Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/3u_UTWM5MnsnNlqUobIqKDYLwKo.roa
File: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (raw, json)
Hash identifier: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=
Subject key identifier: DE:EF:D4:4D:63:39:32:7B:27:36:5A:94:A1:B2:2A:28:36:0B:C0:AA
Certificate issuer: /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial: 0194266BE0D987773ECE795B6A27CA7E0DD6
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/3u_UTWM5MnsnNlqUobIqKDYLwKo.roa
Signing time: Thu 02 Jan 2025 09:49:51 +0000
ROA not before: Thu 02 Jan 2025 09:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34513
IP address blocks: 85.198.0.0/24 maxlen: 24
85.198.1.0/24 maxlen: 24
85.198.2.0/24 maxlen: 24
85.198.3.0/24 maxlen: 24
85.198.4.0/24 maxlen: 24
85.198.5.0/24 maxlen: 24
85.198.6.0/24 maxlen: 24
85.198.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e0:d9:87:77:3e:ce:79:5b:6a:27:ca:7e:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Validity
Not Before: Jan 2 09:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=deefd44d6339327b27365a94a1b22a28360bc0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:f5:79:99:67:0a:d8:1c:a7:b9:e2:b3:32:
ab:2a:0e:94:10:88:e7:da:51:d0:64:6b:75:f3:04:
43:82:72:36:6a:d7:09:c8:48:2b:0f:6a:fa:a7:02:
ca:43:c6:c1:c4:dd:da:7b:8e:86:79:d2:44:cf:6b:
ae:68:47:27:b8:d5:d2:d2:72:c9:01:1e:33:86:b6:
72:df:f1:21:67:87:b8:37:24:3d:a0:3e:ea:86:2b:
e3:88:66:c8:84:28:f5:90:07:c8:a2:8f:8f:16:5c:
69:e5:5c:54:80:36:15:58:52:0b:89:8c:e8:93:c5:
42:7b:66:ea:fc:68:c6:28:34:55:01:bc:1c:ca:2a:
b2:49:e8:b0:c0:c2:a9:a5:63:e3:0f:66:da:78:2c:
d5:91:2e:35:6c:5b:21:63:95:2e:5e:9d:fe:6c:c2:
5f:11:1d:64:7e:ca:15:2f:86:af:05:23:96:78:84:
cb:39:98:80:6a:df:46:62:b7:6f:e2:2b:a7:65:86:
39:e8:df:31:52:01:d6:a4:2e:c2:9a:d3:71:68:a9:
49:59:18:c6:d2:d1:a4:c0:59:c1:67:e8:e1:96:b5:
ff:4c:3e:7b:02:88:4d:bd:94:bd:a2:12:ba:91:f5:
86:c8:bc:46:0e:dd:26:98:d3:2b:b8:a7:68:25:87:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EF:D4:4D:63:39:32:7B:27:36:5A:94:A1:B2:2A:28:36:0B:C0:AA
X509v3 Authority Key Identifier:
keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/3u_UTWM5MnsnNlqUobIqKDYLwKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.0.0/21
Signature Algorithm: sha256WithRSAEncryption
15:be:a2:b5:15:f9:f3:04:fa:4f:01:55:df:8b:c7:ea:ce:06:
ab:0d:e8:67:3d:93:e6:52:08:22:7d:47:1e:8b:e1:26:d3:46:
d8:ab:c5:16:17:f7:1d:b5:e9:0f:80:d3:6a:35:ad:f5:fc:44:
7e:22:f1:57:ac:fa:6d:62:0d:ba:0b:5b:9c:be:2f:d3:e6:4c:
03:ff:7c:cc:67:56:dc:11:bb:66:fe:4d:83:3e:16:c6:37:3b:
08:60:80:db:b9:d7:cb:60:ef:95:be:df:54:42:f5:ec:64:eb:
54:f9:f2:15:63:49:b9:23:36:72:34:b3:04:83:99:74:66:33:
94:6b:11:73:29:2e:97:d1:4d:2e:72:6a:b7:fe:57:ae:60:b6:
6f:51:b8:70:2b:03:e9:e3:d5:b4:0e:9d:87:86:39:6e:df:3b:
11:45:68:8b:cc:4d:a0:5c:33:61:e5:56:d3:85:13:c6:41:a4:
2e:25:6e:7c:25:40:6f:39:1d:e8:ba:3b:ac:04:c5:38:3f:e1:
76:11:48:96:4c:dc:1b:93:9a:20:fb:86:8e:58:03:33:0a:99:
95:2c:19:25:d5:5d:66:c8:08:f8:95:03:9b:1f:a9:04:84:03:
50:29:5a:bb:69:38:69:15:96:22:6a:1f:d7:7d:4b:35:2d:85:
6b:51:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:28 2025 by rpki-client on console.sobornost.net