Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/QNbQ_GWXhyZjZ6mpLYHEWHyMpUo.roa
File: QNbQ_GWXhyZjZ6mpLYHEWHyMpUo.roa (raw, json)
Hash identifier: fdfePCmFfMfmmEihGwx8hQuLwLwLkAy3kOxOE6rZvXg=
Subject key identifier: 40:D6:D0:FC:65:97:87:26:63:67:A9:A9:2D:81:C4:58:7C:8C:A5:4A
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 0184DA759251B9DBBC1BCDD9C4EE96E5855C
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/QNbQ_GWXhyZjZ6mpLYHEWHyMpUo.roa
Signing time: Sun 04 Dec 2022 00:07:28 +0000
ROA not before: Sun 04 Dec 2022 00:07:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.167.76.0/24 maxlen: 24
185.167.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:da:75:92:51:b9:db:bc:1b:cd:d9:c4:ee:96:e5:85:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Dec 4 00:07:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40d6d0fc659787266367a9a92d81c4587c8ca54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:8b:99:fc:74:81:0b:1f:e9:6c:7f:f9:19:
ff:65:4a:47:ec:c7:89:39:fc:c1:a1:df:5c:df:5e:
a5:2f:fa:4b:74:f3:0e:84:0d:6a:8f:f1:92:62:af:
ed:b8:dd:74:2e:9c:18:50:a2:ca:91:a0:46:c4:64:
14:20:1c:1e:8a:e4:e7:b6:01:ee:56:73:45:09:25:
60:ce:d9:66:b7:17:1e:ec:4f:1b:88:ab:15:46:0f:
c0:13:b6:18:44:34:9e:07:ef:e4:de:3f:67:68:0e:
97:27:ac:04:56:d5:54:3b:d0:aa:09:14:31:95:89:
6f:02:29:9d:b7:2c:07:ea:4a:3f:75:60:51:16:d0:
01:c4:4a:8b:0c:60:b1:96:51:29:d6:63:2c:5c:6b:
a1:f5:fd:91:65:7c:46:af:a4:fc:8a:6e:9c:bc:c8:
81:0b:b6:0e:14:91:5d:66:1c:f9:23:6a:0d:0e:7c:
a6:2b:42:71:32:c4:ee:4f:b4:4f:8a:e4:03:74:4c:
5a:db:d6:23:d1:ff:f8:7a:4b:cb:dc:38:67:27:50:
16:8d:48:a4:95:b9:45:9b:4a:4a:7d:59:07:04:96:
e1:b3:87:89:1a:9b:29:ef:8a:8b:ff:67:2b:dd:32:
e2:69:58:4f:af:c7:86:f3:6c:f7:a7:9e:a6:d4:91:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:D0:FC:65:97:87:26:63:67:A9:A9:2D:81:C4:58:7C:8C:A5:4A
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/QNbQ_GWXhyZjZ6mpLYHEWHyMpUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:36:1d:9f:9e:d1:d8:a2:64:6a:29:d1:2f:c3:68:cd:30:b6:
f4:02:55:d5:cf:73:3b:10:b7:6a:6c:e3:b4:ab:7e:f2:4b:4f:
81:d4:cd:7a:ba:6b:08:09:af:58:f1:6a:e7:cd:6b:1f:ca:44:
81:2e:03:7e:7b:0f:55:24:b3:b3:74:aa:56:f3:66:f7:08:4f:
4f:aa:54:c9:5f:52:9f:69:9d:10:a5:98:ab:fd:ea:c6:86:32:
b3:5f:c9:07:df:3c:6b:2b:4c:6c:d3:4f:76:23:e4:4c:6d:70:
1d:0a:25:59:1a:0c:8e:59:46:4e:25:b4:3a:c6:5e:b1:9b:61:
d6:ff:bf:7c:d1:af:28:14:b5:f0:62:23:e0:4c:8a:ea:69:a0:
42:71:7f:8f:a4:6c:b1:9c:d8:61:4d:49:5a:ab:c0:c0:91:fb:
40:e9:b9:7f:8a:2a:b4:c5:96:f4:2f:89:d4:e9:de:11:4d:e7:
b6:e8:90:59:09:e4:3b:86:b2:54:24:e2:36:00:da:f4:91:fb:
b2:47:95:c5:63:d4:06:ce:c1:e2:9b:ce:7b:63:38:79:c4:7d:
22:e7:ba:9b:c6:18:87:19:1c:5d:78:b5:8e:23:83:eb:62:b5:
1a:23:01:21:62:4e:a4:24:f7:4d:9d:4b:27:7e:da:b2:b2:81:
c6:af:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:54 2025 by rpki-client