Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/33iYPYtt5AemQ1cjM36Rt1zTHCg.roa
File: 33iYPYtt5AemQ1cjM36Rt1zTHCg.roa (raw, json)
Hash identifier: YfFQeexiuOu0UumfbyFJkKYHRiPsF5sJX/U6ioFKUD4=
Subject key identifier: DF:78:98:3D:8B:6D:E4:07:A6:43:57:23:33:7E:91:B7:5C:D3:1C:28
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424455014D7C1CF7D55F8E74860B8BE28
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/33iYPYtt5AemQ1cjM36Rt1zTHCg.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152700
IP address blocks: 185.199.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:14:d7:c1:cf:7d:55:f8:e7:48:60:b8:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df78983d8b6de407a6435723337e91b75cd31c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:28:40:fe:59:d2:60:c4:2b:a7:ab:4e:2d:
82:b8:65:17:dd:39:f7:a9:f3:8e:3d:9d:2e:ef:03:
03:7d:9f:e4:6e:46:4a:b4:0f:ce:2f:61:c6:70:9b:
9b:aa:d2:4e:89:55:64:84:63:6a:28:b4:f5:26:f3:
61:e6:9d:2a:35:bb:a8:72:3f:0f:a2:69:8a:8b:43:
65:22:12:3b:70:cb:9a:8d:b9:b7:be:76:27:93:37:
a7:71:7e:fa:23:87:af:66:35:57:9c:d4:24:b8:c3:
2b:38:4c:1c:3a:a2:01:e9:a2:7f:28:a8:45:27:10:
fb:34:54:3b:f9:3e:9a:37:9a:3b:33:5c:fb:d1:a4:
a9:5e:83:9c:cc:3f:0f:5e:59:80:1d:05:68:48:41:
c6:fa:b3:2a:be:11:59:d6:4f:35:ed:15:04:5d:0d:
18:1a:03:4f:64:8d:92:84:28:7b:1c:67:96:ff:3c:
97:86:6c:26:7b:0d:a0:98:bc:27:a4:dc:11:1f:7f:
46:2c:d6:cc:f5:7b:63:0d:a0:37:88:9a:04:cc:78:
21:13:ed:84:b3:d6:b3:79:98:9e:d6:af:3c:82:a4:
1f:8a:83:82:1a:63:2b:d4:42:8e:0c:96:d1:96:11:
31:32:cd:e1:13:d9:a8:f2:55:3b:72:d7:ad:39:59:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:98:3D:8B:6D:E4:07:A6:43:57:23:33:7E:91:B7:5C:D3:1C:28
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/33iYPYtt5AemQ1cjM36Rt1zTHCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:08:f7:ed:08:a3:97:b3:37:3a:36:0b:b4:7d:a6:26:9a:d1:
f2:45:80:c2:88:e5:13:58:dd:84:e8:0b:4a:f5:9d:04:2f:4b:
75:df:14:a1:2e:c3:f9:1c:23:22:8a:18:01:67:c8:f5:f5:a0:
52:1c:7c:91:18:bc:de:66:a8:a9:35:00:c5:b7:fd:0d:18:2a:
e5:cc:5f:77:f6:0d:92:ef:a5:07:c7:34:d9:24:23:cf:dc:9b:
fa:7b:c1:90:66:18:79:61:e8:92:3c:15:cf:3e:23:59:b2:bd:
bd:2a:83:bb:be:f7:01:4a:45:87:81:f4:09:13:1f:99:5f:0c:
c8:4d:1c:d6:d5:81:c3:58:18:db:31:31:82:0b:9c:4c:e3:ca:
55:92:f6:d5:29:c4:db:32:ee:18:8f:3f:94:46:80:ca:4e:b7:
3f:41:a6:ed:dd:f1:ca:04:25:87:08:5f:01:8f:b5:25:33:0a:
8b:4c:b6:00:a0:02:38:29:f7:f6:16:07:e3:a0:e7:86:09:b0:
53:2d:45:40:2c:28:83:94:dc:6f:86:26:f4:df:34:ea:44:5f:
b8:88:b8:76:9f:aa:07:d0:6b:85:e9:61:76:ea:17:25:c9:12:
cf:64:3f:6d:83:b3:7d:46:51:b9:47:e5:9b:16:e1:9a:f6:bf:
f9:be:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 18:55:47 2025 by rpki-client on console.sobornost.net