Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/RqPzdMqkcbF0OOjoDjfhoDntRB0.roa
File: RqPzdMqkcbF0OOjoDjfhoDntRB0.roa (raw, json)
Hash identifier: Gen+c4KxtU4/cL/rDNHMivigIHDej/yGDgQUcDAhe3o=
Subject key identifier: 46:A3:F3:74:CA:A4:71:B1:74:38:E8:E8:0E:37:E1:A0:39:ED:44:1D
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 018776A164E68E6A51A26C74C83C7608E064
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/RqPzdMqkcbF0OOjoDjfhoDntRB0.roa
Signing time: Wed 12 Apr 2023 18:01:41 +0000
ROA not before: Wed 12 Apr 2023 18:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15704
IP address blocks: 185.195.179.0/24 maxlen: 24
185.195.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:a1:64:e6:8e:6a:51:a2:6c:74:c8:3c:76:08:e0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 12 18:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46a3f374caa471b17438e8e80e37e1a039ed441d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:b0:1e:8d:5b:dc:a6:71:95:ef:db:7b:fb:
d1:7b:c1:48:6f:57:70:03:74:13:c7:fd:4b:d4:09:
93:33:4c:01:14:fc:18:18:cf:b2:f9:d9:6b:0a:f4:
93:d1:81:60:7d:74:8b:7a:0b:97:00:66:ad:bf:97:
89:7c:ac:b9:50:38:5c:f2:06:6f:31:60:54:7c:78:
30:1d:3e:c8:03:3f:5f:b2:eb:f3:f2:12:09:8a:a2:
a3:5d:3d:5f:f9:fd:5d:82:3c:33:66:ef:21:88:11:
c2:7a:28:f1:e4:ec:2f:38:25:63:bb:c6:4d:0d:5c:
20:36:b6:38:60:66:09:99:b0:80:00:3e:b5:d9:8c:
8b:c3:02:04:81:a0:74:28:2c:13:69:2c:b2:ea:f2:
e6:ca:df:38:79:f2:39:c0:f7:c7:a8:df:ac:ba:3e:
a2:bd:cf:d4:4a:fd:cd:9c:58:01:4c:cd:35:10:fc:
8d:ea:5e:17:b0:02:1a:2b:9b:68:ac:48:61:63:e3:
2b:3b:0e:0b:df:9a:92:f3:85:a4:db:0a:be:c0:3a:
49:6f:98:5c:74:a5:73:02:bc:0b:60:cb:69:e5:7c:
37:17:80:4d:9c:fa:c1:62:d6:b9:80:a7:e5:8e:9b:
fe:f4:77:2f:a4:af:d8:51:3d:d2:ce:9a:30:aa:c2:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:F3:74:CA:A4:71:B1:74:38:E8:E8:0E:37:E1:A0:39:ED:44:1D
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/RqPzdMqkcbF0OOjoDjfhoDntRB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:ee:ef:03:7e:0b:c0:af:44:9b:73:be:d6:15:3c:b3:b6:39:
6a:8c:5c:4a:01:79:df:ed:b6:9a:c5:b7:25:9b:a9:8a:b4:9e:
35:10:0e:f6:e1:59:12:f8:c3:ed:02:7c:24:c8:4a:27:8b:7c:
a3:e3:ed:86:d3:9d:82:e2:ae:46:4b:8c:86:bc:d2:b1:1a:ac:
3e:85:45:4d:81:14:08:26:f9:b1:83:22:0a:c5:33:d1:64:a6:
f2:96:88:0b:05:4e:af:81:07:7e:c3:6c:ba:8d:d7:78:42:3e:
bd:79:b2:00:76:72:2b:b2:a9:64:51:8e:f6:df:7e:b1:22:64:
ce:db:4b:1c:da:53:64:e5:e2:6b:6b:64:2e:2f:97:25:3d:fd:
94:64:a1:e0:5a:43:c7:2d:91:c2:5d:1c:06:43:9a:eb:32:5c:
69:18:1b:50:c1:cb:44:4e:4c:63:47:bd:22:a3:f8:dc:ec:eb:
74:ec:46:46:5a:dd:dd:3a:47:b9:a1:ff:30:9d:1f:71:a8:68:
13:ad:04:26:e0:56:0a:9d:e8:7a:4a:bc:a5:41:8a:73:3e:fa:
d3:c0:8c:85:1f:0a:f0:02:cd:6a:45:a9:9c:80:6a:2a:55:a1:
5a:37:18:ca:d2:6d:eb:91:8d:9c:ac:77:8d:54:be:46:63:2b:
82:a6:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:51 2025 by rpki-client