Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/SRPDrmXCQ51iErVQZHhX2GfwPMk.roa
File: SRPDrmXCQ51iErVQZHhX2GfwPMk.roa (raw, json)
Hash identifier: 3knkWu0cJ0szFLCuFfmqMXPaVyDOYBD1svEtFXI/1oU=
Subject key identifier: 49:13:C3:AE:65:C2:43:9D:62:12:B5:50:64:78:57:D8:67:F0:3C:C9
Certificate issuer: /CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Certificate serial: 019425FD65B0F21AFCF3E00729BD5DB8B1ED
Authority key identifier: 35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/SRPDrmXCQ51iErVQZHhX2GfwPMk.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201500
IP address blocks: 185.72.212.0/22 maxlen: 22
185.72.212.0/23 maxlen: 23
185.72.212.0/24 maxlen: 24
185.72.213.0/24 maxlen: 24
185.72.214.0/23 maxlen: 23
185.72.214.0/24 maxlen: 24
185.72.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:65:b0:f2:1a:fc:f3:e0:07:29:bd:5d:b8:b1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3595c7bc7e5fcd769ed6e53111f3c5e4891f9da1
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4913c3ae65c2439d6212b550647857d867f03cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:87:a1:35:9b:a4:7c:5e:23:8d:3c:43:26:
e3:09:cf:ae:16:65:64:8a:5e:78:89:8b:9e:d9:ea:
57:cd:2d:8a:d6:3c:1e:d1:8c:3b:ec:06:72:5a:f4:
34:ad:8d:1d:18:6e:8a:38:46:6b:90:e5:ea:53:34:
cb:e3:b6:db:6c:7e:69:a1:82:17:27:a9:b1:e8:1a:
31:7b:22:8c:48:0b:9f:34:ff:ff:df:53:26:79:fa:
2d:f7:cb:e2:2c:6d:15:12:b7:28:77:b9:d8:16:7c:
1d:4f:4c:d9:c6:c3:14:34:0e:1d:48:8a:8d:17:19:
ed:cb:e8:36:b3:f0:3e:ef:e0:c9:26:8f:21:cd:d5:
bb:5c:82:e6:7a:1c:3d:3d:13:f9:06:53:b5:57:f6:
68:2f:86:e3:26:08:99:7f:3a:84:9b:ac:cd:df:be:
0d:9c:fc:cd:de:4c:2a:3d:18:33:15:fd:68:37:b7:
e6:67:79:a2:f8:41:fd:bd:52:f7:b4:da:ab:11:8e:
88:7f:bd:ba:14:69:1b:76:85:a7:24:82:0b:ec:0c:
ba:19:b2:b9:2b:e4:62:66:53:3d:e6:95:8e:bc:3e:
4e:ce:b4:97:84:14:9f:e6:56:fb:d3:f9:89:3f:0a:
18:db:79:36:fd:79:68:03:df:0a:53:3d:36:18:5d:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:13:C3:AE:65:C2:43:9D:62:12:B5:50:64:78:57:D8:67:F0:3C:C9
X509v3 Authority Key Identifier:
keyid:35:95:C7:BC:7E:5F:CD:76:9E:D6:E5:31:11:F3:C5:E4:89:1F:9D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZXHvH5fzXae1uUxEfPF5IkfnaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/SRPDrmXCQ51iErVQZHhX2GfwPMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/01dc3c-d926-4cdf-9787-be044a4df3a0/1/NZXHvH5fzXae1uUxEfPF5IkfnaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.212.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c1:25:5d:66:69:11:c8:2d:4c:be:4b:9c:b9:d4:14:5c:eb:
2d:8f:4d:f2:c0:3c:41:1c:7c:3a:aa:2f:18:d0:97:26:32:01:
4b:62:42:8f:ec:54:d1:0b:ce:f7:cd:5a:c7:2e:89:78:a4:bc:
19:99:61:52:01:17:4f:17:9a:a3:83:06:73:83:f4:45:32:42:
e6:d9:1b:d2:86:0a:d9:ba:0e:94:5b:5c:4e:ee:f2:b4:b1:c7:
95:ac:e1:33:10:bf:3f:3b:f1:3b:c0:f8:b3:16:31:c4:80:99:
f9:ae:ab:0f:fe:30:15:ca:8d:38:43:5d:b0:52:8e:0c:20:db:
6e:f3:af:9c:2d:e9:2a:13:65:38:d7:ee:71:14:84:cd:80:48:
34:7b:42:e3:57:57:82:55:58:31:c6:3b:d9:cf:21:7b:be:f2:
00:50:13:2b:3b:13:4f:36:5a:80:3c:a7:a4:28:82:c1:c0:b3:
01:15:1b:4d:13:52:e2:cd:f5:14:d9:1c:d6:07:cb:cc:26:b3:
e6:6a:2c:f4:2f:47:f9:4e:98:88:8a:ac:35:cd:4b:c9:20:f6:
55:9c:88:72:51:20:72:08:4c:32:03:46:51:d9:0e:db:d0:71:
e4:30:6e:57:4e:97:0c:cc:e9:9c:7f:05:1a:dc:92:ed:dc:18:
70:07:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:23 2025 by rpki-client