Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/67QZHkYUeQxG3YID-IXwQqfxGUU.roa
File: 67QZHkYUeQxG3YID-IXwQqfxGUU.roa (raw, json)
Hash identifier: OELmOa5jFxunCL39V/+TVTFyr2Xss3Q9/DT1uK9R4Q4=
Subject key identifier: EB:B4:19:1E:46:14:79:0C:46:DD:82:03:F8:85:F0:42:A7:F1:19:45
Certificate issuer: /CN=922da8e9dc55505612080b379d1ee49068f0ffcd
Certificate serial: 01856E38C8C8063F2A44EFC79A00A8FBAF3C
Authority key identifier: 92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki2o6dxVUFYSCAs3nR7kkGjw_80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/67QZHkYUeQxG3YID-IXwQqfxGUU.roa
Signing time: Sun 01 Jan 2023 16:44:53 +0000
ROA not before: Sun 01 Jan 2023 16:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 185.76.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c8:c8:06:3f:2a:44:ef:c7:9a:00:a8:fb:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922da8e9dc55505612080b379d1ee49068f0ffcd
Validity
Not Before: Jan 1 16:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebb4191e4614790c46dd8203f885f042a7f11945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:f7:c1:c4:9d:39:83:5c:eb:ff:ba:61:dd:
43:88:36:58:8c:f5:4a:51:61:49:cd:31:ef:c6:f7:
1c:7f:03:84:2c:ca:95:83:d7:03:a2:52:bc:c1:1a:
19:ba:b5:20:cf:5e:a8:db:62:c6:19:38:36:36:5f:
20:fb:8f:2c:cc:eb:49:24:6f:87:73:37:49:ba:fb:
b1:93:a4:53:42:ac:28:7f:01:80:26:bb:8b:3b:dd:
62:87:08:4e:bc:2a:62:8b:05:01:38:dd:dd:f7:d9:
8c:4b:5b:b0:83:8f:e8:f9:29:43:d4:31:0d:11:f0:
dc:15:19:5d:85:42:c9:b7:0f:a3:90:ec:1f:ef:f0:
d8:97:ce:8f:84:5b:d4:56:36:66:95:14:ab:73:3b:
6f:b4:15:03:02:20:25:8b:cd:77:4f:bc:d1:47:0b:
b2:f8:9e:7a:45:ec:ac:15:14:c8:dc:1b:9d:b2:16:
3a:a2:72:c6:6d:c0:1e:3c:b2:fa:f5:6c:d9:f1:49:
06:1a:c3:06:a5:58:07:13:1d:7e:03:42:65:43:9c:
f2:09:5b:cf:e5:56:2a:ad:5e:1a:eb:77:b0:3c:91:
ae:f7:f0:69:e6:57:70:50:ce:5d:60:88:1f:dc:15:
67:87:14:f9:f6:2e:2d:b3:ce:40:2e:3d:2f:eb:af:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:19:1E:46:14:79:0C:46:DD:82:03:F8:85:F0:42:A7:F1:19:45
X509v3 Authority Key Identifier:
keyid:92:2D:A8:E9:DC:55:50:56:12:08:0B:37:9D:1E:E4:90:68:F0:FF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki2o6dxVUFYSCAs3nR7kkGjw_80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/67QZHkYUeQxG3YID-IXwQqfxGUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8ba1a1-c861-4f9b-9f4f-e62f58c7c9f4/1/ki2o6dxVUFYSCAs3nR7kkGjw_80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.148.0/24
Signature Algorithm: sha256WithRSAEncryption
51:79:e6:c7:9c:42:d7:78:e5:c1:50:4d:52:f1:ee:b8:6d:00:
fe:25:d4:c9:d2:f9:5b:0f:4a:ab:a7:d0:18:cc:5f:30:40:f8:
48:5c:cc:88:10:4b:d3:3c:e5:dd:7c:d2:42:3a:8d:e0:0b:87:
a6:12:b2:f2:a3:93:81:0e:13:b4:a9:11:fa:b9:c4:c9:fb:60:
dc:52:fc:69:70:7b:43:5b:59:07:fd:17:de:4a:57:90:c1:6d:
3f:0d:18:14:4a:d9:81:92:37:01:52:d8:db:ea:46:02:3e:c6:
89:ae:59:f8:6d:73:53:29:26:6a:2d:53:48:f4:7c:71:a3:b5:
5f:50:fb:c0:31:87:59:48:2e:3f:36:53:a6:d1:fa:c4:b7:ef:
c8:f7:bd:80:1a:57:47:13:f8:b7:6a:c7:b9:44:73:4d:9a:a1:
e0:17:ad:4f:a6:d7:38:d2:ab:53:fd:8c:67:0a:73:8e:69:3b:
e8:f6:03:7f:81:1c:d6:2b:22:9f:c9:79:3c:6c:4b:b2:37:3a:
38:eb:ad:ea:0a:59:70:1d:1e:69:e6:28:1f:d5:40:36:37:e9:
0f:ce:da:00:d3:08:a2:9b:cc:58:66:2b:f8:c7:94:67:6f:7f:
e3:fa:9d:e5:6c:63:5a:14:36:3f:b4:2d:ee:78:54:63:98:ca:
97:79:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:13:31 2025 by rpki-client