Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/35_wk3xgcs96k-nSZF7vJ9OFMQE.roa
File: 35_wk3xgcs96k-nSZF7vJ9OFMQE.roa (raw, json)
Hash identifier: fzV24Wa6XQ7Bi2mdQYwJF2pjhDEfLxDL4hS1TghwCCM=
Subject key identifier: DF:9F:F0:93:7C:60:72:CF:7A:93:E9:D2:64:5E:EF:27:D3:85:31:01
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 019424B3ACB97EE5F38E0ABDF2249CD84CA8
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/35_wk3xgcs96k-nSZF7vJ9OFMQE.roa
Signing time: Thu 02 Jan 2025 01:49:02 +0000
ROA not before: Thu 02 Jan 2025 01:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49849
IP address blocks: 212.70.152.0/22 maxlen: 22
212.70.152.0/24 maxlen: 24
212.70.153.0/24 maxlen: 24
212.70.154.0/24 maxlen: 24
212.70.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ac:b9:7e:e5:f3:8e:0a:bd:f2:24:9c:d8:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 2 01:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df9ff0937c6072cf7a93e9d2645eef27d3853101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:1e:24:51:4c:b7:4f:78:ec:21:cc:54:cc:
f5:ca:40:21:d2:b0:a1:ae:f8:b5:f2:3b:e1:7a:83:
ad:2b:ee:e1:d7:29:17:6b:e1:57:e1:94:98:61:75:
95:b7:78:7e:17:88:77:2e:04:94:37:10:3e:65:56:
1a:77:cf:c5:97:6d:e1:cf:5e:51:e4:4c:f3:81:ea:
02:85:53:e4:61:1d:4c:3a:4e:6d:83:7a:d3:39:1b:
00:3c:c8:f2:e3:93:32:0e:d3:ae:f9:78:02:2a:e0:
9e:46:61:80:5c:e2:60:c2:3b:ce:10:c6:4d:6d:a0:
7c:f6:7c:28:43:9c:52:7c:44:79:fe:c7:d2:0e:80:
05:4b:6c:0d:2b:d5:a8:62:1f:73:16:ba:d9:ce:9a:
54:9b:dc:d9:ba:85:46:cd:46:62:40:ae:9e:34:0a:
58:24:a9:b6:88:87:be:f8:d7:28:72:2c:1f:52:46:
ec:e7:c4:0c:76:7b:7c:dd:84:7e:2b:e1:75:f1:7a:
c9:3f:ec:b5:e7:bd:bb:26:be:1b:2d:3b:cf:d5:29:
c5:cb:f4:17:a6:80:29:62:d9:30:f5:7b:f0:39:af:
bf:e0:7b:21:cb:93:00:5e:50:ed:67:75:4a:25:51:
c1:49:e6:84:e5:7b:54:6a:be:2a:14:4e:ee:1c:ea:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:F0:93:7C:60:72:CF:7A:93:E9:D2:64:5E:EF:27:D3:85:31:01
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/35_wk3xgcs96k-nSZF7vJ9OFMQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.152.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:6c:de:d8:be:68:95:80:d2:04:f3:b4:62:d8:dc:ce:46:2e:
bd:2e:49:4a:56:7a:51:3c:54:26:53:b7:40:ce:d9:4c:ac:c1:
81:5c:b0:1a:02:62:30:61:c0:01:9f:f0:cb:61:97:09:fd:64:
d6:ef:42:d9:4a:5b:00:39:9d:62:9c:84:ab:18:e8:14:96:a2:
cd:cf:e0:66:1c:b6:fc:a4:47:c7:19:e9:9c:9e:f9:56:6b:c9:
1d:7c:48:d1:c0:00:2e:c2:16:ee:04:8f:17:72:44:de:05:a4:
7f:12:c4:81:45:57:bc:2f:d6:97:b3:7e:f7:a2:64:8d:53:8d:
9d:4f:a0:de:89:f9:65:3a:e6:af:22:9d:83:30:38:7b:1a:ee:
d8:cd:53:4a:f0:86:d6:55:30:58:ec:d5:cb:24:19:9e:66:32:
b7:7a:2d:8e:af:a8:20:1f:62:34:e9:71:fe:d7:e2:90:84:81:
37:3b:1b:d6:e9:a3:7f:5f:8b:a5:0a:26:04:75:78:33:0d:a3:
e0:ba:26:44:7a:e4:cf:d8:e7:a1:4d:74:e3:e2:8e:ff:17:bf:
52:5c:dc:ee:09:c5:2a:e0:42:16:98:62:77:ce:be:59:56:23:
06:a1:84:88:ee:b8:e4:2e:44:f7:e7:9b:e1:2c:fb:be:2b:be:
e5:fc:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net