Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/prGV5vanh8ZP5p3KxsDzpumMYgk.roa
File: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (raw, json)
Hash identifier: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=
Subject key identifier: A6:B1:95:E6:F6:A7:87:C6:4F:E6:9D:CA:C6:C0:F3:A6:E9:8C:62:09
Certificate issuer: /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial: 019427B4FA04E45CD49104ED14D6D40A29B8
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/prGV5vanh8ZP5p3KxsDzpumMYgk.roa
Signing time: Thu 02 Jan 2025 15:49:19 +0000
ROA not before: Thu 02 Jan 2025 15:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201627
IP address blocks: 185.68.168.0/22 maxlen: 22
185.68.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:fa:04:e4:5c:d4:91:04:ed:14:d6:d4:0a:29:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Validity
Not Before: Jan 2 15:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6b195e6f6a787c64fe69dcac6c0f3a6e98c6209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:2a:4c:e9:ce:38:05:fc:5a:97:b6:51:82:
e3:1a:02:6a:ee:6a:a7:63:99:0b:48:ff:7f:cd:47:
d0:e9:84:d2:b8:07:86:5c:1a:09:ed:64:13:c6:47:
a6:4e:4e:e4:19:bd:43:30:e8:bc:80:3e:47:0a:a0:
f0:f5:c8:b3:80:07:24:89:bd:30:a3:6c:67:04:c3:
a9:29:05:0f:6d:57:d8:9e:7c:ef:cc:01:e8:04:9f:
3d:1b:63:df:df:58:44:33:99:66:36:89:13:35:0a:
e1:86:ba:e4:e3:25:fd:3e:e4:03:93:54:b6:42:71:
13:93:d8:ba:4a:67:1a:43:b2:3c:11:69:a8:74:2a:
e4:fd:60:32:4c:5d:3e:7d:be:29:3d:83:76:c1:b8:
f5:6e:a6:02:a6:8d:91:98:f4:af:a9:d4:e4:fb:17:
a6:4e:e3:5c:78:5c:42:24:4a:55:2c:67:a9:7e:2b:
ca:39:dd:b5:65:13:89:05:e2:28:6d:90:fe:4d:b5:
22:65:73:f7:44:86:8c:a6:17:90:03:c7:cb:93:ec:
05:9d:1c:e9:cd:5f:2b:03:d2:03:c6:34:5b:51:59:
bf:36:e2:ae:f4:3e:5a:16:60:88:c1:52:d6:2f:74:
e8:e8:b6:43:8d:d6:a0:0b:fc:88:61:ad:e5:4f:d6:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B1:95:E6:F6:A7:87:C6:4F:E6:9D:CA:C6:C0:F3:A6:E9:8C:62:09
X509v3 Authority Key Identifier:
keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/prGV5vanh8ZP5p3KxsDzpumMYgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.168.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3c:65:72:90:a1:8d:35:97:a8:b7:4f:bb:86:06:2b:80:4d:
f2:7a:8d:1c:b5:54:27:f0:e7:79:31:16:73:26:88:6b:0b:df:
36:22:a0:a6:07:17:d0:3c:5d:9b:b4:d6:aa:a6:ee:d3:2f:0b:
9d:49:5c:6b:87:93:46:44:a7:85:79:1e:d2:45:26:79:1c:d0:
81:12:f8:b7:88:3b:f3:4d:fb:e5:86:3e:8a:11:a0:a7:2c:2f:
fe:52:3e:c9:22:83:46:4c:ee:c4:2c:e3:c0:77:4d:84:f8:b7:
ad:00:7a:b7:a1:69:d2:47:94:4c:dc:20:38:e7:60:cf:76:28:
e1:e9:c3:f9:8e:8d:9e:d7:03:97:81:2d:74:94:1c:fb:27:89:
33:03:f0:2a:da:00:f4:7b:a4:70:9a:51:ac:5c:45:f2:46:64:
c9:91:d0:be:3a:28:05:dd:d5:25:90:3f:c9:64:a2:c0:e5:f3:
9a:a0:b5:38:98:71:ae:20:40:7c:18:2a:0e:7b:71:72:b6:30:
43:c1:88:d8:e2:ad:5d:07:f2:3d:6c:23:7e:b2:7d:9a:97:f4:
7f:d1:f1:03:93:66:13:61:a5:7f:55:ef:ed:d8:4f:b5:e2:7f:
c7:ac:27:d2:bd:8a:45:58:ab:d3:50:7e:5e:1c:97:ab:39:33:
38:ad:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net