Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/sDPpx-mL_-TYo49AUalN83Hb7rw.roa
File: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (raw, json)
Hash identifier: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=
Subject key identifier: B0:33:E9:C7:E9:8B:FF:E4:D8:A3:8F:40:51:A9:4D:F3:71:DB:EE:BC
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019424B39161426428FB38BBD80FFE4AC57D
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/sDPpx-mL_-TYo49AUalN83Hb7rw.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201643
IP address blocks: 185.68.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:91:61:42:64:28:fb:38:bb:d8:0f:fe:4a:c5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b033e9c7e98bffe4d8a38f4051a94df371dbeebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:4b:07:56:66:11:1a:da:38:d9:b2:a5:a3:
61:93:74:27:83:97:5c:23:bf:75:d8:f6:26:cb:0d:
ab:75:07:86:22:df:5e:73:68:bf:cf:6a:c9:67:b4:
4d:a2:31:b7:1b:06:21:d7:c1:6d:f2:3d:6d:95:cd:
f0:3f:f3:52:a9:74:39:ee:bc:c1:eb:2c:0c:55:30:
91:60:95:e9:c0:c2:9a:93:57:ca:6d:61:d9:8c:25:
9b:e8:39:e3:37:86:82:03:a1:23:ac:51:e4:ed:b2:
88:99:0a:04:11:d8:d6:64:78:9e:91:37:76:f9:a2:
d5:05:43:fd:b0:6d:c3:fd:66:2f:98:57:99:aa:a0:
3e:94:1a:84:9e:29:e5:1a:34:c8:40:61:9d:74:73:
f6:41:4c:b2:a4:35:3e:f5:cf:a1:c8:56:d8:92:54:
0e:d4:4b:a6:da:23:54:22:7f:cf:0e:57:7e:09:80:
ad:ab:3f:49:b1:3b:b5:46:11:93:06:87:8e:7b:64:
82:d2:97:7b:46:83:4a:f0:f8:17:ca:31:f6:6b:ee:
2d:c9:f0:50:92:3b:fd:be:db:d9:21:e0:f9:17:ac:
b9:70:81:2f:2f:9c:a9:06:f0:d2:26:81:76:80:e0:
e5:90:4a:45:27:3b:ab:18:17:25:b2:6c:13:e7:67:
f8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:33:E9:C7:E9:8B:FF:E4:D8:A3:8F:40:51:A9:4D:F3:71:DB:EE:BC
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/sDPpx-mL_-TYo49AUalN83Hb7rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.100.0/22
Signature Algorithm: sha256WithRSAEncryption
68:2c:8c:e3:82:15:c0:9b:5a:d8:7c:87:ac:39:e0:3a:9c:33:
78:26:91:f0:a9:30:cb:62:4e:e7:61:b0:21:00:55:33:6e:ec:
dc:f9:ea:f8:a1:48:e5:bd:f1:70:54:01:fb:d6:b7:ac:31:c7:
83:5f:14:bb:ce:65:20:f4:e1:4b:1e:e7:71:c8:77:b0:94:6d:
33:5a:b6:1c:5f:b8:d9:d6:d2:8c:db:73:c1:61:d6:4a:2a:78:
39:b2:96:5e:6c:21:c3:23:18:69:f4:22:c0:9f:30:2a:a1:a7:
5d:bd:7f:82:77:ec:e1:ee:39:85:1c:55:d2:3f:1d:05:4e:33:
9c:f8:1e:d2:8c:b3:fc:81:ee:18:1e:20:77:5f:ce:5b:43:dc:
b2:4c:eb:82:ff:00:2e:e5:5f:bd:80:32:1d:08:35:ac:be:d1:
28:79:92:95:92:fa:22:15:5b:82:cc:39:8c:51:96:b2:04:f4:
bd:db:b4:27:d9:73:b3:70:6e:cc:3a:54:34:02:19:b7:06:a2:
35:f4:dd:03:bd:a7:b7:64:6c:14:61:f3:e6:20:e3:fd:be:98:
0f:a7:7a:cd:28:cd:1a:2a:d4:08:dd:65:26:51:1e:47:9d:72:
45:49:d4:b0:d6:c9:4f:77:c1:9e:3c:5e:db:cc:e9:e8:fe:0d:
c1:3b:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net