Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/lBmqB4IoCGN9pj3mPJ9tfjkBl5s.roa
File: lBmqB4IoCGN9pj3mPJ9tfjkBl5s.roa (raw, json)
Hash identifier: l0BoWJRP318V/YpQ4IFomnevRK+1F937Hqvy3JnQBu8=
Subject key identifier: 94:19:AA:07:82:28:08:63:7D:A6:3D:E6:3C:9F:6D:7E:39:01:97:9B
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 0190475E824B57838BF64627F93F3EEC5B6D
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/lBmqB4IoCGN9pj3mPJ9tfjkBl5s.roa
Signing time: Sun 23 Jun 2024 23:11:34 +0000
ROA not before: Sun 23 Jun 2024 23:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:47:5e:82:4b:57:83:8b:f6:46:27:f9:3f:3e:ec:5b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jun 23 23:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9419aa07822808637da63de63c9f6d7e3901979b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:20:ca:96:db:c3:c5:8b:bf:27:63:a3:58:
33:65:14:e0:4c:0f:35:a3:55:b9:18:c6:de:95:b3:
ed:16:36:64:ca:64:18:91:1b:5e:6d:0d:77:2f:44:
fd:ac:e9:dc:42:9e:21:de:ec:0f:72:41:c5:e0:17:
6b:1c:e1:23:8a:80:73:91:d1:37:12:8f:41:a0:5e:
cf:ae:10:cc:9c:3e:7b:31:89:e7:82:31:12:b0:fb:
21:71:ff:da:39:da:fc:d0:c0:6e:8c:5e:12:1d:76:
19:83:6e:43:ee:20:1e:0b:87:cd:ff:d0:a7:59:6d:
5d:c8:3f:a8:57:0f:ca:ca:2e:bd:2d:57:d1:de:5a:
fe:bc:af:b4:49:00:70:e3:d4:d2:e5:ad:cb:cc:11:
91:bc:5b:8c:97:a5:fa:d2:e7:bd:8b:f4:73:f1:ab:
20:98:48:ee:b0:f2:3e:f2:2b:17:b8:01:94:55:78:
b6:4f:35:65:40:f6:e0:f8:0b:3e:7e:46:58:ad:a7:
04:da:bb:ee:26:c4:f2:68:fe:2d:bc:04:b2:1b:9d:
1b:1f:f3:4e:18:74:c4:1d:bc:d4:9a:ac:6e:44:0d:
c1:9e:aa:48:ad:e6:b6:29:19:76:03:ff:1f:7b:4a:
07:82:ae:0b:95:2e:63:1a:ee:5c:39:d6:be:a3:11:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:AA:07:82:28:08:63:7D:A6:3D:E6:3C:9F:6D:7E:39:01:97:9B
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/lBmqB4IoCGN9pj3mPJ9tfjkBl5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
3b:c8:4e:09:82:40:4c:58:68:8b:3a:67:2e:b6:57:36:bd:75:
f8:8a:6c:eb:20:48:ca:d4:69:5f:9a:fc:5e:79:6c:6e:4e:cb:
16:0e:b6:f4:ca:2d:55:ef:27:7d:c5:93:e7:99:1b:42:ba:c1:
b7:55:34:5f:e4:25:a3:7f:23:f6:ea:43:33:a7:26:41:9f:2f:
c6:dc:28:5d:e3:fe:de:c1:2b:85:e5:95:34:b8:35:59:cb:1a:
aa:7b:81:d3:e3:01:91:8c:73:cb:fe:41:ea:a2:29:e4:c5:2e:
a1:c7:b7:cd:a0:69:bd:13:5e:b9:d9:4b:c6:24:89:89:cd:18:
0b:a8:98:1f:fb:bc:f5:d5:aa:67:eb:69:66:aa:a3:20:11:5c:
3a:e2:f6:30:4a:a8:0d:f0:75:c9:94:ae:fe:4b:d1:94:76:12:
f5:92:9b:4e:8e:21:78:d5:f2:d2:8d:07:dc:44:07:57:d9:2b:
8c:8a:fe:5f:b6:2e:b8:72:e7:ba:e8:f2:56:67:4b:f1:e3:7f:
75:a4:e4:7d:1a:f6:c9:55:cd:ef:d9:f4:0d:ed:ad:1d:10:db:
47:1d:1f:d2:8b:91:d4:6d:ca:60:42:92:12:67:2a:9d:d2:42:
0c:ad:15:11:26:29:4e:02:84:65:44:1f:af:df:4e:a6:97:dc:
e6:42:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:28 2025 by rpki-client