Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/FN6tgfdkn55EVaMwIY-oVWmBEqo.roa
File: FN6tgfdkn55EVaMwIY-oVWmBEqo.roa (raw, json)
Hash identifier: QE+1FYkb1gXSBqMgvRVDIwRGzMbbH9pR9vaDLc/rPJ0=
Subject key identifier: 14:DE:AD:81:F7:64:9F:9E:44:55:A3:30:21:8F:A8:55:69:81:12:AA
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 019428255DC4A0EC90EEDE30B2B8B789E1A1
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/FN6tgfdkn55EVaMwIY-oVWmBEqo.roa
Signing time: Thu 02 Jan 2025 17:52:04 +0000
ROA not before: Thu 02 Jan 2025 17:52:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395403
IP address blocks: 185.103.35.0/24 maxlen: 24
2a00:edc0:1007::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:5d:c4:a0:ec:90:ee:de:30:b2:b8:b7:89:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: Jan 2 17:52:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14dead81f7649f9e4455a330218fa855698112aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:4d:5c:b9:f8:8d:59:c0:de:fe:a8:48:91:
a1:d5:ae:57:b7:18:3b:37:18:57:83:a2:23:d8:1f:
03:56:89:5c:4e:55:3b:cf:f7:96:11:a7:a5:b2:7b:
18:46:46:ff:94:a9:f9:20:2e:f6:e2:0a:fe:7e:0d:
f0:91:bb:ef:37:52:2d:f5:6a:2f:b3:09:08:ae:35:
b8:cc:c5:97:11:16:41:af:dc:23:5b:02:b9:ea:32:
c5:9b:67:82:41:d0:8f:0f:9d:62:56:4a:59:28:84:
7c:10:91:7b:64:1d:f5:b3:c1:8a:46:e2:59:48:93:
c3:31:f5:04:a0:2e:0b:0c:a9:be:4f:a7:80:5c:e7:
b2:79:f2:a8:e8:c2:0a:58:45:4d:12:c1:6e:68:1a:
b5:73:54:28:f1:18:76:c9:c8:08:8e:63:76:79:74:
3e:4d:43:a8:38:9b:e4:65:58:57:a7:82:d7:40:d2:
e7:35:3e:cb:88:2c:06:1d:a5:26:cb:4b:de:ae:e6:
7a:c0:76:48:c2:8a:a5:88:d7:04:96:a1:e7:38:3e:
88:aa:47:2f:dc:66:91:f4:fb:37:86:de:83:3d:50:
46:19:ba:31:cf:6a:03:88:36:ee:a8:49:47:81:d2:
aa:d3:88:a5:92:16:3d:04:19:c8:5f:6d:07:fb:49:
9c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:AD:81:F7:64:9F:9E:44:55:A3:30:21:8F:A8:55:69:81:12:AA
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/FN6tgfdkn55EVaMwIY-oVWmBEqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.35.0/24
IPv6:
2a00:edc0:1007::/48
2a00:edc0:7ffe::/47
Signature Algorithm: sha256WithRSAEncryption
53:13:41:a1:f5:8d:50:f6:8d:b7:23:e6:da:1b:51:b5:c6:13:
6c:bf:2d:cc:1b:2c:f6:5b:20:17:6d:b8:c7:38:21:92:bc:42:
d4:ae:c3:1a:a5:31:1b:cc:5f:22:97:fc:6f:e2:ed:d5:cd:4c:
2f:1b:2d:2a:47:6b:bd:82:84:f1:7d:4e:dc:b4:11:08:c9:21:
9f:5a:92:12:1d:8e:ac:90:00:07:73:b8:8a:58:60:de:fe:e6:
3d:45:98:ba:f1:2b:2b:af:8c:93:1f:fc:d1:47:89:cc:0d:54:
ba:c8:76:b7:8f:26:22:b2:18:e3:ce:13:eb:02:5e:10:56:3c:
69:e4:db:ce:d1:6e:3f:50:b5:e9:8c:f0:6e:e1:11:f8:d3:5e:
8f:f1:55:3e:0a:d6:b0:62:8c:3b:2e:17:a7:65:93:7d:67:c2:
ea:22:6b:a7:50:d9:4b:fc:7e:9d:46:b4:fb:c7:76:9c:4e:e3:
c7:fa:40:d6:7c:bf:dd:27:1f:bd:1b:05:3b:52:7d:bd:ce:a5:
ae:51:de:7b:1e:fb:1d:75:a4:02:51:d0:dd:2c:f2:00:54:d2:
eb:c7:a7:6f:d5:18:2a:09:57:9d:2f:d5:14:6c:e4:30:7c:3a:
ce:46:22:42:9c:95:b3:ca:89:fa:82:22:6e:50:a5:c5:9b:6c:
9a:ff:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:42 2025 by rpki-client