e7:23:c5:48:dd:45:10:1b:67:
b0:46:09:50:a0:1b:13:1f:88:73:f1:43:1f:9c:f2:fd:4a:5e:
d3:2b:7d:d5:6a:a7:8f:6b:07:1d:a5:88:cb:e6:87:d1:31:64:
b2:81:6f:06:29:92:07:0f:00:31:02:9c:8d:90:d3:ee:df:a3:
93:67:21:99:68:58:bf:0c:e6:36:40:33:94:3a:c1:6d:7e:80:
9d:c5:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:14 2025 by rpki-client