Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/qqrP_HngJV3AemX1Fdl33xMNvHY.roa
File: qqrP_HngJV3AemX1Fdl33xMNvHY.roa (raw, json)
Hash identifier: chaqoGCmZ7R9UpArxV4jg6wLAmpBIgycRiBNxjUWBZE=
Subject key identifier: AA:AA:CF:FC:79:E0:25:5D:C0:7A:65:F5:15:D9:77:DF:13:0D:BC:76
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 018570B05F8BDABB1C58AEE48389874BAE0B
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/qqrP_HngJV3AemX1Fdl33xMNvHY.roa
Signing time: Mon 02 Jan 2023 04:14:44 +0000
ROA not before: Mon 02 Jan 2023 04:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.162.73.0/24 maxlen: 24
185.162.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:5f:8b:da:bb:1c:58:ae:e4:83:89:87:4b:ae:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 2 04:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaaacffc79e0255dc07a65f515d977df130dbc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:e6:0d:df:5f:d0:17:a5:06:40:fd:44:d3:
58:22:01:e9:0d:6d:e7:0d:1b:f0:73:ed:04:e9:19:
1d:49:e1:36:d1:fb:d1:96:ec:43:3f:31:8b:11:2a:
70:ec:61:8e:fa:ad:84:2b:47:37:e2:c1:b8:c5:2b:
b5:f5:34:ec:aa:2b:3e:4d:93:c2:64:b2:4a:12:a4:
87:9f:32:5d:8c:ab:ce:32:b8:51:e4:fa:2d:7f:10:
15:60:c1:8f:89:c3:48:c7:73:2a:47:88:e1:ae:f2:
75:54:6c:e1:1a:fa:16:60:ef:bf:18:ee:27:1f:0c:
c0:fe:18:81:b9:48:1c:80:5c:e9:52:b0:90:23:de:
c1:25:7e:98:b8:d5:21:21:57:f1:20:5b:fb:97:52:
48:3b:45:ce:84:db:1e:b5:f6:5a:0f:4f:fc:cb:35:
8c:88:ae:69:d5:8e:34:e2:0d:7a:5e:3f:9e:12:91:
78:75:43:c0:10:24:35:f5:13:2a:54:ad:a1:cb:94:
ae:91:23:9e:a1:e7:0c:91:d9:40:29:39:c6:c0:10:
44:c8:70:40:cd:16:43:8c:d5:2e:1b:9d:04:c3:2f:
b7:24:30:a9:42:35:a1:bd:58:f2:2f:7b:b4:ae:6c:
8b:92:9d:4e:4f:75:6d:59:46:78:5d:9b:00:85:9b:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:CF:FC:79:E0:25:5D:C0:7A:65:F5:15:D9:77:DF:13:0D:BC:76
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/qqrP_HngJV3AemX1Fdl33xMNvHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.72.0/23
Signature Algorithm: sha256WithRSAEncryption
61:21:33:7a:ef:3b:d0:de:11:f2:65:49:6a:ca:1d:1a:5d:c3:
00:a5:a0:01:db:36:b6:24:ab:1f:01:c3:3e:d8:5b:ef:89:07:
48:7a:01:a0:51:3c:a4:9e:04:19:80:cd:c5:f9:2f:2e:a2:0e:
39:88:d7:d0:e7:58:2a:28:bb:2a:3c:e3:b1:fd:8b:90:e2:a1:
0c:9c:9f:e0:ed:62:a4:85:d3:2e:89:3e:84:2c:de:49:25:29:
03:cd:83:ca:31:f8:ab:b6:67:fd:80:b8:2f:a5:a2:40:0c:83:
78:0c:74:24:20:59:67:4c:60:db:aa:28:39:0f:52:09:68:1c:
47:33:aa:dc:d3:b4:75:51:72:87:97:73:bc:47:50:e4:64:2a:
31:4c:0f:ad:70:bb:2a:da:28:ca:46:5c:f3:d5:48:03:63:4d:
48:0d:de:e9:3b:c8:5d:70:5e:67:37:ed:16:3b:94:d5:48:5c:
37:88:ed:da:6b:c4:b5:a0:e9:c5:54:d1:67:c4:65:49:15:23:
ce:1b:3e:97:f0:7e:52:a1:fb:8f:48:9d:38:05:a5:48:82:94:
17:36:e9:27:fc:ec:59:dc:1e:26:9d:3f:8c:c1:e2:e9:fc:77:
f0:1b:1f:e4:d2:29:c0:78:20:d4:94:c8:03:b9:85:b4:20:5d:
57:b5:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:15 2025 by rpki-client