Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/KWc-RAvt2weoUx0MAyuZekiSu6M.roa
File: KWc-RAvt2weoUx0MAyuZekiSu6M.roa (raw, json)
Hash identifier: hfmB9slnA1IL3HuDstN6ATg7sfXi2D378t9Xob1Z1hA=
Subject key identifier: 29:67:3E:44:0B:ED:DB:07:A8:53:1D:0C:03:2B:99:7A:48:92:BB:A3
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 0194258F9A6E8BEB7118675FB5A7F25F14CD
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/KWc-RAvt2weoUx0MAyuZekiSu6M.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210175
IP address blocks: 185.160.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:6e:8b:eb:71:18:67:5f:b5:a7:f2:5f:14:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29673e440beddb07a8531d0c032b997a4892bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:ac:8a:cc:75:2a:d2:18:82:90:1a:b2:1f:
a9:80:09:78:fc:03:b5:ee:c2:af:c3:25:4d:c6:15:
58:5f:78:b3:56:75:ab:73:36:80:cd:34:28:f5:54:
39:7e:68:e7:f0:56:ad:c1:f1:d4:95:ab:1e:31:04:
23:2e:97:96:f5:1a:d0:e5:e7:7a:4b:50:3b:65:ef:
2e:eb:c2:28:e1:f0:00:a1:c1:b4:c2:27:1d:10:3b:
71:f8:2d:64:d1:d7:95:19:02:0c:bc:e2:5c:3b:1c:
56:af:af:78:d9:1f:cd:cf:a7:60:22:9a:48:4f:96:
09:03:ae:40:f1:eb:92:96:05:d7:44:aa:b3:0c:68:
e8:06:62:74:de:14:a0:ef:be:3d:68:22:29:01:d0:
92:41:9e:04:07:29:41:5c:a0:d4:5b:4b:86:98:fb:
18:db:98:02:5f:38:1a:d1:b7:b5:bc:69:52:8d:f8:
2c:4d:d9:a9:54:b2:de:b3:e7:0a:b1:5c:8d:d1:6f:
e4:26:b0:6a:0d:2f:f3:cf:b1:7c:0e:10:8f:8a:b1:
0d:8e:5e:b9:39:6a:e3:45:c4:2c:39:ef:a6:3f:fe:
cd:4d:cf:2f:bf:0c:f3:8f:38:ed:af:73:ca:9c:d5:
aa:9d:ec:5a:ba:37:34:e4:ff:bf:a6:ed:93:95:36:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:3E:44:0B:ED:DB:07:A8:53:1D:0C:03:2B:99:7A:48:92:BB:A3
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/KWc-RAvt2weoUx0MAyuZekiSu6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6c:2a:ae:51:46:9f:cd:0d:fe:1e:de:15:5d:3c:10:26:11:
62:75:9a:f1:9e:12:aa:26:6c:6f:23:a0:1c:0b:3c:91:43:58:
5d:3a:63:93:70:9c:62:a1:01:70:1f:07:65:07:e2:fc:87:27:
44:60:39:ef:2a:ba:6d:65:a7:a8:ab:b7:2e:4f:04:37:be:a1:
52:d6:0d:d9:20:99:97:dd:dd:f8:33:11:d0:13:0a:47:ca:0c:
0e:dd:53:5f:24:38:43:26:86:3e:c6:56:f7:54:d8:b7:67:28:
e6:6d:ac:64:a9:2f:70:2c:cf:99:95:7f:3d:50:54:f4:90:d1:
eb:9a:3f:33:45:88:d0:f4:21:1d:c8:3d:97:23:b2:a3:dd:56:
ff:22:a9:59:28:b1:a5:3f:f3:cd:cb:c5:f2:48:a5:83:fc:6d:
19:be:f7:54:a1:6d:1c:de:7f:97:d1:b6:78:48:f0:f6:23:6e:
4b:15:b7:23:d6:e0:76:12:aa:1f:0e:6d:5d:36:8d:d7:20:1e:
43:93:04:f3:fc:5e:6c:71:b5:43:90:20:fd:87:64:36:a2:a5:
aa:ae:a6:37:8b:f2:16:8a:ba:08:02:b0:5b:ae:7c:0d:fd:e8:
c4:7e:df:46:eb:0d:d2:f2:f0:65:38:f1:01:3e:ba:1f:0b:69:
2b:47:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net