Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sZbCbu-JH5c-_UJ5NMNM3aL-RGo.roa
File: sZbCbu-JH5c-_UJ5NMNM3aL-RGo.roa (raw, json)
Hash identifier: RU/vcJM0B0ov4OqzyMiG7j0i0G/LJyEWdkg25OBKTHE=
Subject key identifier: B1:96:C2:6E:EF:89:1F:97:3E:FD:42:79:34:C3:4C:DD:A2:FE:44:6A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019229827663DC6ABCE38A81FD742D8BA7F0
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sZbCbu-JH5c-_UJ5NMNM3aL-RGo.roa
Signing time: Wed 25 Sep 2024 14:07:48 +0000
ROA not before: Wed 25 Sep 2024 14:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.40.0/22 maxlen: 24
109.111.42.0/23 maxlen: 24
176.221.20.0/22 maxlen: 24
176.221.24.0/22 maxlen: 24
176.221.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:82:76:63:dc:6a:bc:e3:8a:81:fd:74:2d:8b:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 25 14:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b196c26eef891f973efd427934c34cdda2fe446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:a8:ac:ed:7e:3e:e7:fc:d7:83:fc:5b:93:
8d:f1:ae:38:cb:73:55:f7:af:5e:1f:01:ec:d1:59:
6d:08:5c:46:2a:75:28:07:4e:b9:74:f5:a2:93:5d:
2a:3b:ca:79:05:fb:1c:67:90:e6:9e:66:69:11:6c:
2c:08:03:fd:17:c0:28:ad:23:64:55:f6:3e:b6:21:
8e:11:0e:fe:1d:ae:25:4e:e2:26:fe:24:10:5b:38:
7f:57:29:49:ac:f2:7c:76:41:54:14:39:02:08:1d:
4a:de:7c:be:74:93:4c:7e:17:ad:d7:8a:c1:a9:70:
30:eb:57:d4:df:ac:b2:1f:71:2a:cf:24:a2:c8:40:
57:50:90:b9:ec:4d:3b:4b:d6:fb:90:1e:55:d5:4c:
60:5c:17:c4:0e:98:39:17:03:28:c5:fd:61:83:75:
df:1f:36:63:95:49:ae:a8:ba:18:0e:f2:a7:e0:0d:
88:90:01:d5:1a:34:7d:98:91:48:6e:a5:e6:8a:de:
f3:a7:35:d4:07:f2:1f:c6:8c:07:91:60:96:46:c4:
e6:6f:50:65:74:c1:9a:64:05:e5:67:e4:95:36:80:
1a:08:e7:39:25:f2:36:c3:a8:b0:f8:4e:40:53:7e:
f8:55:77:5b:67:05:57:c1:ed:66:db:73:bb:40:99:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:C2:6E:EF:89:1F:97:3E:FD:42:79:34:C3:4C:DD:A2:FE:44:6A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/sZbCbu-JH5c-_UJ5NMNM3aL-RGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.82.0.0/20
109.111.32.0/20
176.221.20.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
97:66:38:30:e2:7b:34:b3:4b:5b:1e:1e:c9:29:29:64:7d:ec:
6d:49:3a:6f:31:a1:e8:0e:84:55:66:d9:6f:9d:01:5c:f4:c2:
7a:a7:10:dc:41:53:14:25:25:05:8b:9e:0f:42:79:dc:75:fe:
9c:17:6b:5e:9a:b2:58:5b:1e:1e:cf:cf:8b:9e:4a:64:5c:b6:
f3:a9:4b:3a:83:0c:e4:7b:77:6c:57:13:cd:17:6e:40:6b:d8:
d7:94:95:47:ae:24:93:d9:3b:62:df:14:94:06:e8:3e:ce:04:
de:c7:3f:b8:e2:39:9d:4d:c4:34:0a:8a:18:30:7e:80:f8:a3:
c0:cf:81:88:69:32:3f:40:f0:3b:a4:98:72:03:6d:f4:a9:aa:
43:af:28:8d:b5:42:c1:05:4f:09:fb:66:bb:a4:7c:e8:cc:4d:
b9:50:79:34:86:a3:a4:b5:92:a0:ae:5e:31:32:29:c5:19:2b:
81:9a:3a:08:d7:b4:8b:29:dd:23:9a:56:0e:1e:4f:d6:f8:5f:
1c:73:c5:25:f5:e2:52:d9:f1:63:dd:bf:2c:b1:68:3d:86:41:
01:3c:0d:82:d1:2b:30:1d:73:af:75:f3:54:d4:2b:af:8f:22:
9b:f8:ad:68:3d:6c:cd:a9:30:f7:0e:17:e4:25:ee:82:5c:8f:
af:37:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:05 2025 by rpki-client