Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/ViytvvvqRpbhZ8khzk-URy1_cok.roa
File: ViytvvvqRpbhZ8khzk-URy1_cok.roa (raw, json)
Hash identifier: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=
Subject key identifier: 56:2C:AD:BE:FB:EA:46:96:E1:67:C9:21:CE:4F:94:47:2D:7F:72:89
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 019423D70B1245CB6F7F78015E4CDFCB58CA
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/ViytvvvqRpbhZ8khzk-URy1_cok.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 185.90.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0b:12:45:cb:6f:7f:78:01:5e:4c:df:cb:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=562cadbefbea4696e167c921ce4f94472d7f7289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:5f:95:60:47:43:84:a8:6d:88:38:84:a0:
b5:91:1b:7d:76:10:5b:1a:79:09:e5:05:dd:46:e6:
f9:ea:43:dc:2b:4c:48:3c:49:9f:06:89:5f:64:7e:
48:fb:59:3b:aa:b7:d4:4c:34:85:2f:8c:b4:cf:8c:
e0:72:57:03:6d:57:c8:07:97:c4:5f:1b:22:3f:a9:
a6:02:0a:9a:05:cd:ea:f7:5d:8f:62:6c:a9:c0:99:
79:ce:ef:4f:82:da:3b:7e:da:15:3d:a5:a7:b7:c3:
99:dd:b9:9e:a2:4b:92:16:15:ae:27:db:9b:83:db:
6c:00:30:69:53:c8:e3:7d:69:8a:18:53:25:22:67:
05:d6:0b:4e:fe:0e:55:f2:49:fd:3f:9c:d1:f7:64:
1b:8f:9e:ef:ac:3d:dc:c2:b9:0b:d4:c1:a8:fe:d3:
23:78:3b:f3:9f:50:f0:3f:58:7c:bd:be:05:27:f1:
19:61:f4:bb:fa:5f:82:8a:9a:45:04:e7:bb:b4:2a:
86:29:a0:04:cb:25:02:cc:48:d0:32:fc:3b:10:4f:
29:ab:de:b5:32:ad:12:f7:99:4f:91:4b:08:10:47:
09:12:63:8b:8a:b0:8e:b6:c0:bc:8c:8d:a8:dc:38:
6a:39:a9:18:79:8e:36:fb:92:83:8e:3c:ed:7e:32:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2C:AD:BE:FB:EA:46:96:E1:67:C9:21:CE:4F:94:47:2D:7F:72:89
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/ViytvvvqRpbhZ8khzk-URy1_cok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:2b:75:20:d3:ce:34:76:d3:da:1a:ae:b8:f8:c1:81:06:77:
4f:88:81:d2:90:c9:d1:37:fd:42:36:78:95:33:61:09:1b:a6:
94:0b:c0:45:7b:f2:bf:33:ea:d2:1d:4e:75:cc:ae:13:b5:79:
30:b1:50:78:ab:b0:73:cb:97:87:36:c2:1b:15:3e:b2:87:86:
0d:73:8a:25:82:7b:62:65:91:25:b3:7f:d6:80:8d:31:66:29:
77:12:69:87:fa:d2:d3:4b:2a:09:6d:00:b3:0e:c5:5f:93:65:
df:1e:ed:06:d1:29:b8:52:a9:16:95:28:2b:42:3a:fb:84:1d:
ee:e5:8a:05:15:87:3d:eb:58:14:5c:81:f2:3d:43:ed:0e:f2:
17:18:d5:4a:9e:39:63:ee:86:4d:55:19:33:3a:81:02:36:94:
6b:62:31:03:4f:78:8a:f2:cc:2d:07:28:f0:a3:f4:66:8f:c5:
99:a9:14:9a:f2:68:32:96:80:7a:d4:bb:1d:86:52:f0:71:84:
24:49:6e:fc:af:de:de:f0:fa:24:69:7b:60:e3:83:a3:5a:43:
d0:ad:98:bf:f4:78:ca:12:b6:5c:90:db:00:55:75:9b:98:fb:
e5:f6:49:26:94:3c:ff:54:cb:2f:c9:f9:2f:af:ed:ee:13:63:
07:89:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:05 2025 by rpki-client