Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sMdjkKfMWMtDQ0U2QbDo9jMbb6k.roa
File: sMdjkKfMWMtDQ0U2QbDo9jMbb6k.roa (raw, json)
Hash identifier: TFTJVQxq4DNhVkqE//E1AS/y86rnJHQyBELtpl2CXhY=
Subject key identifier: B0:C7:63:90:A7:CC:58:CB:43:43:45:36:41:B0:E8:F6:33:1B:6F:A9
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018577ED5A1E5E8D4581341614D1AD47BC1F
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sMdjkKfMWMtDQ0U2QbDo9jMbb6k.roa
Signing time: Tue 03 Jan 2023 13:58:41 +0000
ROA not before: Tue 03 Jan 2023 13:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 95.82.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:ed:5a:1e:5e:8d:45:81:34:16:14:d1:ad:47:bc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 3 13:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c76390a7cc58cb4343453641b0e8f6331b6fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:5e:f1:b8:8d:bf:53:87:c6:e7:89:44:20:
a5:d6:aa:44:06:e2:60:9e:3c:be:cf:8f:2c:ca:ff:
4e:68:d3:8b:af:0f:4f:a6:a6:ea:ee:13:61:fb:6e:
b6:58:98:52:52:f9:1e:3c:0b:60:cb:37:b0:db:4d:
30:a6:96:a9:2e:90:f0:88:c7:a1:bd:4a:3d:c1:32:
fb:6a:bb:b4:d0:80:fb:9e:ca:fa:69:dc:64:e1:9d:
b2:ca:05:f4:32:c9:40:2c:dc:83:70:79:73:80:61:
4f:1c:e2:67:62:35:a3:31:d0:5c:64:6b:75:e4:87:
db:42:22:52:51:1e:61:6e:94:07:9d:82:30:12:20:
d3:5b:cc:dd:9c:09:59:7f:aa:2c:84:c9:91:b1:d7:
a7:91:a3:19:c6:b8:5f:f0:3d:48:c4:4c:47:9d:4d:
27:13:5c:3b:18:dd:e3:a2:23:88:b8:1c:6b:65:12:
fe:df:cb:5c:6d:23:6f:9f:6b:a4:c6:28:67:d6:5a:
73:5d:0e:43:87:af:46:31:f1:f7:2a:92:4d:b7:e3:
b5:cf:16:1b:06:24:f5:ec:0f:cd:d1:db:23:50:49:
a3:7b:14:fb:85:89:fc:06:b1:67:3e:5a:32:c0:c8:
af:85:6f:04:ba:f4:48:41:cb:4d:d5:1c:0d:8d:cc:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:63:90:A7:CC:58:CB:43:43:45:36:41:B0:E8:F6:33:1B:6F:A9
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sMdjkKfMWMtDQ0U2QbDo9jMbb6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/21
Signature Algorithm: sha256WithRSAEncryption
43:64:f5:e7:1a:70:a8:a6:4b:3f:bf:f7:2d:59:5b:51:31:cc:
22:d5:04:47:b8:eb:e4:99:35:1d:54:5a:8e:a2:50:23:7e:ea:
10:1c:3e:86:83:02:2f:94:ad:8e:9b:0a:12:5e:23:aa:88:96:
4f:0b:ec:e1:76:ea:ec:5b:43:fb:05:2c:43:a0:7c:d9:6a:84:
c3:08:2a:d7:0e:40:20:64:81:00:86:49:b8:03:61:04:81:46:
7e:b0:c8:52:d4:54:e4:7c:f1:69:07:ee:6e:e8:b7:c1:8e:8e:
c9:af:4e:b2:4c:ee:fe:50:4d:84:03:e9:b5:ba:b5:a9:15:00:
5d:3a:b4:da:c1:c9:23:e7:7e:c6:8f:43:8d:27:eb:f2:0f:d1:
c2:95:43:8f:64:66:98:90:e3:55:b8:11:75:0e:8b:31:eb:43:
c5:53:7c:9f:a4:ab:54:7f:88:78:f0:b2:ec:8b:fc:2d:8a:e8:
8d:fd:c9:10:e2:6f:2e:54:ed:14:24:d5:b2:4c:5f:3e:d6:8d:
18:89:c3:43:43:f3:54:00:e1:ed:65:15:48:7e:fa:60:71:0e:
a0:21:3d:62:b2:2b:d9:89:ad:e4:ca:9f:e2:01:a3:2d:86:89:
6e:d3:5e:f7:6e:42:32:00:93:7e:df:8f:11:94:dd:4f:8f:a4:
9f:79:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:49 2025 by rpki-client