Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jcUVzPXfV_ZoCpbcwlzsMlgt6bE.roa
File: jcUVzPXfV_ZoCpbcwlzsMlgt6bE.roa (raw, json)
Hash identifier: TNQd78vOeYHvLqU0IKLNApXok1Tu1C5Ft0QRSs4cOtk=
Subject key identifier: 8D:C5:15:CC:F5:DF:57:F6:68:0A:96:DC:C2:5C:EC:32:58:2D:E9:B1
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018EEE6B30A567B7871FE8AEC2D59C164EA0
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jcUVzPXfV_ZoCpbcwlzsMlgt6bE.roa
Signing time: Wed 17 Apr 2024 23:36:25 +0000
ROA not before: Wed 17 Apr 2024 23:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/22 maxlen: 24
185.65.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:6b:30:a5:67:b7:87:1f:e8:ae:c2:d5:9c:16:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 17 23:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dc515ccf5df57f6680a96dcc25cec32582de9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:0f:61:f9:43:2b:a0:4e:72:b1:56:f9:5b:
be:a1:6c:b5:ee:23:1a:5a:85:68:a6:e6:0b:72:79:
73:4c:c9:03:88:0b:ff:41:13:6b:a6:c5:43:38:90:
48:c0:e7:c5:da:43:42:32:80:52:36:a0:e8:1c:f7:
c9:8d:60:07:a0:ec:a9:39:c9:03:32:58:69:77:35:
18:b0:d4:ff:32:0c:8f:30:83:ca:e8:43:78:63:f8:
a7:e6:dc:a5:cc:74:22:7a:f4:70:18:54:47:2d:8e:
b6:2d:ec:40:fe:73:16:a6:be:90:4c:8a:f8:ea:33:
04:36:1d:0f:12:a8:aa:7e:64:01:ad:86:83:18:33:
df:a2:a9:c4:1b:b2:70:12:e7:d0:90:0f:2f:70:80:
d6:e2:f3:50:c3:ed:1d:95:43:c1:4a:83:35:8f:e5:
5f:bb:36:03:40:56:42:14:d3:3a:dc:04:13:4e:c4:
f3:6a:99:e5:f8:84:e3:90:67:cf:54:29:34:cd:6e:
4f:22:d7:15:8c:77:0a:60:df:22:56:75:5e:59:75:
b2:12:ff:f2:a9:50:12:13:b8:51:93:7a:ca:f5:ff:
10:9c:92:f2:93:af:e5:1f:45:9a:fc:ca:bb:b7:6a:
e0:c9:96:b3:27:05:4c:bc:88:ff:b1:ae:dd:49:f4:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C5:15:CC:F5:DF:57:F6:68:0A:96:DC:C2:5C:EC:32:58:2D:E9:B1
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/jcUVzPXfV_ZoCpbcwlzsMlgt6bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
21:15:af:17:ab:fc:a8:03:bc:59:21:08:aa:79:92:53:02:39:
80:33:70:cf:a5:df:3c:13:13:ff:51:f7:00:ea:78:39:85:ca:
1b:b2:e2:ad:72:7a:4c:38:28:ab:bf:bb:a3:d4:77:1b:45:a0:
2f:94:43:9b:d6:54:a3:6f:de:0a:1c:23:39:b4:c3:dc:96:4c:
ea:b5:f3:93:88:b1:b8:c4:0b:ab:fb:f5:47:39:a8:5d:7f:cd:
79:ad:a2:fe:f7:48:3c:08:6a:44:51:f7:8e:f8:87:ba:28:87:
ca:f7:6a:5c:7d:8c:af:2d:ae:ed:7d:af:c6:6d:b2:1c:4b:29:
28:bf:bd:74:4f:d4:ad:e3:52:55:b3:00:97:1a:b1:f8:52:89:
b7:5a:11:2f:e7:5c:8a:ca:14:0e:58:45:f7:72:e5:67:ee:8a:
6a:14:84:24:e8:a6:57:ba:e5:17:19:ba:8e:4d:1e:45:23:ba:
61:54:70:bb:46:98:36:0c:d0:ec:e1:ed:c3:ad:79:18:fb:b2:
27:a3:98:ee:09:62:b0:d2:3a:93:20:eb:ba:53:99:25:cc:7c:
9b:f9:ee:b8:c3:cd:db:32:3c:36:06:1b:9c:93:f7:56:36:c1:
10:7d:07:30:3f:22:29:9f:ab:78:6d:cd:47:b8:b6:f7:f8:36:
fe:a7:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:47 2025 by rpki-client