Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/h6DZDzUD1XUkQwsPdS_FhEEryvo.roa
File: h6DZDzUD1XUkQwsPdS_FhEEryvo.roa (raw, json)
Hash identifier: bMSaRiUkOtd7jGVA4/CXLxbYD19DFGnaP1nY3NiA9oU=
Subject key identifier: 87:A0:D9:0F:35:03:D5:75:24:43:0B:0F:75:2F:C5:84:41:2B:CA:FA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72B9B995A178AA79FAB8532F0542A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/h6DZDzUD1XUkQwsPdS_FhEEryvo.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212936
IP address blocks: 82.115.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:9b:99:5a:17:8a:a7:9f:ab:85:32:f0:54:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87a0d90f3503d57524430b0f752fc584412bcafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:01:66:31:22:72:2b:20:06:f7:18:11:06:0a:
13:a9:61:13:c4:b0:ea:91:2e:ee:a9:87:78:97:da:
f9:43:33:a1:39:bf:bb:46:59:71:d5:5e:51:8e:e2:
e0:68:8a:25:e9:b8:71:50:ec:6f:b6:b1:9b:cc:b5:
61:0e:a0:6e:9f:fe:ff:9d:b0:48:85:8d:12:53:b0:
b4:d1:86:fd:13:28:2b:fc:8f:5b:10:bd:d9:ba:f4:
2c:f5:f3:a3:3d:47:67:f6:1c:f6:17:15:57:42:85:
f7:70:2d:c5:cc:83:e6:ed:58:fd:c2:0b:81:44:ec:
e0:41:1d:93:8c:65:96:75:70:a8:9a:d2:fd:cb:2c:
83:9c:58:f3:6d:ba:ed:9e:24:33:4c:2b:4e:2a:71:
7d:c6:27:47:43:26:a1:14:65:34:fc:77:23:b2:c5:
74:e9:ae:87:b2:29:49:22:51:4a:6b:34:28:8a:32:
ae:5f:bd:22:45:2a:44:04:c2:ae:98:4e:17:62:f4:
7e:39:3a:6a:99:be:67:b0:54:14:7e:67:fa:78:57:
63:f6:11:fd:72:c6:20:e8:b1:70:7e:52:c8:a0:47:
0d:c6:c3:5c:9e:dd:d8:4f:51:c3:64:da:1b:c7:84:
b9:21:d4:41:1b:b6:c3:fa:3e:4b:a9:dc:67:d1:55:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:D9:0F:35:03:D5:75:24:43:0B:0F:75:2F:C5:84:41:2B:CA:FA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/h6DZDzUD1XUkQwsPdS_FhEEryvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ff:00:9b:17:eb:53:7b:a1:41:e8:9b:e0:4f:81:a0:76:94:
a7:c3:f0:cd:23:de:7d:bb:0b:c3:05:8a:b3:16:65:d1:ed:25:
9c:ec:28:f1:58:5e:68:0a:15:ce:ae:54:2b:2f:0c:d7:99:fe:
a3:a1:e7:6a:64:cd:ab:a4:37:4e:ee:e2:ea:19:25:0e:b4:1a:
54:ff:3b:52:25:56:34:12:a5:97:1c:a7:61:45:3c:ca:4a:c0:
4d:3d:85:1d:42:53:b0:e1:e8:0d:82:8d:ae:60:71:3c:8e:98:
80:82:fd:1c:01:37:20:fb:30:72:77:e9:f1:43:61:7e:6d:89:
38:39:d8:fe:0e:97:70:01:7e:54:92:e3:01:4e:50:e7:3c:8a:
49:72:63:c6:e8:51:55:6e:06:7c:f1:15:5b:bb:79:1e:05:5b:
16:c6:4f:1d:7f:4b:e6:f6:3d:50:b1:72:42:ac:20:cc:ef:80:
f7:f4:a0:21:38:1e:4a:36:f4:39:f5:bd:66:ba:6f:45:a1:b4:
8a:c3:31:ee:da:3e:48:98:de:81:69:c8:bd:91:90:54:86:80:
65:2a:6f:d7:08:d6:42:a1:46:88:40:a0:6b:25:c8:fd:49:65:
cc:b4:19:d3:6d:8e:39:67:a3:b5:08:ba:48:5a:85:ad:24:15:
4e:b2:45:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:46 2025 by rpki-client