Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/C6Cincf0rchBybjIdBpF_khaGT4.roa
File: C6Cincf0rchBybjIdBpF_khaGT4.roa (raw, json)
Hash identifier: ausk5BLtO4CauhCmdfXjmtUPYM/gGlobH9XKv9FoZYo=
Subject key identifier: 0B:A0:A2:9D:C7:F4:AD:C8:41:C9:B8:C8:74:1A:45:FE:48:5A:19:3E
Certificate issuer: /CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Certificate serial: 018D1B
Authority key identifier: 46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/C6Cincf0rchBybjIdBpF_khaGT4.roa
Signing time: Tue 29 Mar 2022 17:14:20 +0000
ROA not before: Tue 29 Mar 2022 17:14:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35710
IP address blocks: 185.168.151.0/24 maxlen: 24
2a12:13c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101659 (0x18d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bbcd6eecb518c8be8944652c03eedec0d1fe
Validity
Not Before: Mar 29 17:14:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ba0a29dc7f4adc841c9b8c8741a45fe485a193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:d7:2d:a0:d4:51:b6:23:9d:c3:df:6d:18:
48:a7:50:c2:dd:6e:bc:c2:9f:e2:a6:45:db:a5:52:
87:eb:a3:06:80:a3:00:4b:82:78:86:d7:f7:69:ea:
0d:22:89:9a:69:61:45:16:0b:cc:d8:fa:89:07:09:
d5:fe:76:8f:87:eb:e2:a8:1c:62:c2:ad:f9:51:98:
58:58:b9:84:48:1b:13:ec:67:37:62:e4:52:f0:36:
6b:06:5c:89:0c:b4:c7:4e:56:ec:fd:bd:b6:cf:f4:
31:ef:7e:ed:2e:56:94:a0:ee:b0:0a:e6:6b:69:f5:
9f:b8:dc:23:d9:fa:2f:f6:00:dc:8e:67:27:79:bb:
06:72:8f:79:73:1c:a9:1b:7b:c3:ee:e6:b8:59:73:
3d:c5:fe:e5:e9:55:c3:07:2c:2b:9a:0e:0a:64:2d:
01:4a:52:88:cb:a0:66:d7:62:85:21:bb:bd:07:47:
0a:70:d2:03:db:05:49:6e:45:59:21:f0:1e:c2:68:
de:df:e8:4b:60:da:19:0a:c8:37:6b:e2:b8:0f:c0:
41:9c:8a:80:e8:7f:e2:ed:be:2a:be:49:36:e1:80:
51:8b:e7:0e:3a:1d:63:34:e2:c3:ce:05:03:ce:56:
52:e3:05:0d:df:12:e0:ec:6c:7c:69:6d:0c:34:4a:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A0:A2:9D:C7:F4:AD:C8:41:C9:B8:C8:74:1A:45:FE:48:5A:19:3E
X509v3 Authority Key Identifier:
keyid:46:28:BB:CD:6E:EC:B5:18:C8:BE:89:44:65:2C:03:EE:DE:C0:D1:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii7zW7stRjIvolEZSwD7t7A0f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/C6Cincf0rchBybjIdBpF_khaGT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d1c55-425b-4cb8-8172-b43541272abe/1/Rii7zW7stRjIvolEZSwD7t7A0f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.151.0/24
IPv6:
2a12:13c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:c9:8e:67:af:72:fa:65:47:9c:70:a8:15:3c:46:78:20:d8:
62:75:d0:74:b3:ac:bf:10:d0:6f:25:ad:f1:90:b4:b1:80:10:
af:11:55:b5:fc:e4:aa:ed:9c:62:6d:8a:5f:bf:c3:a8:f2:c6:
70:c0:e0:91:88:2f:d2:ab:5d:85:84:a7:31:b8:bc:56:7c:11:
92:8e:f1:14:72:fd:48:2e:84:e8:fd:08:6e:97:a6:b2:88:54:
fa:d9:22:2b:b9:5d:aa:ba:ef:87:64:75:b8:85:35:76:1e:0f:
13:bc:42:d5:15:84:9e:7e:14:6c:42:56:7f:cf:d7:05:e2:8f:
32:94:97:72:8d:33:d9:58:b4:02:00:e0:21:fd:67:ff:14:18:
a4:77:62:4e:c2:1a:89:1f:65:15:f0:35:84:76:b4:59:2a:29:
4a:1d:bb:a8:87:2d:7c:b3:dc:2d:4a:0e:3f:d2:c8:0c:3e:ac:
e5:27:41:3b:b4:d5:10:b7:20:38:31:ad:76:a8:98:18:6d:2d:
5d:eb:1f:27:d6:aa:80:77:ba:5e:ab:dc:c8:de:4f:c8:c1:48:
c9:43:fa:d8:2e:9e:13:54:e8:e7:10:a2:a1:a4:27:8c:b2:38:
82:31:1b:6c:17:92:88:33:da:02:d0:cc:d0:42:2e:47:b9:9e:
be:91:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:56 2025 by rpki-client