Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa
File: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (raw, json)
Hash identifier: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=
Subject key identifier: 0D:E8:17:4D:19:75:86:62:8A:07:43:21:D5:B4:A4:DA:36:86:49:26
Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Certificate serial: 01952319B72DCD42932E19A6A99AB4F4B1A6
Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa
Signing time: Thu 20 Feb 2025 11:24:02 +0000
ROA not before: Thu 20 Feb 2025 11:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42666
IP address blocks: 185.35.92.0/22 maxlen: 22
185.35.92.0/23 maxlen: 23
185.35.94.0/23 maxlen: 23
185.35.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:19:b7:2d:cd:42:93:2e:19:a6:a9:9a:b4:f4:b1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10
Validity
Not Before: Feb 20 11:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0de8174d197586628a074321d5b4a4da36864926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:18:d9:21:a9:fc:91:b9:e0:9c:3c:ee:8f:
36:1d:ce:d1:3b:61:04:7a:f0:ef:3c:3e:8f:be:4e:
cf:c3:33:05:8b:87:95:f6:e3:ec:45:94:50:68:70:
51:a1:6f:72:ff:43:68:91:01:30:40:9b:e8:1e:b8:
e9:e0:31:4c:e0:98:fe:77:d5:7f:dd:65:d9:a4:d0:
38:ca:73:e5:d6:67:87:a5:6c:66:1e:43:01:9a:2e:
6b:db:64:4f:75:d2:73:07:f9:4f:7d:da:53:4e:8b:
54:b8:fb:3c:0e:d0:0a:ad:05:2a:e1:47:29:c5:d9:
06:7e:0f:16:4d:45:32:f9:98:0e:db:8e:81:65:59:
bc:f5:a4:d4:44:7a:44:ec:fc:60:64:04:d9:36:35:
c9:0d:9f:28:a2:0e:c4:55:f2:f3:e9:02:89:cb:bb:
81:fa:ee:59:0d:1f:43:5e:e9:e9:c3:80:d6:5f:98:
2e:82:70:60:61:af:70:86:2d:b5:37:d6:b1:0b:b6:
71:f1:b5:dd:8b:18:a4:78:e6:62:ce:83:1b:c3:e1:
e5:c1:e0:84:65:ba:df:51:1b:1a:0a:4f:eb:e0:83:
33:e7:f0:db:4b:b1:ab:f0:79:fd:2d:00:83:cf:2f:
39:15:eb:8f:8c:57:01:9d:77:ce:8c:d3:35:77:93:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:17:4D:19:75:86:62:8A:07:43:21:D5:B4:A4:DA:36:86:49:26
X509v3 Authority Key Identifier:
keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.92.0/22
Signature Algorithm: sha256WithRSAEncryption
67:fb:38:41:a7:ea:c6:70:73:26:29:d5:37:df:52:bd:1a:53:
c8:f5:73:b6:71:61:49:23:76:12:c0:d6:13:cb:99:c3:06:3a:
bf:83:72:42:3f:53:40:88:7d:46:f4:55:7c:c9:02:20:ba:83:
45:34:3d:a8:b5:43:e2:67:7e:46:ec:c0:76:32:cc:90:f7:09:
5d:09:85:80:9f:30:f0:ec:c1:b5:e5:2a:85:36:c7:0a:77:6d:
8f:dd:66:4f:61:bf:94:e4:0e:10:28:f3:93:c2:0a:e7:ca:0c:
8c:3d:4b:92:4c:d0:7b:d5:37:18:34:43:d3:1c:0c:0a:91:c7:
e1:74:12:38:b1:4a:78:1d:b9:37:78:b5:2e:c8:ce:53:c5:59:
2c:47:09:c4:54:27:b9:a7:2e:0b:46:7f:1f:55:5a:28:e6:e5:
0b:af:d2:64:af:46:5b:2b:be:3c:b4:b1:b6:4e:7f:20:52:96:
a0:f8:a6:68:5c:58:b5:3e:4f:5d:7a:a5:53:f2:6b:36:93:6e:
20:68:bb:16:a9:e6:bf:a9:08:cd:77:ff:c7:55:8e:05:39:2e:
f3:71:c3:24:74:e7:6c:82:c8:b4:c2:63:d8:53:c8:df:54:fd:
68:f9:8a:96:ac:ba:a8:66:54:c5:09:59:c5:f2:9d:65:e0:b2:
b0:f6:fb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net