Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6EVny9S5s_V9VOKeFEg1Wgvgyg.roa
File: e6EVny9S5s_V9VOKeFEg1Wgvgyg.roa (raw, json)
Hash identifier: OM/7Me8HfCBlX9r94MCEBqjUlK66RiqeuZV14PAORhQ=
Subject key identifier: 7B:A1:15:9F:2F:52:E6:CF:D5:F5:53:8A:78:51:20:D5:68:2F:83:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B81CF5926DB1ABE110C00F608CEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6EVny9S5s_V9VOKeFEg1Wgvgyg.roa
Signing time: Thu 02 Jan 2025 17:51:22 +0000
ROA not before: Thu 02 Jan 2025 17:51:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209193
IP address blocks: 83.171.206.0/24 maxlen: 24
83.171.207.0/24 maxlen: 24
185.147.100.0/24 maxlen: 24
185.147.101.0/24 maxlen: 24
185.147.102.0/24 maxlen: 24
185.147.103.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
185.216.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b8:1c:f5:92:6d:b1:ab:e1:10:c0:0f:60:8c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ba1159f2f52e6cfd5f5538a785120d5682f8328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:20:82:cf:be:91:19:a0:80:06:8d:17:46:
be:2e:a8:f6:5a:ea:da:02:d8:63:36:0e:64:46:5d:
13:c9:65:d7:cb:59:38:9b:e6:be:c1:44:4e:8a:53:
4b:9a:25:51:06:12:5d:b8:b9:e2:cb:d2:a5:05:b4:
de:99:c6:e5:05:0d:22:fc:2f:d2:a7:e2:ca:5e:a6:
c7:69:68:bd:37:33:2e:4a:a3:29:43:c8:59:1f:c2:
be:ba:8c:61:68:b2:70:c9:bf:b0:31:d2:d6:75:20:
71:f6:45:2d:54:ce:c5:fe:8f:0c:13:9f:0d:3d:63:
98:43:ac:66:a9:85:32:6e:a8:30:96:27:2f:72:1a:
8f:c3:3d:81:0f:51:af:5c:cd:e0:d0:39:a1:05:09:
54:c6:7a:13:09:3c:cc:d7:bf:5e:38:e8:11:3d:42:
04:eb:28:86:90:0e:4b:16:4c:c5:b0:0d:59:36:b0:
a3:4f:bd:04:ef:f0:d1:79:ab:d3:a9:91:b5:90:dd:
bc:02:00:b9:bf:64:d5:86:b5:30:77:63:9f:94:de:
a1:9f:58:9b:7f:82:01:71:23:a8:f5:65:b7:35:83:
38:59:58:48:ac:97:7d:ca:04:15:78:40:16:29:9d:
f0:b0:e6:00:58:04:fe:9f:13:25:4c:b6:38:a9:90:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A1:15:9F:2F:52:E6:CF:D5:F5:53:8A:78:51:20:D5:68:2F:83:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/e6EVny9S5s_V9VOKeFEg1Wgvgyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.206.0/23
185.147.100.0/22
185.207.12.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e5:39:74:89:b7:79:b0:8f:a1:98:19:58:56:65:9a:32:07:
34:a1:df:be:09:f5:0a:5c:31:4e:f0:b6:02:8e:f0:c5:97:b4:
86:4c:90:e7:5e:25:12:15:18:99:a9:5d:90:51:95:ef:b1:18:
ee:71:c2:8f:ea:3c:ee:da:2e:ce:85:c1:c2:09:3e:87:90:2a:
4b:8b:fe:96:f4:33:05:1f:70:de:62:44:1b:b5:9c:1a:c4:46:
46:47:4e:38:8c:bd:1e:6f:4d:c1:aa:3c:34:ba:f3:10:b1:ba:
5e:71:db:6a:94:80:75:ed:b4:5e:64:9a:76:82:0d:e2:8a:00:
47:00:6b:fa:a7:5d:24:ba:f8:0c:19:bf:e1:72:6a:7f:ab:79:
f1:24:fb:a1:93:ce:0d:79:28:a1:22:02:2a:d6:ef:c4:a8:a8:
9b:1b:7b:6f:15:15:90:98:9b:c8:e5:9c:b3:a0:d9:63:a1:58:
4c:a5:c3:45:fb:c1:e9:08:b6:37:ce:10:8e:3b:c2:f8:c4:1a:
39:ba:46:b7:fa:40:12:41:33:2a:ce:86:8c:be:d7:9d:13:d7:
10:3f:d1:84:37:d0:7a:c6:77:5b:d4:98:8e:3a:76:16:3b:a1:
91:8d:14:0f:07:69:e0:08:ff:07:01:66:43:12:bf:71:65:56:
f9:d6:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:12:02 2025 by rpki-client