Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa
File: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (raw, json)
Hash identifier: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=
Subject key identifier: 90:D2:78:40:A1:CF:DD:10:66:66:1F:ED:66:70:C4:10:9D:04:E4:51
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 0194228D9A32AD5D4A157AF0553FDDCDBD7F
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa
Signing time: Wed 01 Jan 2025 15:48:12 +0000
ROA not before: Wed 01 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61094
IP address blocks: 185.143.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:9a:32:ad:5d:4a:15:7a:f0:55:3f:dd:cd:bd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jan 1 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d27840a1cfdd1066661fed6670c4109d04e451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:40:9e:43:c5:91:8f:94:08:3e:dc:df:dc:
69:1f:40:e8:8f:33:20:4b:a7:19:4b:65:56:ba:01:
63:a6:a7:9b:15:a0:33:16:bf:59:89:e2:c9:3d:46:
0c:2f:db:a2:22:ea:f2:7c:c9:d4:5d:e3:f7:98:c2:
5c:e0:45:bb:4c:1a:a6:ad:f9:d4:d4:19:cf:28:26:
24:cb:95:40:62:52:ab:a8:0d:eb:bb:c0:9e:23:56:
69:1a:a0:e8:5f:18:25:cb:97:a2:0a:ac:34:5c:93:
14:f9:10:37:72:a7:31:cc:88:de:77:b4:b4:10:88:
60:af:0f:27:99:29:ec:e5:29:2f:d8:78:36:f8:f5:
bc:f9:bd:b2:04:64:ba:69:00:4e:2f:91:2a:93:b0:
04:49:7a:9e:cc:ff:c7:44:ad:08:eb:9b:7d:c3:b7:
55:76:0b:db:8a:bd:67:32:33:71:23:9c:0a:c9:ce:
62:82:1d:7d:af:d7:80:9b:3d:60:37:eb:bc:94:3a:
ea:9d:b8:af:99:ca:5c:09:e9:11:67:3a:98:3a:af:
75:f7:94:aa:56:ef:01:88:d8:97:c6:89:51:ee:39:
94:68:72:c1:d7:6f:2b:82:5e:9e:c9:41:db:57:b8:
10:84:5e:c6:1c:33:c5:eb:3b:16:a7:19:28:7a:d1:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:78:40:A1:CF:DD:10:66:66:1F:ED:66:70:C4:10:9D:04:E4:51
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.192.0/22
Signature Algorithm: sha256WithRSAEncryption
07:13:ee:5c:42:88:f6:3f:5e:a4:94:ee:80:1e:dd:a6:54:10:
ed:cb:94:7b:35:b7:60:5a:83:b2:08:52:42:65:d6:bc:9c:fc:
dd:e0:d1:f5:0e:31:59:64:0b:83:90:bb:6e:d7:21:cb:00:6a:
80:fb:07:81:a3:85:db:b6:58:ff:8f:c9:3b:1a:e2:7c:00:df:
16:43:d3:eb:93:f4:d7:54:65:f4:8c:e1:6c:64:9a:16:a6:2b:
c9:9d:65:92:ea:81:42:f5:97:29:3a:fe:87:a8:25:e5:95:ac:
f1:01:9e:3f:c9:33:01:e2:26:fe:4d:d9:55:98:2d:69:54:12:
d5:fe:4b:65:48:ee:c3:76:e5:ed:a7:39:0c:a5:9f:10:b1:45:
6e:f3:8e:09:bf:bd:52:9a:78:b4:3e:88:a1:88:1a:cd:49:07:
b5:bc:8c:a7:76:1c:12:5f:40:a6:45:fd:4d:fc:85:15:03:90:
be:8e:e7:e7:49:7d:44:30:3b:61:d3:5d:29:f1:7c:62:84:a6:
eb:a7:9c:72:24:6f:43:55:9f:b2:87:d8:86:01:d6:3f:7f:af:
02:c9:5c:1f:28:be:1e:f4:65:36:00:66:25:66:e5:36:61:4b:
bc:37:6a:45:af:9a:ef:64:59:af:c8:8d:cd:c1:af:30:7f:55:
1f:ef:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net