Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/teaVWbuvtHUCSyo6-EiDLNb0oUU.roa
File: teaVWbuvtHUCSyo6-EiDLNb0oUU.roa (raw, json)
Hash identifier: md4geehrxpbE07X82USgl0IWpGiACdLPE+oIfqZxLbQ=
Subject key identifier: B5:E6:95:59:BB:AF:B4:75:02:4B:2A:3A:F8:48:83:2C:D6:F4:A1:45
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018BADCF7C007FBEF32B399505D502A1683C
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/teaVWbuvtHUCSyo6-EiDLNb0oUU.roa
Signing time: Wed 08 Nov 2023 07:22:17 +0000
ROA not before: Wed 08 Nov 2023 07:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.82.0.0/21 maxlen: 24
95.82.8.0/21 maxlen: 24
109.111.32.0/20 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/21 maxlen: 21
176.221.28.0/22 maxlen: 24
37.128.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:cf:7c:00:7f:be:f3:2b:39:95:05:d5:02:a1:68:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Nov 8 07:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e69559bbafb475024b2a3af848832cd6f4a145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:5d:29:96:50:fd:ac:5f:da:c3:6f:b7:26:
1b:eb:19:c8:73:a6:88:40:77:ba:4d:f6:c4:60:ef:
15:e8:74:04:f4:ec:fd:31:56:6c:7a:ac:11:f2:f6:
4d:4f:e3:d8:4b:39:0b:1b:49:20:9e:79:17:52:3b:
fc:89:21:e9:2f:b5:dc:ea:b0:66:3e:ea:86:9c:fb:
c7:3d:37:ee:1f:61:2d:4f:09:7c:0d:29:ab:fe:95:
1f:d5:43:08:67:d5:2a:ad:2e:a8:7a:f6:ee:c2:0e:
68:ea:27:6b:98:98:21:15:7f:c8:b9:be:d8:8d:71:
1f:bc:76:d4:1b:56:49:f5:ff:3c:1d:a7:45:a6:75:
1d:ff:46:28:77:6e:67:30:7c:13:8e:40:ba:23:95:
cd:6b:af:9f:bd:9e:cc:4a:3d:fa:d3:10:0a:76:32:
7a:30:3f:1d:c8:2b:40:88:78:42:38:3b:30:22:fb:
ba:1e:67:b0:bc:6f:1b:0f:a4:0d:b9:da:15:59:a9:
7e:00:bd:a7:fe:1e:db:29:67:72:e5:fc:c1:87:7d:
2f:56:f8:af:5c:66:c0:e5:c1:b3:c4:fe:15:f3:78:
6d:21:8a:27:71:1c:76:be:86:8e:ad:8d:75:fc:c0:
0a:e8:1c:c0:59:dc:9f:3a:a9:a3:90:04:1c:dc:59:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E6:95:59:BB:AF:B4:75:02:4B:2A:3A:F8:48:83:2C:D6:F4:A1:45
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/teaVWbuvtHUCSyo6-EiDLNb0oUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0/20
Signature Algorithm: sha256WithRSAEncryption
46:d5:1f:fc:c2:9f:97:0c:a1:ce:5e:1c:2a:eb:c5:37:2f:c1:
07:91:62:c9:1f:2d:20:f6:5c:e5:e1:ff:81:b8:3b:5a:ab:86:
19:5d:c0:48:89:92:75:73:7e:d8:47:e3:0b:8a:87:07:8c:fb:
c9:bc:1a:57:62:55:59:dd:96:cd:ff:92:3a:33:79:0c:23:37:
de:9f:54:3b:eb:54:c5:9c:f5:f9:e9:15:7c:0d:88:b0:3a:5d:
a1:7e:c9:f1:f6:8a:03:55:b3:c7:c9:b6:74:ee:25:37:15:5f:
cf:55:de:fa:bb:2c:e4:3a:ef:ba:32:a6:c8:79:fd:f3:92:be:
f9:c3:98:06:63:37:dd:e8:b4:0d:71:53:19:28:67:22:7a:d1:
92:ef:96:e0:5a:4c:12:ec:02:c8:5d:8c:36:0f:0e:4a:9b:c0:
6e:98:cf:6d:e7:87:5c:6e:d9:2c:5c:61:6c:36:5f:c6:40:da:
23:fb:88:5f:52:f5:b6:d1:4d:92:8d:9a:67:68:69:53:65:b0:
e3:2d:92:89:32:86:c4:7f:9a:a4:43:09:3b:80:4d:72:38:ac:
82:39:83:b4:54:54:d1:01:ea:e3:89:7f:4d:10:f8:42:03:8c:
75:2e:40:aa:39:01:fd:c6:6b:c2:8d:e9:1b:f4:19:c7:1a:c8:
62:30:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:11 2025 by rpki-client