Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/35U7CZ1qXrzTx2eLLdzVzoACzzE.roa
File: 35U7CZ1qXrzTx2eLLdzVzoACzzE.roa (raw, json)
Hash identifier: 1wtSqJU98ipRQJGWJWHj6EUGRVxO+r6yrBxneIuR7yY=
Subject key identifier: DF:95:3B:09:9D:6A:5E:BC:D3:C7:67:8B:2D:DC:D5:CE:80:02:CF:31
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 0194DF4B6053E1749FD4370A68061B7D255D
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/35U7CZ1qXrzTx2eLLdzVzoACzzE.roa
Signing time: Fri 07 Feb 2025 07:24:06 +0000
ROA not before: Fri 07 Feb 2025 07:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204203
IP address blocks: 185.222.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:4b:60:53:e1:74:9f:d4:37:0a:68:06:1b:7d:25:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Feb 7 07:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df953b099d6a5ebcd3c7678b2ddcd5ce8002cf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:58:c8:07:47:f0:40:71:0f:de:a4:c6:04:
81:68:41:d7:1a:96:f4:23:f7:ba:79:3f:cb:ca:f6:
a1:8a:31:0b:d0:1c:65:02:d5:c7:b6:2b:da:bd:13:
73:20:a1:2e:6a:43:31:2a:c6:79:94:03:fd:ac:6c:
54:46:2d:c4:62:4d:00:98:cf:13:fd:c1:c5:43:21:
eb:e0:02:37:47:95:eb:54:df:fe:25:55:b6:02:7f:
9a:e8:36:f0:f4:e0:b5:9f:9d:19:e6:30:88:d0:63:
76:7e:55:41:e3:64:bd:32:38:d9:2a:b7:09:dd:38:
52:1e:f9:7f:02:88:ab:bd:7b:90:7e:64:06:4f:3a:
bd:9b:21:41:c2:38:bb:d0:7d:ce:db:79:2f:ee:3a:
1d:bd:42:dc:f8:a3:c3:9a:97:64:56:b1:79:76:fe:
97:b2:10:31:12:24:04:8d:16:28:32:ba:e9:fe:8a:
d5:7a:96:25:a0:21:c5:82:86:d0:e9:00:af:58:be:
29:cd:6a:b5:4d:a6:e8:32:32:e2:cd:28:48:93:99:
e1:7a:4e:b0:6d:a5:78:2e:47:a6:d1:0c:b7:3f:38:
cf:71:0b:c2:a7:da:6c:26:16:c4:c1:7c:ad:03:6c:
53:0b:f8:63:bd:06:5a:6a:2f:8b:70:bb:dc:08:80:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:95:3B:09:9D:6A:5E:BC:D3:C7:67:8B:2D:DC:D5:CE:80:02:CF:31
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/35U7CZ1qXrzTx2eLLdzVzoACzzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.210.0/24
Signature Algorithm: sha256WithRSAEncryption
64:22:d6:fd:4e:03:d9:a1:11:77:b7:0c:e1:7a:3d:3d:1c:7c:
90:06:36:7c:7d:6d:f3:5e:6b:c1:8b:93:b5:a5:2c:c1:1e:10:
9f:b4:45:d5:e1:b0:ff:b8:d0:1d:4c:b4:5c:00:59:71:7e:fa:
1d:df:d5:46:4a:a6:f6:cd:45:7c:9f:6e:3b:be:d1:95:06:c9:
e9:5b:b5:b3:8a:b5:9d:4d:f3:c3:c9:7b:b2:d4:35:30:cb:a1:
32:bf:9b:92:a0:68:ec:da:77:3f:97:1b:b4:2a:61:b9:29:bd:
f2:6f:59:a7:7f:72:d5:7c:79:7a:af:ec:c8:d8:ff:51:71:fc:
5c:fd:a7:66:fe:a4:9f:c0:94:fa:f7:1d:57:36:8a:26:18:0b:
4b:8d:42:78:a1:51:13:a5:11:cd:a2:bd:25:21:eb:65:9d:2f:
03:e1:07:62:38:7e:29:a6:e9:24:50:a3:c8:7a:83:30:7e:1c:
31:f0:e2:62:3c:28:69:b1:fb:c5:e5:17:1d:a4:98:03:31:2d:
9b:17:45:df:d1:f7:57:5c:c4:e7:e9:78:00:87:1d:b5:09:e1:
f1:bb:68:15:e7:ef:1a:86:51:f6:e8:6a:39:2d:05:31:ee:70:
5f:a6:7b:7a:ad:6b:a5:6d:47:3a:c2:af:96:d2:d2:f8:f2:03:
6b:f2:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:05 2025 by rpki-client on console.sobornost.net