Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/2HkRRQW1A84QAgKj8FU21Elekyk.roa
File: 2HkRRQW1A84QAgKj8FU21Elekyk.roa (raw, json)
Hash identifier: JkioRDSXyLKEdwNu38r27ni79OzSN2me3A7lnC6LANY=
Subject key identifier: D8:79:11:45:05:B5:03:CE:10:02:02:A3:F0:55:36:D4:49:5E:93:29
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 0A164531
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/2HkRRQW1A84QAgKj8FU21Elekyk.roa
Signing time: Wed 09 Mar 2022 12:38:12 +0000
ROA not before: Wed 09 Mar 2022 12:38:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28761
IP address blocks: 193.138.84.0/24 maxlen: 24
195.26.80.0/23 maxlen: 23
195.26.81.0/24 maxlen: 24
195.26.82.0/23 maxlen: 24
195.26.80.0/24 maxlen: 24
193.238.108.0/24 maxlen: 24
193.238.111.0/24 maxlen: 24
193.238.109.0/24 maxlen: 24
91.194.163.0/24 maxlen: 24
193.238.110.0/24 maxlen: 24
193.27.242.0/24 maxlen: 24
193.27.243.0/24 maxlen: 24
194.9.26.0/23 maxlen: 24
195.3.244.0/22 maxlen: 24
2a05:5840::/32 maxlen: 32
2a05:5841::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169231665 (0xa164531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Mar 9 12:38:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d879114505b503ce100202a3f05536d4495e9329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:0f:ee:c6:34:67:0c:b2:89:2c:88:df:cd:
3f:9f:30:f5:9e:72:81:f1:db:78:9d:6d:6f:51:73:
7c:4f:74:4d:0d:1f:18:32:c8:d2:f7:86:15:1a:54:
b5:70:45:33:68:41:54:db:d5:e5:6c:7c:f8:48:16:
03:e9:ff:b9:bd:ee:a5:9b:23:a2:47:03:65:5b:5d:
0f:78:ac:93:06:5f:d9:be:a9:7f:fe:97:91:c0:ea:
d2:c1:a0:d4:40:7c:59:30:0a:7f:ad:c9:ff:cb:e3:
8a:17:a6:26:da:6b:be:df:6a:97:66:c6:2b:df:03:
0b:8f:9f:84:60:fe:5a:cb:3d:ba:e1:ba:5f:98:04:
76:9d:69:01:28:3d:ed:de:23:6e:9b:73:52:53:72:
b4:e4:01:c1:0d:5f:1e:7c:59:bc:3f:18:13:f7:fa:
f9:17:87:57:71:38:d9:04:af:1f:14:4c:d7:cc:2d:
13:e4:e8:b2:ee:b6:6c:ec:32:3c:9e:40:f1:24:b8:
a5:4c:ed:dd:77:1e:04:77:d9:12:95:c5:9e:e1:b3:
02:00:eb:33:c2:10:65:90:28:02:d4:35:8b:01:e7:
dc:23:ba:bf:1a:92:13:77:ac:9a:08:b6:65:17:86:
ad:1d:b7:e3:49:d2:43:c2:5a:0a:ee:be:2d:e4:76:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:79:11:45:05:B5:03:CE:10:02:02:A3:F0:55:36:D4:49:5E:93:29
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/2HkRRQW1A84QAgKj8FU21Elekyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.163.0/24
193.27.242.0/23
193.138.84.0/24
193.238.108.0/22
194.9.26.0/23
195.3.244.0/22
195.26.80.0/22
IPv6:
2a05:5840::/31
Signature Algorithm: sha256WithRSAEncryption
0f:85:af:26:bc:3c:d9:88:47:c9:bb:dd:2d:a0:21:39:fb:bc:
bb:04:3b:d3:7a:9f:69:2f:43:7a:bd:0c:7f:d6:42:54:55:20:
4c:d0:2b:c0:bc:16:0d:4a:bf:9d:2b:93:19:6a:4d:d3:ea:e3:
d6:20:4a:c2:fb:dc:f3:0a:0a:30:b9:27:ff:30:43:e0:b4:48:
27:ff:82:b4:93:2e:80:29:22:2c:91:d5:28:8d:2a:70:67:38:
b3:0b:a2:15:bf:28:31:f0:54:31:cf:6c:6f:8f:9e:05:17:a2:
3e:f4:62:c9:1f:b0:95:9e:d9:57:97:94:00:38:31:3b:99:24:
f7:88:cc:d3:c7:a9:73:3f:7a:3f:fe:8f:94:7c:ee:2e:3b:f6:
04:aa:42:5e:81:31:22:af:b6:cf:c8:89:1d:c9:50:81:99:c8:
22:13:d4:ee:28:c7:63:88:bb:6e:ec:83:8c:85:3d:9e:6d:e0:
96:eb:80:3b:13:d0:df:d0:0f:09:bd:d2:b7:5c:2f:1f:35:0f:
2a:e7:85:95:64:31:ed:0c:b9:26:68:b1:dc:d3:bf:29:ee:89:
4c:dc:fa:bf:d0:d7:c8:e7:79:96:0c:18:0f:eb:d2:bb:f9:5b:
11:06:85:d3:17:fb:bf:ca:10:46:f1:d8:ec:ee:4e:8e:77:a7:
00:87:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:58 2025 by rpki-client