Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa
File: lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa (raw, json)
Hash identifier: oCvvxX98yWLH3kfCtYuDTFzL1eqlVEqmDIMPTij8zho=
Subject key identifier: 95:9F:66:37:9C:53:B6:D2:B0:E4:BB:B7:92:DE:53:05:DC:68:23:F7
Certificate issuer: /CN=68038d4cacbd41919952eb3709c16533838900e3
Certificate serial: 0194222038285D24601EBB3DBE1F56D80C21
Authority key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60672
IP address blocks: 185.182.68.0/23 maxlen: 24
185.182.68.0/24 maxlen: 24
185.182.69.0/24 maxlen: 24
185.182.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:28:5d:24:60:1e:bb:3d:be:1f:56:d8:0c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68038d4cacbd41919952eb3709c16533838900e3
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=959f66379c53b6d2b0e4bbb792de5305dc6823f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:d5:d2:b5:2f:fa:b0:87:60:d2:09:0e:23:
2a:1e:9c:36:ac:f6:43:18:1a:12:e3:e5:8c:49:e5:
db:aa:3c:1b:e5:bb:9d:7a:d5:7a:bc:5f:9a:41:70:
73:02:3b:f2:c2:21:9d:8d:8e:1e:53:74:4a:47:8f:
85:b1:1c:65:93:b2:a9:b1:d7:63:86:f1:72:7a:2d:
d4:c1:4c:ad:6c:67:a2:0d:94:ae:93:3a:71:9c:e4:
c9:62:49:42:7f:32:55:64:90:bd:5f:d5:c4:d2:e7:
ed:e6:69:2a:7d:b0:5c:5d:90:56:ca:84:12:2c:d0:
82:42:b9:8b:e3:38:e6:f8:5c:6d:c8:b3:c3:6d:88:
5e:14:da:5f:5f:e2:40:65:02:17:e3:38:58:dd:e9:
f4:a2:b7:fc:21:c3:c3:87:26:f6:35:9b:e1:74:18:
b0:16:db:d5:c4:54:35:d4:c6:aa:ec:e5:8c:70:59:
b8:c9:59:5d:f7:e1:87:5e:5a:ec:4d:c8:0c:ce:60:
ea:37:3e:c4:f6:d7:e7:fb:df:b0:f4:a8:79:17:f7:
b1:39:b5:c6:31:c7:3e:17:ad:d1:9e:00:e6:12:71:
ab:1e:29:ea:25:0e:c6:f8:25:1d:c5:85:8b:3b:ad:
d0:01:a1:b1:31:c4:2d:b4:63:cf:39:75:4e:6a:dd:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9F:66:37:9C:53:B6:D2:B0:E4:BB:B7:92:DE:53:05:DC:68:23:F7
X509v3 Authority Key Identifier:
keyid:68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/lZ9mN5xTttKw5Lu3kt5TBdxoI_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.68.0-185.182.70.255
Signature Algorithm: sha256WithRSAEncryption
81:26:e1:0f:03:00:23:72:24:78:db:b8:f2:6d:7a:54:ee:19:
64:f4:90:78:1b:ab:a6:da:27:ce:62:7a:53:87:eb:0f:a2:c5:
8b:51:e3:27:f3:e6:c8:0d:d5:0f:17:3d:79:3d:ab:73:e5:d9:
3a:43:f4:37:c9:a2:68:0d:08:08:c5:eb:25:58:47:9b:14:fa:
f9:36:58:85:b8:e7:cf:53:ca:f0:35:81:39:98:4d:b1:98:ce:
a7:c0:dc:b8:9d:b1:33:71:3b:02:81:4d:ac:fb:6b:23:7a:56:
07:8c:3d:25:b0:9c:de:d9:35:d6:5b:50:9f:61:06:77:44:c6:
7d:61:9e:b7:d1:26:ba:2a:67:76:74:c5:3f:4d:40:d8:f5:b1:
45:d8:eb:3b:56:34:e9:64:45:c7:7f:72:66:ec:1a:fc:29:98:
0d:5a:e9:cd:13:e9:ae:52:db:1b:98:67:1c:ea:55:4e:6d:8f:
31:48:fc:0f:3c:31:58:fc:0e:12:34:ff:1a:2e:05:e9:63:28:
70:f8:22:51:f2:72:f6:5b:a1:7c:82:06:4f:c2:3c:05:01:70:
8e:44:52:b6:04:88:31:00:e9:7e:df:fa:c8:31:09:1e:d5:81:
a1:47:9b:c7:91:ae:23:85:59:e4:f6:5d:ac:d0:13:49:87:f3:
4b:28:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:33:10 2025 by rpki-client