Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa
File: y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa (raw, json)
Hash identifier: atFZ+K+NvLsqdqFRmhH9PBtrTTMkkRg/sp5S4neTnNU=
Subject key identifier: CB:E3:25:6A:B9:8A:9A:52:A3:47:44:E9:C2:F7:FB:67:D8:35:E5:35
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 0195FB96F919D7ED19763A3F8C45AD245F19
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa
Signing time: Thu 03 Apr 2025 12:18:50 +0000
ROA not before: Thu 03 Apr 2025 12:18:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205270
IP address blocks: 185.222.148.0/22 maxlen: 22
185.222.148.0/24 maxlen: 24
185.222.149.0/24 maxlen: 24
185.222.150.0/24 maxlen: 24
185.222.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:96:f9:19:d7:ed:19:76:3a:3f:8c:45:ad:24:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Apr 3 12:18:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbe3256ab98a9a52a34744e9c2f7fb67d835e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:92:ca:02:61:d9:ae:bd:6f:bf:93:e7:0c:
38:b6:b9:b6:f5:96:19:a4:10:ca:e5:ce:75:9f:1a:
97:f0:ba:fe:23:96:24:6a:2f:35:59:10:9a:ab:da:
4a:90:d7:21:54:0d:0a:0c:b1:b8:b2:f5:70:0a:d8:
00:19:f1:39:ef:e4:88:7d:8c:b9:12:b7:7a:3b:2c:
08:02:2f:f6:22:a8:b8:ee:fe:39:b3:61:44:91:c1:
a4:bf:b2:31:ab:35:53:dc:61:db:27:f9:81:02:6b:
bb:02:9d:53:1f:41:bc:25:59:12:c3:23:1e:06:ad:
01:74:b8:38:63:26:15:a4:28:41:57:45:98:9c:3a:
6d:8b:91:14:f7:da:7d:83:dd:e0:58:e1:20:eb:20:
08:b0:46:b2:c6:46:96:98:69:45:4a:21:68:18:fa:
d3:b6:72:32:9f:e1:07:3f:c8:1e:2f:78:bc:ba:b4:
bc:08:f3:4d:26:46:43:b1:ec:b5:1d:8d:9f:03:04:
72:dd:f6:dc:fe:4f:58:07:b8:36:54:82:e7:cf:99:
4b:94:57:27:c1:8a:8d:a5:a4:d0:fe:2d:c5:b4:f7:
39:91:ae:94:22:4e:78:4e:1d:d4:83:cd:19:3a:f6:
ad:ff:8f:ce:5d:80:08:d8:0e:dd:35:eb:6e:d6:bf:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:25:6A:B9:8A:9A:52:A3:47:44:E9:C2:F7:FB:67:D8:35:E5:35
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/y-MlarmKmlKjR0Tpwvf7Z9g15TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
63:6b:ea:09:b6:15:9f:98:df:b1:27:cc:7c:bc:72:3f:a8:67:
fc:b6:90:79:2c:e0:f2:c7:49:c1:ca:57:21:a3:79:13:51:cd:
d1:d6:f1:cc:56:a5:42:16:96:dc:ad:64:b2:15:dc:c3:2a:0e:
2c:2f:2d:0b:53:2d:9d:29:a6:eb:88:ed:54:52:5e:d2:ef:f7:
28:7d:7e:9a:78:f4:d4:71:04:70:fd:81:99:b6:05:e6:9a:30:
af:a7:d5:b9:c5:f6:70:a7:1a:d7:08:9e:d9:da:2a:84:4f:60:
a2:6f:73:46:f9:41:47:74:b1:28:c5:f5:ad:4e:b0:33:7c:99:
59:3e:d2:94:13:3f:cb:25:0c:ac:e7:87:cc:e1:2e:97:b0:71:
1b:41:74:db:78:84:b8:06:25:42:68:53:ca:23:c0:1a:31:5a:
85:a7:73:52:a4:85:41:39:d1:5a:f0:51:4f:ea:fe:40:98:e3:
9f:bc:6b:ea:92:9f:2e:7a:14:a9:5e:54:b8:2d:31:7f:a8:23:
e5:47:b0:55:22:32:1e:6e:ef:f8:89:2b:8d:78:8a:5a:cb:04:
6e:9d:22:70:57:3f:d6:24:5b:3e:ac:ec:ef:16:cc:3d:61:b5:
02:d2:a7:3e:9b:57:f8:34:2b:92:ca:fb:d4:95:b7:09:38:a3:
0c:0b:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:04 2025 by rpki-client on console.sobornost.net