Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/tzc2rd30MMFtDdeU7IvAceMEc5o.roa
File: tzc2rd30MMFtDdeU7IvAceMEc5o.roa (raw, json)
Hash identifier: kOxN04hrQjclCeXZWlDWylC+pwJ+769PDnvftSq7+mU=
Subject key identifier: B7:37:36:AD:DD:F4:30:C1:6D:0D:D7:94:EC:8B:C0:71:E3:04:73:9A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F8B6246DC5E42D860E58D33242E461BA7
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/tzc2rd30MMFtDdeU7IvAceMEc5o.roa
Signing time: Sat 18 May 2024 11:07:04 +0000
ROA not before: Sat 18 May 2024 11:07:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.44.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/22 maxlen: 24
176.221.26.0/23 maxlen: 24
185.65.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:62:46:dc:5e:42:d8:60:e5:8d:33:24:2e:46:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 18 11:07:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b73736adddf430c16d0dd794ec8bc071e304739a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:03:4a:43:d8:da:da:d8:f1:eb:f1:21:6c:
ff:54:b9:41:d5:af:b1:f2:4c:3b:b8:3a:a1:bf:be:
4a:a3:67:a9:4a:1e:72:0b:b5:be:d7:00:de:72:1c:
df:fa:18:50:54:b9:4d:64:59:0e:7d:1b:a3:66:cd:
e1:9c:19:d7:9a:8d:ef:0c:d8:e0:5f:d9:15:b6:4c:
76:56:b2:b5:a4:33:b2:26:74:54:97:e6:74:51:84:
a6:cd:ed:a3:08:51:e4:55:1d:41:11:77:c9:1c:8a:
52:a0:23:eb:37:80:5f:76:57:a6:b6:c7:b6:62:36:
47:67:19:4c:e6:7e:c7:c3:73:da:44:31:29:7a:e4:
1d:82:26:43:9e:c8:4e:ec:28:8d:ad:82:06:a0:79:
10:db:93:b0:65:c9:cc:ac:66:60:1b:8e:4e:3a:2f:
a8:a6:d8:7b:09:b7:21:56:5d:a5:ee:32:4d:cb:e1:
80:89:40:ad:86:51:84:9b:08:af:12:6c:aa:01:42:
66:5e:c3:e4:9a:ac:da:b5:8a:63:95:62:9b:3f:45:
48:7e:5d:5d:41:24:e1:2b:f7:c2:d9:81:d2:05:90:
30:65:70:c1:73:a6:42:20:52:86:10:6c:3b:7e:ba:
c9:05:57:20:ca:13:a7:6d:0f:a9:ae:4d:63:71:48:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:37:36:AD:DD:F4:30:C1:6D:0D:D7:94:EC:8B:C0:71:E3:04:73:9A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/tzc2rd30MMFtDdeU7IvAceMEc5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
185.65.62.0/24
Signature Algorithm: sha256WithRSAEncryption
95:16:b7:ea:6b:1f:96:13:12:40:0f:1c:64:46:f3:0e:c3:59:
b7:f3:07:c7:76:04:6b:ab:a5:26:1d:e1:6f:f5:67:66:ce:1a:
6d:e0:6b:47:b4:8b:5c:5c:d2:b1:ae:bb:a9:d5:21:08:24:04:
e5:d8:82:4d:3f:4c:a2:43:a4:ad:9c:e0:b2:6c:41:e9:4e:a9:
18:f8:c0:42:72:8f:68:e7:85:40:c1:07:a3:43:a0:c4:b9:23:
4b:d4:9c:52:a2:05:89:9c:72:30:fd:c7:09:72:fe:b3:d0:70:
46:70:b3:26:c9:f1:21:33:78:8c:ec:32:d5:a7:8a:fb:77:1e:
23:ea:a5:01:e9:ec:7c:4f:07:4c:cf:dd:96:ea:88:67:7c:29:
7d:fa:fb:0f:70:d9:d5:ea:f5:09:3e:56:de:3a:a0:02:79:7f:
bb:78:50:82:f5:0e:c2:ab:30:de:6f:45:e3:4f:8a:4d:aa:9c:
6b:92:1e:87:c2:e2:ec:da:da:4a:ec:47:07:8c:65:6c:3d:bb:
d8:4a:3f:aa:91:05:68:ba:5e:0d:dd:c0:c6:f4:42:2d:6b:5a:
a7:af:64:30:0e:24:18:7c:d9:34:0b:c7:fa:6a:52:30:1c:00:
4b:68:66:06:8f:be:4e:bd:37:e1:55:b8:76:be:3b:ea:d9:31:
e3:c0:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:05 2025 by rpki-client