Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/CNZ35rWriq4iUVoFYY9154eLsZA.roa
File: CNZ35rWriq4iUVoFYY9154eLsZA.roa (raw, json)
Hash identifier: DEZyOsONsqVIBkCRS8CZuYGTIR7YjLHBLV8XnFyacTs=
Subject key identifier: 08:D6:77:E6:B5:AB:8A:AE:22:51:5A:05:61:8F:75:E7:87:8B:B1:90
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 08B47A1A
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/CNZ35rWriq4iUVoFYY9154eLsZA.roa
Signing time: Sat 01 Jan 2022 12:06:07 +0000
ROA not before: Sat 01 Jan 2022 12:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204694
IP address blocks: 185.243.74.0/24 maxlen: 24
185.243.73.0/24 maxlen: 24
185.243.72.0/24 maxlen: 24
185.243.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146045466 (0x8b47a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jan 1 12:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d677e6b5ab8aae22515a05618f75e7878bb190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:d9:91:e5:bf:22:d9:5f:39:03:bb:de:cb:
10:f0:07:d2:fe:76:34:dd:a4:72:a1:79:42:7c:61:
a0:5f:ea:b3:a3:25:82:12:11:25:ff:79:e8:9a:ac:
d9:b6:70:2c:f2:d1:df:07:1e:8f:37:71:f8:5b:63:
c2:68:d0:c7:62:e2:f3:a1:94:85:5f:83:36:8d:54:
ca:b9:27:84:39:18:0b:4b:20:d0:70:cc:ad:fe:0c:
8e:bc:3a:df:85:f2:2f:8f:fb:71:02:dd:3c:a9:5f:
dd:fb:6f:09:2a:5c:0c:3f:b6:c7:86:0a:70:ed:fa:
45:b8:20:45:77:84:36:be:9e:c3:58:e5:39:40:e2:
b0:61:f3:6f:7d:05:8c:4c:8a:7d:11:15:a2:fd:6e:
58:10:15:57:3b:aa:d9:dc:3a:dc:a6:59:5b:ba:82:
f7:ec:74:66:25:67:7b:cc:15:2d:61:21:d9:a9:05:
0e:54:9f:7a:23:87:8d:05:45:59:3e:d3:79:fc:61:
5c:48:86:5c:e4:73:e3:b7:3c:8b:82:c0:a5:5d:bf:
ad:05:85:38:16:bc:6f:68:aa:49:a7:c7:9b:35:41:
33:1d:dd:ef:6d:91:90:8e:28:d3:8b:37:6c:d9:72:
f7:7c:e4:5f:b8:a6:f0:0a:3a:b2:82:62:ec:f1:e4:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:77:E6:B5:AB:8A:AE:22:51:5A:05:61:8F:75:E7:87:8B:B1:90
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/CNZ35rWriq4iUVoFYY9154eLsZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.72.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3d:55:02:80:22:ea:cd:b6:15:1c:67:c8:8f:83:f6:de:a6:
89:e4:43:b1:2c:3b:07:a5:f4:b3:93:d0:d1:f3:18:d8:cc:a8:
09:64:8d:b6:57:50:80:c3:d3:09:2e:3a:90:8d:c6:6d:71:43:
b1:ad:13:bd:19:55:7b:ea:cc:36:f8:c0:1e:d1:98:85:c3:7a:
30:59:2a:63:ba:92:f3:59:05:20:79:58:6b:90:7f:bf:96:45:
25:82:33:ce:61:7f:05:e1:af:26:50:d2:3b:9d:84:a5:d2:04:
dc:e9:82:87:5b:bf:fb:05:ea:fc:b5:3b:73:c2:4e:e1:9d:af:
9f:50:3e:a8:4b:49:9b:96:e1:c0:f7:49:ce:ab:5d:a4:73:63:
d6:69:95:c6:f7:11:3f:bd:63:41:1f:16:dc:f1:90:ef:08:e1:
1a:9a:bc:4d:b0:44:d0:9f:8c:90:da:8b:62:92:c3:6b:d2:c5:
69:3d:62:47:f5:e6:71:ce:e5:20:67:7b:72:3f:5f:83:00:c4:
0f:8c:52:59:51:91:92:e8:16:65:9b:bc:2c:84:b1:e5:26:7f:
09:9b:15:f7:db:f4:be:9e:78:3d:10:76:25:8e:fe:bf:60:58:
20:0b:6e:89:b5:c4:45:81:84:8f:bf:cd:5a:d4:a4:1c:61:52:
a4:4f:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:31:17 2025 by rpki-client