Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa
File: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (raw, json)
Hash identifier: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=
Subject key identifier: AB:B2:FF:E5:6C:AF:9F:20:4E:2F:25:23:9E:10:D4:F6:70:43:F4:1F
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C2ACBA04FE25D854B3B7DCFF321AF
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa
Signing time: Thu 02 Jan 2025 09:50:10 +0000
ROA not before: Thu 02 Jan 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62075
IP address blocks: 82.115.216.0/24 maxlen: 24
2001:67c:18d4::/48 maxlen: 48
2a0d:2d40::/32 maxlen: 32
2a0d:2d42::/32 maxlen: 32
2a0d:2d43::/32 maxlen: 32
2a0d:2d44::/32 maxlen: 32
2a0e:c6c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2a:cb:a0:4f:e2:5d:85:4b:3b:7d:cf:f3:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb2ffe56caf9f204e2f25239e10d4f67043f41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:fc:e3:1d:59:93:2d:a2:3e:02:f5:6a:58:
1c:bf:d6:04:cf:63:c4:1d:b2:b9:2c:d9:07:1d:5e:
b2:8d:ed:80:be:17:e8:4b:d9:33:8b:e7:47:04:36:
e8:4b:3f:d0:93:5a:3f:d7:40:53:6d:de:4f:a9:f1:
fa:b9:fb:76:4c:b6:df:1a:c3:ac:04:01:58:3b:e8:
a4:59:64:19:24:2a:be:bb:76:4f:89:75:4f:20:44:
a7:09:aa:17:36:89:ce:ac:39:10:de:26:d4:96:84:
06:0e:d9:96:32:f1:bf:d9:47:7e:53:e2:5f:b6:ef:
92:6f:74:04:16:cb:d4:66:5e:ab:2c:4d:e7:ea:56:
ff:bf:46:91:56:6d:e7:87:17:68:96:05:d9:68:74:
82:b5:78:b7:fb:18:1c:79:80:16:ea:1f:33:2f:33:
39:e2:da:fb:7f:1a:e8:4f:43:50:7a:46:d3:5f:95:
61:29:56:17:98:c4:09:10:2e:db:4c:16:37:3f:6d:
80:cd:e8:84:8a:b8:e2:f3:e4:21:9c:e4:45:5d:02:
dd:b5:0a:0b:9b:c4:9c:54:0f:f0:ac:4b:61:b9:a0:
98:b9:a9:3d:f6:1f:c0:13:72:12:a6:ff:bf:33:12:
01:65:98:12:ee:25:60:87:14:37:e3:2c:a1:64:77:
28:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:FF:E5:6C:AF:9F:20:4E:2F:25:23:9E:10:D4:F6:70:43:F4:1F
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.216.0/24
IPv6:
2001:67c:18d4::/48
2a0d:2d40::/32
2a0d:2d42::-2a0d:2d44:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:22:ad:1b:5c:e9:01:05:95:d3:62:f8:61:e9:a2:01:62:66:
4f:bd:9f:a4:25:a2:92:4c:dc:41:c3:da:05:50:73:1e:5a:54:
f6:b0:40:fc:b2:e3:25:6f:de:8e:af:54:68:d5:f9:51:10:65:
05:8c:3c:0f:96:02:d1:d7:ec:e5:9f:56:dd:05:3a:dd:e8:06:
de:a7:08:8d:c1:e6:46:08:96:40:b0:a1:c1:af:dd:b4:44:5b:
b4:e3:28:e9:6f:47:34:af:5c:b0:05:95:8f:d1:16:af:ce:d9:
ab:a8:23:e1:52:79:af:8d:03:7c:48:e9:e8:29:66:c1:ab:bf:
92:b1:14:3c:47:72:dd:71:ee:94:98:a3:21:de:55:b8:ae:85:
06:2b:09:e9:b6:68:12:a3:46:38:c6:10:c4:57:2d:d8:25:50:
47:de:02:ed:f2:36:00:c0:f3:44:28:79:53:2f:b9:eb:95:0e:
50:82:1a:7d:63:91:e1:93:8a:ac:d1:f8:bf:37:42:e5:c9:fe:
ff:61:fa:5a:b4:af:78:60:04:93:32:12:dd:7c:32:d6:11:b8:
cd:bb:d8:9a:46:b2:9e:87:08:3a:e4:b8:cf:0b:86:50:ab:a2:
d2:ce:ac:ef:33:93:54:67:ab:e1:d8:b4:e0:c2:ce:50:6b:ec:
ca:47:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:01:34 2025 by rpki-client