Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/PmKzLROtlSNpGVP9Gabn59_vPcQ.roa
File: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (raw, json)
Hash identifier: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=
Subject key identifier: 3E:62:B3:2D:13:AD:95:23:69:19:53:FD:19:A6:E7:E7:DF:EF:3D:C4
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019422FC2295F67CF3BEC7D6A335DE7F6D70
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/PmKzLROtlSNpGVP9Gabn59_vPcQ.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199469
IP address blocks: 185.15.112.0/22 maxlen: 22
185.15.112.0/24 maxlen: 24
185.15.113.0/24 maxlen: 24
185.15.114.0/24 maxlen: 24
185.15.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:22:95:f6:7c:f3:be:c7:d6:a3:35:de:7f:6d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e62b32d13ad9523691953fd19a6e7e7dfef3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:29:20:db:e0:14:ca:ed:c5:59:6c:81:23:
9f:7f:8b:68:f2:cc:71:c9:6e:79:85:58:27:ee:16:
3b:0b:73:4a:d7:ea:82:76:09:f9:67:99:e0:d9:13:
0b:b3:b6:77:19:8c:57:4e:67:c6:26:54:07:1e:d6:
26:79:d7:58:b7:1c:e6:e5:f8:70:ba:80:6a:b2:31:
bc:5d:30:8c:3f:e0:ac:a7:a6:68:2b:11:32:fa:f7:
49:9c:b3:4d:65:e3:57:f6:ed:be:56:be:a0:cc:f0:
43:14:6a:6e:c6:08:b5:3a:a3:89:6c:5c:a9:47:10:
f2:7e:e5:88:24:75:6f:a9:1d:83:78:1e:0d:83:b3:
b7:cd:40:59:e8:b9:02:c2:42:6c:8f:39:e4:0a:a1:
d2:9c:bf:35:1a:ab:9e:58:90:0e:6e:c8:f9:82:a2:
a5:95:84:df:d9:de:d9:77:1e:f9:32:41:8d:2b:62:
fc:d9:6a:b9:8b:ef:e2:dd:95:c4:bd:f3:d4:d7:a6:
a5:99:47:cf:85:50:de:8b:f6:54:1e:1d:ea:7a:23:
f8:10:fa:be:f3:6a:e6:b5:83:2c:24:fd:4c:f1:59:
61:21:74:18:71:d0:d4:31:45:c6:67:68:1d:b3:a6:
e9:bc:d0:75:92:fc:f8:12:b4:f3:e5:65:fa:27:3d:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:62:B3:2D:13:AD:95:23:69:19:53:FD:19:A6:E7:E7:DF:EF:3D:C4
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/PmKzLROtlSNpGVP9Gabn59_vPcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:58:ca:81:92:c8:08:b0:1b:ae:96:ae:19:c2:89:f8:22:35:
eb:81:dd:07:68:d1:4f:62:e4:45:eb:e3:06:43:1f:d5:21:12:
6d:0e:a1:11:6a:d6:75:43:30:bd:df:01:c5:34:6c:2c:54:97:
03:af:94:af:63:d5:df:1a:58:16:69:e6:f4:d4:ac:25:1c:a0:
03:a3:1a:3c:b1:99:ef:5a:45:ff:92:75:1e:95:b7:b2:67:9f:
00:b4:bf:01:57:3d:59:01:1a:ec:01:66:10:4a:0e:bd:4f:38:
6c:d0:1c:31:5d:08:4c:65:60:f1:67:2a:0f:da:9b:ec:29:d0:
46:a8:4a:80:ac:30:d2:c2:e2:06:26:3d:4a:22:23:09:c2:60:
6f:ae:82:de:17:7f:20:f3:8c:6f:e6:9b:f0:d1:59:0e:71:ca:
db:0f:97:7d:3e:ae:50:76:a3:a0:1d:87:68:ef:1b:b2:4f:4e:
7b:ed:ea:c1:a9:b1:a2:85:e2:df:0f:e4:c6:fd:24:10:e0:a6:
10:cf:d4:1c:9d:36:4a:0b:56:b4:92:cd:36:37:20:7f:6c:42:
d8:fd:a1:35:4a:39:70:e8:31:82:30:6b:31:2c:f9:79:4e:4f:
1f:02:91:54:d4:e1:98:ac:73:3e:84:36:7e:45:cf:aa:79:c0:
9b:08:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net