Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa
File: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (raw, json)
Hash identifier: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=
Subject key identifier: 59:9B:6C:AE:34:3A:FF:80:00:CD:AD:D6:D3:F6:5F:D8:AA:E2:6E:87
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 0194222013D1F5D184460E13CCA18B4445BB
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201590
IP address blocks: 185.68.32.0/22 maxlen: 22
185.68.32.0/23 maxlen: 23
185.68.34.0/23 maxlen: 23
2a03:2960::/32 maxlen: 32
2a03:2960::/40 maxlen: 40
2a03:2960:100::/40 maxlen: 40
2a03:2960:fffe::/48 maxlen: 48
2a03:2960:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:13:d1:f5:d1:84:46:0e:13:cc:a1:8b:44:45:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=599b6cae343aff8000cdadd6d3f65fd8aae26e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:e9:d0:87:fe:13:4b:20:85:94:50:6b:bc:
3f:ce:3d:08:5f:42:cb:87:e2:4c:75:a6:cf:f1:e7:
df:a4:71:b9:80:70:9c:b3:a4:ff:ce:27:62:76:cf:
f3:ce:b2:8b:a8:6b:59:54:ec:50:0a:3c:8d:79:c6:
a6:15:ee:6a:29:24:67:4e:3b:24:99:7d:ee:71:43:
31:92:48:71:3c:20:c4:5b:b4:67:b7:f0:bc:a5:8f:
9f:ef:94:ff:b2:ec:d9:a6:7b:1b:f0:85:3b:4e:3b:
1a:e4:22:db:5a:ab:02:4b:5b:b4:33:a4:16:3d:b0:
13:29:e6:1e:57:23:47:f7:c5:e4:7b:1e:7c:a5:12:
86:d4:b3:64:43:b8:0e:9a:27:ae:cc:c4:00:44:7b:
4a:7d:c6:72:2f:f7:ac:fb:de:98:a2:30:af:9a:50:
08:ca:3e:83:74:91:53:8d:de:af:de:34:e7:d9:86:
92:c4:6c:ac:f4:af:34:1b:23:5b:2b:98:fd:34:f1:
f2:be:c3:fb:ec:e2:64:e6:06:28:f2:2e:24:cd:07:
af:97:bb:bb:b2:92:b1:c5:3e:cc:7a:b7:6b:bf:cd:
8d:f5:21:c9:1f:0e:aa:ae:c1:2e:c1:e6:07:37:b9:
bb:97:0e:a3:8f:f1:58:ec:a0:02:5d:04:50:b9:29:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9B:6C:AE:34:3A:FF:80:00:CD:AD:D6:D3:F6:5F:D8:AA:E2:6E:87
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.32.0/22
IPv6:
2a03:2960::/32
Signature Algorithm: sha256WithRSAEncryption
83:74:8f:b4:3f:ab:79:9a:b7:5e:90:f4:d6:1c:09:54:07:9f:
49:b0:3c:ac:2e:b5:28:9d:40:50:7d:cc:b9:60:49:40:1b:39:
77:98:fd:70:96:78:a8:aa:94:e2:18:ff:89:67:28:a5:5e:1d:
c4:10:3d:bd:65:6d:61:c0:01:a7:74:60:e6:81:1e:da:4e:a0:
59:14:24:68:eb:28:66:b2:d0:35:19:c1:5d:e5:7f:4e:55:12:
b1:60:7d:78:4d:eb:99:62:6c:e6:9b:9a:21:56:2c:25:52:18:
cb:4e:f3:0f:bf:4a:b6:c1:f7:f2:6e:fa:ff:36:86:57:9d:0e:
ca:ff:6d:5d:58:8e:da:b3:2b:b0:d2:e7:b7:7b:14:11:e9:db:
a1:96:d1:f9:18:3e:7b:b5:3a:0a:f7:b0:3a:90:ed:ff:10:e7:
5d:fd:e8:f6:8b:ae:8f:4a:8d:33:aa:5f:ea:3f:cc:37:d2:aa:
40:01:3e:cc:52:5d:ef:c4:df:7e:b0:bf:bd:1e:26:c6:4e:27:
71:99:20:9c:62:13:00:ac:a0:bc:97:e6:79:95:2d:3b:cd:65:
49:e6:bd:df:b3:3e:4d:26:c2:00:82:12:b1:65:39:ac:cb:a0:
e2:04:0a:7f:61:17:0e:34:32:d2:e7:35:67:54:54:95:cc:d6:
66:46:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:55 2025 by rpki-client on console.sobornost.net