Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa
File: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (raw, json)
Hash identifier: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=
Subject key identifier: 99:12:09:85:B8:98:8B:8F:C5:9F:DA:DB:BC:9C:69:70:4E:41:AB:01
Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial: 0194206845902162943E605ECB3D5E85088A
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa
Signing time: Wed 01 Jan 2025 05:48:11 +0000
ROA not before: Wed 01 Jan 2025 05:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205105
IP address blocks: 185.230.168.0/22 maxlen: 22
185.230.168.0/24 maxlen: 24
185.230.169.0/24 maxlen: 24
185.230.170.0/24 maxlen: 24
185.230.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:45:90:21:62:94:3e:60:5e:cb:3d:5e:85:08:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99120985b8988b8fc59fdadbbc9c69704e41ab01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:30:cc:3e:78:64:e0:d1:f7:87:f3:b1:c1:
9c:88:60:3f:c3:b8:2f:c3:56:5a:a5:9e:df:d8:50:
66:ef:b4:11:33:bd:f5:25:71:ea:2c:92:02:42:3c:
83:54:d8:5e:74:8c:11:6a:a1:a7:f7:9d:d6:83:46:
03:da:3e:f4:20:92:93:57:4e:c8:a2:52:0b:80:e4:
1c:45:3e:93:b1:09:08:d8:60:a5:02:d6:cb:e5:da:
79:7a:c7:89:9b:ac:dc:0e:00:13:18:26:f7:34:d4:
01:6b:68:7f:21:7c:ca:cf:23:b1:b9:df:e2:85:13:
a1:c0:30:7f:0b:68:2e:68:ee:a5:34:b9:66:88:99:
a4:9f:8e:46:9b:65:43:a8:e6:92:4e:e6:4d:1d:27:
ec:c4:51:0b:94:ab:15:12:9f:d7:f8:10:98:f4:6c:
c5:b1:86:8b:33:b8:b7:38:c3:28:b0:35:9a:05:2a:
02:71:9c:a4:0d:7f:d1:f9:9e:d7:7a:4e:ac:37:f8:
e0:75:15:0a:92:23:af:d6:d6:e4:81:e0:6d:ee:6c:
ac:23:f3:12:59:aa:3c:23:2b:a4:28:ea:28:83:e6:
df:52:66:3d:bb:e9:0c:fc:90:f1:1f:17:bd:5d:e1:
8d:21:5d:86:19:d5:b7:48:fe:1c:5b:18:7e:a1:0f:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:09:85:B8:98:8B:8F:C5:9F:DA:DB:BC:9C:69:70:4E:41:AB:01
X509v3 Authority Key Identifier:
keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:0b:aa:fa:06:87:19:79:5c:6e:fd:00:d9:23:d6:eb:29:5d:
c3:bb:3a:16:d9:4b:19:db:af:9a:d3:b0:9a:7d:db:0d:de:fa:
08:9f:25:ed:ac:32:37:e5:bb:78:a0:6d:16:97:c8:5f:6a:9d:
b8:35:e8:71:bd:fc:46:31:54:d5:38:d0:10:f7:77:dc:74:f8:
e2:c4:b1:0b:2e:ab:67:99:4b:f9:29:cf:9d:cb:0b:c8:25:30:
18:0f:35:c4:85:24:d1:cf:da:95:90:67:97:7e:19:e1:26:6d:
2d:50:c8:1c:c0:2a:52:f0:bc:05:f6:97:07:92:7e:b6:d2:71:
76:6a:41:04:a6:fe:41:a1:9c:98:b1:0c:6f:d1:20:64:b4:36:
20:12:1d:bc:fa:09:67:24:e9:49:8c:16:15:42:10:af:e1:88:
4b:a7:da:85:68:48:4b:31:15:7f:48:18:64:b9:3f:bd:ee:27:
3d:c9:ed:d8:e6:a9:19:34:f5:01:dd:ab:0c:3e:be:a4:e3:1e:
ab:8d:d1:08:3a:97:9c:da:28:1d:6e:75:f3:f8:db:72:df:9d:
e0:38:44:05:15:8a:b8:ab:e7:b9:18:3e:f0:ce:b9:9e:39:33:
65:67:e7:00:49:e1:64:af:e6:42:9b:ce:5c:47:6c:56:47:74:
01:8b:8e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:23 2025 by rpki-client on console.sobornost.net