Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/r0eHor_zGjeS_Sm7yMDfTCp9-XM.roa
File: r0eHor_zGjeS_Sm7yMDfTCp9-XM.roa (raw, json)
Hash identifier: M29z2af22KJ7aT4sY7fPLYU8NEH5XqV78p0lSt+k+Ek=
Subject key identifier: AF:47:87:A2:BF:F3:1A:37:92:FD:29:BB:C8:C0:DF:4C:2A:7D:F9:73
Certificate issuer: /CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
Certificate serial: 01856FC2566FEB9E37B71A435AFC2E581390
Authority key identifier: A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/r0eHor_zGjeS_Sm7yMDfTCp9-XM.roa
Signing time: Sun 01 Jan 2023 23:54:45 +0000
ROA not before: Sun 01 Jan 2023 23:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41827
IP address blocks: 185.168.164.0/22 maxlen: 24
2a0b:ea00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:56:6f:eb:9e:37:b7:1a:43:5a:fc:2e:58:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cfe4ce8c192d462c23b329cc5612e87372c485
Validity
Not Before: Jan 1 23:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af4787a2bff31a3792fd29bbc8c0df4c2a7df973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bf:84:b6:61:4c:98:d9:5a:17:9a:86:f3:3c:
2c:4f:10:e7:d1:bd:8e:4d:eb:ad:68:65:07:df:b1:
fd:0c:93:7a:ae:f7:fd:d0:e8:93:34:cd:58:92:64:
b2:f4:49:e7:a9:f1:d6:37:62:93:1a:e2:07:bc:2d:
a4:01:ba:3e:87:d4:b0:33:b9:1a:93:14:63:fb:62:
59:6f:d8:22:2f:49:02:9a:b5:29:37:14:30:03:ef:
53:6c:82:d0:33:35:36:4d:80:02:dd:8f:5c:72:6d:
ec:b2:11:f4:ae:24:33:0e:6f:89:cd:3a:c8:17:d3:
26:0c:69:f4:01:0e:3f:cd:47:21:2a:e2:30:39:7b:
47:fa:cd:1b:14:1c:c6:4c:c6:6f:0a:16:32:2e:e4:
3b:63:93:a7:3b:ca:05:8e:36:ef:99:f2:cf:47:d3:
af:c4:e1:ec:23:61:11:19:d0:4b:dc:3d:79:6f:93:
b3:85:cd:f9:a5:b3:e0:65:51:c8:15:e7:4b:81:6d:
44:61:ca:15:dc:19:e6:5d:7f:d4:03:70:27:45:f9:
72:5d:09:d9:58:9b:bd:de:c0:6f:3b:80:bd:fd:35:
2b:3b:b0:02:65:d3:e1:f1:05:db:97:6d:3e:e8:16:
46:92:9e:e5:d3:5b:d3:b7:df:9e:8f:1b:e9:1b:d5:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:87:A2:BF:F3:1A:37:92:FD:29:BB:C8:C0:DF:4C:2A:7D:F9:73
X509v3 Authority Key Identifier:
keyid:A9:CF:E4:CE:8C:19:2D:46:2C:23:B3:29:CC:56:12:E8:73:72:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qc_kzowZLUYsI7MpzFYS6HNyxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/r0eHor_zGjeS_Sm7yMDfTCp9-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/427766-b9a7-42cc-ab70-a9b567fc90a8/1/qc_kzowZLUYsI7MpzFYS6HNyxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.164.0/22
IPv6:
2a0b:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:6e:fb:e6:ec:ce:3a:bd:a5:fb:24:4f:c0:ea:d1:c1:86:ba:
6e:c0:b7:30:64:da:0f:7f:e6:61:8f:c5:95:e6:36:22:ad:1a:
25:51:11:ca:85:89:1c:80:d1:2a:99:37:d7:03:f8:3c:4c:c5:
b3:14:ed:22:67:2f:91:36:a3:17:d2:91:97:f8:a4:87:50:4a:
53:d6:ca:80:d3:3a:7c:43:e5:e9:16:20:be:77:f5:c9:cb:1d:
c7:be:c9:d9:7e:51:0a:37:8a:6d:8d:dc:87:2c:76:fe:7d:4c:
a1:d1:3e:96:c6:2e:a6:87:90:69:1d:c7:51:a2:11:dd:b7:f8:
5a:b2:2e:e6:cd:27:53:3a:85:64:93:d3:63:83:0a:c6:c4:00:
57:19:1f:26:c6:1e:8b:71:4a:cf:b4:21:2d:66:05:4d:d2:be:
9c:25:7c:7a:e7:95:31:fd:12:9c:1d:3c:67:88:82:35:7b:a8:
b3:78:d0:18:d6:94:78:a5:8e:57:41:15:c2:d0:14:94:29:77:
f5:28:bd:d3:67:82:c6:bb:fe:7d:5c:fa:c3:d0:32:e7:a0:63:
ff:21:a7:33:47:97:7d:2a:d0:da:97:a1:29:67:d2:3e:44:6d:
56:89:c4:0a:a7:90:c8:ed:83:a6:ef:36:f7:6b:c1:d5:a1:4b:
db:0c:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:46 2025 by rpki-client