Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/35tzWKJYouFFxtCACq5Qx-a5DcU.roa
File: 35tzWKJYouFFxtCACq5Qx-a5DcU.roa (raw, json)
Hash identifier: 6v/zK9r1PlU30fONEdKf+kGeQajFJ3G41kgRwtCpVOM=
Subject key identifier: DF:9B:73:58:A2:58:A2:E1:45:C6:D0:80:0A:AE:50:C7:E6:B9:0D:C5
Certificate issuer: /CN=9b98f423292a35a98c220f90cf301dd4102584a1
Certificate serial: 0182C58490CC9A8B26B5BAFE744A6B781226
Authority key identifier: 9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/35tzWKJYouFFxtCACq5Qx-a5DcU.roa
Signing time: Mon 22 Aug 2022 12:26:15 +0000
ROA not before: Mon 22 Aug 2022 12:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212376
IP address blocks: 185.212.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:84:90:cc:9a:8b:26:b5:ba:fe:74:4a:6b:78:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b98f423292a35a98c220f90cf301dd4102584a1
Validity
Not Before: Aug 22 12:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df9b7358a258a2e145c6d0800aae50c7e6b90dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:96:01:ac:39:be:11:76:c2:67:28:a4:ce:
da:2f:53:f6:1e:8d:4f:83:99:72:ea:06:57:60:6e:
6e:24:cc:ab:d7:c5:54:5e:74:d7:74:b1:b2:81:1a:
b5:95:87:00:37:b6:09:56:da:81:4c:61:a6:5c:75:
a3:68:16:8b:51:93:56:e0:4c:56:0f:4d:df:a4:68:
24:65:1e:db:53:35:8a:61:72:f5:5c:61:30:e9:0f:
aa:5a:fc:b1:71:21:c7:d0:64:88:c7:d3:76:32:f1:
6e:de:ca:21:75:b3:78:f1:a1:24:95:19:ac:eb:bf:
c5:83:c9:19:a5:c0:3a:e4:4e:92:cd:f3:f4:81:0d:
be:9d:eb:7c:65:e2:45:c2:ac:6a:8a:9f:40:4e:56:
f0:22:b2:03:4b:db:f2:8f:77:4d:3a:5d:03:bb:af:
c9:34:37:b8:eb:54:46:0a:c6:da:f0:af:ee:e3:6c:
18:eb:f3:b8:62:01:33:e5:22:2f:77:25:40:59:75:
78:d8:ca:37:ff:98:e3:fc:08:c0:a8:23:3e:98:c4:
3e:e5:c6:c0:85:ee:24:c6:59:5c:44:23:93:8a:0d:
6b:01:fe:db:03:e8:20:12:d0:16:de:e9:b3:ec:92:
e4:29:75:24:7d:cb:39:d7:3b:ae:74:3e:61:28:8a:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9B:73:58:A2:58:A2:E1:45:C6:D0:80:0A:AE:50:C7:E6:B9:0D:C5
X509v3 Authority Key Identifier:
keyid:9B:98:F4:23:29:2A:35:A9:8C:22:0F:90:CF:30:1D:D4:10:25:84:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5j0IykqNamMIg-QzzAd1BAlhKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/35tzWKJYouFFxtCACq5Qx-a5DcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/17c994-1454-4b59-b661-c007436c20be/1/m5j0IykqNamMIg-QzzAd1BAlhKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:24:63:8d:3f:18:a5:78:23:76:1d:61:cf:c0:f7:03:a4:28:
b5:59:52:4e:87:c7:95:11:43:1c:6f:eb:7d:9a:85:20:e3:fe:
52:37:87:b3:dd:88:a2:0e:58:98:6f:50:53:83:26:aa:95:74:
57:90:dd:63:21:34:20:55:7a:87:12:b0:2e:aa:17:48:74:23:
f7:b4:04:57:28:7e:3b:bb:b7:f1:e6:a8:c8:67:42:a1:0d:df:
85:f8:9f:80:c2:7d:72:31:ae:fd:d0:92:02:e4:9f:49:54:74:
72:d6:67:1b:5a:99:06:d1:22:e6:02:f4:2c:a3:ab:ac:d2:b4:
76:e4:3c:70:26:5b:4a:86:0b:6b:00:79:2e:c4:06:2c:b7:ba:
56:01:6d:65:8e:62:10:cc:24:ce:3f:69:a6:8e:21:7a:ad:e7:
a3:b1:ab:04:1e:7e:6d:d5:c4:db:33:ce:d9:ac:4b:d6:c8:e7:
4c:93:cb:2d:b2:1a:82:fd:a4:11:90:cb:be:2c:7c:1f:1a:d5:
8d:44:00:48:9a:9c:f8:e3:df:d6:6f:c0:d7:4b:f9:33:98:9f:
a7:d9:96:27:71:7a:fd:5b:ff:6f:59:b6:ab:7d:57:32:c2:b7:
aa:85:97:27:a5:c0:2a:66:42:16:6c:b0:6c:4e:e7:50:6c:a4:
19:6e:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:07:07 2025 by rpki-client