Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e2hm5zKLWFQtWuHmzs-RFeYfEUs.roa
File: e2hm5zKLWFQtWuHmzs-RFeYfEUs.roa (raw, json)
Hash identifier: 3+AWqRaGWxxFDBfoj8ECxHHdia1vXbtKzwQAoqB5Ns4=
Subject key identifier: 7B:68:66:E7:32:8B:58:54:2D:5A:E1:E6:CE:CF:91:15:E6:1F:11:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01946A95289C26D294135DAECD7101CFD6D3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e2hm5zKLWFQtWuHmzs-RFeYfEUs.roa
Signing time: Wed 15 Jan 2025 15:29:07 +0000
ROA not before: Wed 15 Jan 2025 15:29:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208287
IP address blocks: 82.115.211.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:95:28:9c:26:d2:94:13:5d:ae:cd:71:01:cf:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 15 15:29:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b6866e7328b58542d5ae1e6cecf9115e61f114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:99:ef:be:f4:91:50:63:91:a6:09:77:e3:
5f:bd:c4:cc:b3:65:d6:ee:b2:3a:8a:72:ab:c1:4a:
38:07:51:42:d3:6d:49:b3:75:2b:f3:a4:26:d6:22:
b1:b5:2c:28:1c:cf:9f:99:6c:16:b2:94:6d:b4:eb:
86:5a:b7:a2:ff:44:30:26:d8:85:03:e0:4f:00:54:
61:3a:3e:a7:54:04:d9:b5:2b:b9:96:96:d2:87:de:
4b:e9:c4:62:7d:68:fc:62:33:dd:2b:a1:05:3d:77:
67:c2:59:10:e2:f6:37:d5:d9:81:b9:b3:c8:c3:83:
be:46:58:86:0e:02:02:ff:8c:94:fc:7e:c6:4c:b6:
78:97:4e:50:d0:a1:cf:c7:fe:92:d2:c7:b7:e6:24:
59:b7:11:89:d9:eb:f9:28:60:50:ff:c3:ec:a9:50:
ee:48:fc:ce:c3:ad:7b:a7:a8:68:3c:b9:c0:97:9a:
ae:a7:c2:2a:cd:64:e0:6d:1c:76:0e:b6:98:98:7f:
32:7e:71:0a:37:c5:9c:d4:71:57:7a:86:79:c0:cc:
13:01:b8:b4:ba:1a:36:c3:94:24:8f:5f:bf:a9:5f:
df:57:54:60:2e:10:98:84:86:ca:52:75:28:a9:4e:
91:54:5e:10:6c:de:ac:13:28:0b:94:a5:f4:72:92:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:66:E7:32:8B:58:54:2D:5A:E1:E6:CE:CF:91:15:E6:1F:11:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e2hm5zKLWFQtWuHmzs-RFeYfEUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.211.0/24
185.222.160.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f8:ca:de:de:65:3c:26:71:50:bb:a3:0b:0d:b2:04:eb:08:
54:a2:b8:56:8b:75:c1:a8:70:53:41:16:bf:27:3d:d7:4f:75:
ec:bd:f4:06:bd:c9:e8:4b:02:ac:34:ef:ca:b4:78:0b:00:16:
9f:38:33:ab:33:3d:d7:26:15:c4:85:30:78:0d:d7:62:44:d3:
ab:7d:e0:8c:e7:57:14:2e:63:7b:04:b1:45:b2:1a:41:b1:99:
8f:63:ca:78:f6:f1:63:72:bf:17:4b:18:b2:4a:45:a7:49:6c:
99:c7:25:d6:45:8b:eb:d1:87:a6:5a:9e:14:0a:74:93:21:c7:
f4:f7:e8:76:ff:0c:9f:9c:35:92:9e:b4:c3:d5:f9:dc:bd:a9:
a0:35:66:ab:de:31:aa:7b:ce:fb:04:3b:9e:26:c9:22:e9:16:
3f:92:23:49:ec:3d:7d:66:c5:88:90:d2:9a:b0:d8:0d:e7:e0:
b5:f2:03:c2:79:4a:77:e9:6b:e9:d6:32:9d:04:39:9f:0b:92:
e1:48:ee:73:3b:2f:2b:0a:0c:1b:03:00:bd:5e:93:30:82:d3:
50:9d:c5:f8:92:23:29:52:99:cf:33:ff:d5:03:95:bc:37:74:
d2:b9:d9:f3:eb:3b:e1:3d:aa:0c:6c:36:68:8a:59:cb:cb:08:
05:03:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:00 2025 by rpki-client