Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa
File: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (raw, json)
Hash identifier: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=
Subject key identifier: 3C:E0:8F:47:14:4C:42:F1:BF:48:10:E6:32:79:5F:6C:DC:99:FC:57
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 0195B7DF29286BE8FB981AAA492B28286AE7
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa
Signing time: Fri 21 Mar 2025 08:43:30 +0000
ROA not before: Fri 21 Mar 2025 08:43:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 185.70.224.0/24 maxlen: 24
185.70.225.0/24 maxlen: 24
185.70.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:df:29:28:6b:e8:fb:98:1a:aa:49:2b:28:28:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Mar 21 08:43:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ce08f47144c42f1bf4810e632795f6cdc99fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:78:ae:e2:76:18:22:00:5b:b6:e8:69:61:
86:eb:07:54:5d:6d:b1:bb:71:c1:b0:a4:a9:91:68:
b2:8a:5b:f2:16:39:1f:a8:06:59:e8:14:c7:15:3c:
79:e0:3c:b4:f1:29:7a:9b:d6:f6:9a:49:f3:32:7f:
e9:00:bd:65:6e:e1:75:9e:bf:de:2e:35:57:2a:78:
5c:af:6d:82:f7:e5:22:d0:4d:fd:5e:a1:ad:28:d3:
1c:2d:4d:2a:c3:12:54:9e:dd:b2:1e:46:9f:3a:4b:
63:d9:ca:96:aa:a8:b2:1b:e6:87:2f:a6:58:90:58:
00:21:ae:1b:be:2a:03:52:1b:d9:ea:55:f2:df:0e:
86:b6:41:72:60:62:7e:6c:70:bb:75:14:3c:6e:2e:
33:2a:6e:87:33:0a:0b:f5:b1:c2:ed:19:f7:6f:28:
66:27:a5:12:38:94:03:53:86:c9:f2:d4:58:23:38:
8e:e8:49:23:03:ae:e6:39:50:09:73:ed:c1:b0:6c:
f3:73:2f:82:c2:02:e7:e4:a9:eb:e0:d0:4e:4f:26:
c0:05:a4:f3:bd:e6:98:ef:dc:4a:c6:f0:03:0a:c5:
67:9f:05:b9:ee:e6:c7:76:fb:78:30:18:aa:fd:83:
df:66:22:ea:e4:53:ed:49:16:1a:22:7f:82:68:38:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:8F:47:14:4C:42:F1:BF:48:10:E6:32:79:5F:6C:DC:99:FC:57
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.224.0-185.70.226.255
Signature Algorithm: sha256WithRSAEncryption
15:96:54:09:e1:1c:63:77:e5:04:9e:3f:82:56:01:f9:6c:50:
75:fc:80:ea:b7:56:69:fa:0a:9a:bd:09:03:5a:2f:92:e1:cd:
9a:83:c4:3a:08:47:76:05:d2:10:c0:44:7c:21:06:a3:43:de:
6f:80:52:31:29:81:6c:c7:3c:02:54:72:8d:79:92:9c:3c:b0:
12:54:40:ca:46:28:cf:4b:72:28:a6:25:b4:ee:90:f6:5b:45:
b7:05:88:ea:c2:69:a1:ce:4e:74:63:0c:63:2d:bb:5e:89:c0:
d2:07:4b:cd:d7:a9:46:a2:34:fa:a8:6b:b4:d5:35:96:1d:7a:
03:9b:04:fb:3e:46:ec:fa:c4:d1:02:7c:3c:88:44:08:f2:e0:
c9:df:02:60:48:4a:8a:2c:07:6e:a7:88:1d:f9:b8:9f:75:06:
c2:4a:6c:be:ad:01:da:9a:4e:3a:fa:b2:b3:36:b0:e2:2d:d3:
06:1f:95:e3:5f:48:fa:db:81:e8:81:39:13:94:38:56:ce:88:
d9:e8:4e:1b:27:7b:0f:ed:9c:8e:e9:ce:23:02:12:6f:e5:5b:
dd:54:85:a6:ba:6d:f4:bd:df:61:0e:fb:88:dd:b3:16:14:b8:
ec:2f:70:38:ff:c7:95:7e:1b:28:da:7d:66:bd:ad:41:a4:2a:
83:31:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net