Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa
File: B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa (raw, json)
Hash identifier: 55A03hHw140PM0KCnI5wADrRDcpuUYgxTN0Hby4pUXI=
Subject key identifier: 07:68:2E:CE:A2:74:73:57:35:49:0D:C2:70:86:D9:C4:50:49:2D:74
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 019431F1356115D8FF8027F6EA5ACD512A5C
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa
Signing time: Sat 04 Jan 2025 15:31:18 +0000
ROA not before: Sat 04 Jan 2025 15:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35057
IP address blocks: 185.175.92.0/24 maxlen: 24
185.175.93.0/24 maxlen: 24
194.31.236.0/24 maxlen: 24
194.31.237.0/24 maxlen: 24
194.31.244.0/24 maxlen: 24
194.31.245.0/24 maxlen: 24
2a0e:3307::/32 maxlen: 34
2a0e:3307::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:31:f1:35:61:15:d8:ff:80:27:f6:ea:5a:cd:51:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 4 15:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07682ecea274735735490dc27086d9c450492d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:8c:cb:fa:d5:9f:bb:c3:d7:52:41:8e:1d:
9d:58:21:95:54:34:a1:88:d6:80:ea:ab:6a:1b:ca:
f2:2c:75:54:fe:ef:d4:f6:56:11:3d:65:c7:6e:e2:
b6:d9:45:9f:2c:5c:99:83:b1:c7:f3:ba:ad:42:b7:
22:35:e2:7d:74:70:04:2f:a4:20:78:41:3b:b5:8d:
b4:4d:94:60:a1:a2:8c:90:30:1f:94:2c:52:c2:c0:
c4:10:44:88:87:89:15:f0:f3:97:6f:c2:a7:51:f8:
ea:22:49:d2:77:f2:8a:43:97:42:c9:34:2c:c8:73:
ea:7f:e8:5b:27:52:e7:ff:8e:66:cd:b5:dc:95:28:
df:6b:04:7f:d3:c3:a8:3c:6d:00:1e:e5:02:ac:c1:
77:6a:64:c2:eb:e8:1e:6f:94:c2:c7:7b:23:fb:30:
f8:0d:14:03:13:0c:ef:54:f5:42:36:b0:30:34:bb:
26:1f:2e:45:25:39:6d:e8:20:51:d4:72:0c:d6:a8:
75:dd:08:48:a8:56:5a:05:7f:e2:e4:63:67:d5:01:
1c:39:9a:08:6e:d7:8e:b4:2b:78:48:ec:46:29:92:
68:25:d6:a2:91:ac:0c:29:38:e7:ee:02:69:16:f8:
f8:ef:a8:9a:91:c1:4a:03:60:13:0b:09:95:55:ea:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:68:2E:CE:A2:74:73:57:35:49:0D:C2:70:86:D9:C4:50:49:2D:74
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.92.0/23
194.31.236.0/23
194.31.244.0/23
IPv6:
2a0e:3307::/32
Signature Algorithm: sha256WithRSAEncryption
5c:90:a6:6e:84:95:4f:24:f7:ff:d9:49:8c:9f:d2:33:76:ef:
ae:25:46:f7:29:f0:40:ef:e5:56:b6:17:cb:96:d3:d0:bb:08:
ee:82:47:2f:51:66:d6:34:44:d6:a0:d7:1c:57:14:a2:ab:26:
24:f6:60:1a:3a:6e:10:4f:4a:ad:0d:95:bf:e1:ce:7f:89:4a:
13:a1:99:c1:90:17:b8:33:98:d7:bb:dc:57:1b:60:21:e0:2b:
fb:a5:fb:51:71:d1:87:9b:93:51:3f:0c:8d:ae:04:7d:f9:b1:
c1:35:86:32:1d:1d:a2:13:97:bf:fb:65:53:bf:8f:ec:fb:98:
a9:51:7d:e3:f1:e6:97:a3:cd:77:7c:2f:ff:32:c2:a3:e2:e8:
67:5c:da:67:9e:a4:80:c8:83:29:b8:db:11:61:ed:69:64:e2:
6d:0f:34:c3:af:6e:d7:c7:0f:b6:f4:f6:c3:26:3d:37:ac:3d:
08:27:3d:4a:a4:5c:45:6a:89:bd:9b:dd:dd:1c:7c:0f:e4:a7:
7f:7c:ed:16:f6:20:cb:00:2e:c3:9e:17:31:f3:8b:09:e3:3c:
6f:f3:aa:ef:82:16:30:68:70:15:37:5b:46:4d:13:5c:e5:86:
12:d3:10:44:65:0c:ce:3f:0a:6e:fa:5a:12:a9:c0:39:62:b1:
c3:d4:39:51
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQx8TVhFdj/gCf26lrNUSpcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0
NTlmZWQwHhcNMjUwMTA0MTUzMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzY4MmVjZWEyNzQ3MzU3MzU0OTBkYzI3MDg2ZDljNDUwNDkyZDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX2My/rVn7vD11JBjh2dWCGVVDSh
iNaA6qtqG8ryLHVU/u/U9lYRPWXHbuK22UWfLFyZg7HH87qtQrciNeJ9dHAEL6Qg
eEE7tY20TZRgoaKMkDAflCxSwsDEEESIh4kV8POXb8KnUfjqIknSd/KKQ5dCyTQs
yHPqf+hbJ1Ln/45mzbXclSjfawR/08OoPG0AHuUCrMF3amTC6+geb5TCx3sj+zD4
DRQDEwzvVPVCNrAwNLsmHy5FJTlt6CBR1HIM1qh13QhIqFZaBX/i5GNn1QEcOZoI
bteOtCt4SOxGKZJoJdaikawMKTjn7gJpFvj476iakcFKA2ATCwmVVer8xwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAdoLs6idHNXNUkNwnCG2cRQSS10MB8GA1UdIwQY
MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt
MzBmZjJjODNmMDAxLzEvQjJndXpxSjBjMWMxU1EzQ2NJYlp4RkJKTFhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx
LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBua9cAwQB
wh/sAwQBwh/0MA0EAgACMAcDBQAqDjMHMA0GCSqGSIb3DQEBCwUAA4IBAQBckKZu
hJVPJPf/2UmMn9Izdu+uJUb3KfBA7+VWthfLltPQuwjugkcvUWbWNETWoNccVxSi
qyYk9mAaOm4QT0qtDZW/4c5/iUoToZnBkBe4M5jXu9xXG2Ah4Cv7pftRcdGHm5NR
PwyNrgR9+bHBNYYyHR2iE5e/+2VTv4/s+5ipUX3j8eaXo813fC//MsKj4uhnXNpn
nqSAyIMpuNsRYe1pZOJtDzTDr27Xxw+29PbDJj03rD0IJz1KpFxFaom9m93dHHwP
5Kd/fO0W9iDLAC7Dnhcx84sJ4zxv86rvghYwaHAVN1tGTRNc5YYS0xBEZQzOPwpu
+loSqcA5YrHD1DlR
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net