Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Ioovps5s613OBdQzBzryR2Ja3A0.roa
File: Ioovps5s613OBdQzBzryR2Ja3A0.roa (raw, json)
Hash identifier: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=
Subject key identifier: 22:8A:2F:A6:CE:6C:EB:5D:CE:05:D4:33:07:3A:F2:47:62:5A:DC:0D
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0194206825180C954C60C5171BC645517E15
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Ioovps5s613OBdQzBzryR2Ja3A0.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 82.115.214.0/24 maxlen: 24
185.66.202.0/24 maxlen: 24
185.66.203.0/24 maxlen: 24
185.237.4.0/24 maxlen: 24
185.237.5.0/24 maxlen: 24
185.237.6.0/24 maxlen: 24
185.237.7.0/24 maxlen: 24
2a07:e3c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:25:18:0c:95:4c:60:c5:17:1b:c6:45:51:7e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=228a2fa6ce6ceb5dce05d433073af247625adc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:3c:82:de:39:d1:e0:12:5c:95:2d:2f:5b:
e5:36:25:09:2c:5e:45:bc:25:64:5c:28:35:c6:a8:
3e:7c:93:a6:40:d9:ad:5d:ce:b6:cd:c5:07:4f:77:
08:0a:e4:cf:c6:a6:c4:78:7e:7c:81:b3:4f:cb:79:
d4:0e:b7:9b:3b:20:0e:57:22:8e:02:1d:cf:96:16:
1c:95:ea:db:bd:c2:d5:27:47:d2:95:3b:17:f8:df:
eb:64:85:aa:e4:03:24:25:c9:36:c7:3b:bf:38:e8:
d5:32:bd:4a:b5:37:48:f3:ed:93:54:3e:12:a0:93:
c2:a0:b8:2e:80:b4:4b:68:90:2f:6f:da:ce:61:1b:
4a:dc:44:61:71:5e:95:82:fe:5e:e9:a9:5c:2b:43:
71:1e:2d:6e:ea:85:fe:c4:e0:35:79:ab:f3:6a:a8:
5f:ba:89:9e:6f:b2:27:a2:89:73:23:7c:10:e9:ba:
1b:f4:ab:a5:4c:5e:29:89:46:65:be:eb:df:b1:94:
d1:a3:5a:b5:c9:d2:8c:82:24:6c:30:26:4b:b6:fb:
fb:6e:b1:18:c6:23:52:75:07:41:d5:13:17:e7:8f:
1e:44:98:80:bb:fe:f0:f7:87:79:08:47:f1:e1:38:
a9:e8:ec:af:e2:21:b5:29:b3:ac:ed:c6:f8:23:54:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:2F:A6:CE:6C:EB:5D:CE:05:D4:33:07:3A:F2:47:62:5A:DC:0D
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/Ioovps5s613OBdQzBzryR2Ja3A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.214.0/24
185.66.202.0/23
185.237.4.0/22
IPv6:
2a07:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
47:88:fe:7e:4d:81:c5:a7:a8:0c:c6:d7:ba:3b:e0:22:fc:02:
93:32:31:99:57:48:80:98:42:ba:c2:ea:7f:b3:a0:9f:ff:42:
78:e6:da:54:c6:d2:5a:9a:0f:90:78:0e:32:e6:a4:86:c2:29:
5b:53:f9:c5:0f:93:86:b0:c0:fc:ae:e2:32:03:e9:cc:c9:43:
b1:dc:e9:ff:8e:81:ef:9d:aa:c3:08:d7:33:49:2b:54:a0:90:
a3:ee:a4:f1:e5:ce:25:d3:87:69:80:f4:45:f2:d6:d4:b5:5c:
1f:b5:c9:db:0e:4e:45:6b:8d:ba:36:83:e5:52:3b:b8:e1:12:
ab:a7:7a:f3:ca:d7:c5:e4:dd:38:5c:31:38:6c:29:eb:08:d6:
fe:63:a2:cd:73:2b:e7:3b:6b:93:79:4b:7d:4c:46:f7:92:ba:
12:16:7f:f4:9e:a6:ab:06:09:21:52:31:6b:f4:82:65:b1:13:
08:39:17:79:87:26:27:6e:21:e1:c8:77:b1:b0:15:0b:9a:24:
46:43:96:ca:a1:70:89:67:de:30:00:f7:3e:a3:49:4e:4e:ea:
36:56:04:d0:09:45:dc:e2:2a:c3:93:af:e4:8c:d5:eb:cc:b8:
6b:ec:0e:fa:97:9f:7a:03:97:18:b5:ab:25:55:79:c5:a0:39:
d8:9e:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:37 2025 by rpki-client