Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/RTZxlkfWmE8bKM5TE5eWY8ipLYY.roa
File: RTZxlkfWmE8bKM5TE5eWY8ipLYY.roa (raw, json)
Hash identifier: kh9n71katGuNtoJGsNUzIqxwrtJwKFBSBQeycuW6Q10=
Subject key identifier: 45:36:71:96:47:D6:98:4F:1B:28:CE:53:13:97:96:63:C8:A9:2D:86
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 0184DDD3FD9F7BA28C672D40661A0BEC490D
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/RTZxlkfWmE8bKM5TE5eWY8ipLYY.roa
Signing time: Sun 04 Dec 2022 15:49:28 +0000
ROA not before: Sun 04 Dec 2022 15:49:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 185.167.76.0/24 maxlen: 24
185.167.77.0/24 maxlen: 24
2a0b:4e00::/48 maxlen: 48
2a0b:4e00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:d3:fd:9f:7b:a2:8c:67:2d:40:66:1a:0b:ec:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Dec 4 15:49:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4536719647d6984f1b28ce5313979663c8a92d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:1a:af:b1:5c:18:e7:7b:d6:88:20:5e:4d:
81:3d:1e:43:cf:3d:65:fc:ac:a8:92:01:b7:52:02:
14:b3:b3:b9:7b:f3:c4:83:b9:c6:fa:6a:76:d2:cd:
d9:20:e3:cf:3b:33:e1:5b:23:53:3e:da:b8:f6:64:
27:c9:67:04:99:df:01:9b:88:97:00:f1:a8:01:09:
bb:4e:19:fc:87:b1:c6:c7:10:4f:ed:71:7b:b2:bb:
44:68:6f:97:04:6e:d3:7e:0f:14:a9:81:c7:13:70:
16:95:c4:c3:cb:8b:3d:b4:ed:20:d3:bf:5f:bb:03:
0a:ba:28:64:88:26:26:b2:b6:bd:13:2e:88:6a:7d:
c7:5e:b3:44:2c:5f:1f:d5:31:62:a9:fd:92:e0:7b:
33:ef:5c:c1:19:7b:9d:cd:31:0a:84:ec:78:f3:e8:
04:7f:54:c2:2b:04:1e:00:2c:0c:b0:1e:71:9d:d7:
30:10:c4:ac:d4:a0:f8:de:7c:78:80:31:51:71:9b:
c9:3e:d3:d3:9f:4d:a9:33:72:0d:c9:d5:b0:5a:5d:
93:23:24:8a:3a:47:2b:dd:a3:e2:6d:4a:21:f3:7d:
5d:61:90:d9:fe:8a:5c:22:6a:98:81:f4:36:b6:e6:
34:bc:de:bd:b6:01:5e:01:06:42:1d:15:76:e9:85:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:71:96:47:D6:98:4F:1B:28:CE:53:13:97:96:63:C8:A9:2D:86
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/RTZxlkfWmE8bKM5TE5eWY8ipLYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.76.0/23
IPv6:
2a0b:4e00::/47
Signature Algorithm: sha256WithRSAEncryption
42:9c:7f:07:ed:9a:b0:8e:25:f8:8c:5e:85:23:59:49:fb:70:
d2:cf:cb:2e:d6:05:0b:94:cb:6e:0e:90:eb:07:91:44:42:70:
1b:53:99:cd:96:b7:2c:7c:2d:a8:4b:9a:2d:15:ec:fc:de:f8:
72:a5:bc:ec:33:b9:94:3c:9a:02:8f:c5:5b:ec:73:2a:d7:38:
79:1c:54:87:13:6c:dd:5a:33:cf:f1:2e:96:d4:1e:5c:a8:e5:
00:21:b1:55:5b:8c:af:ed:42:73:90:88:93:eb:02:63:2b:bf:
a0:75:12:9a:9f:6a:2b:45:cb:51:56:93:cc:0a:dc:6e:77:94:
24:e2:69:69:3f:8b:89:a2:c6:ea:0d:5e:d9:9e:11:63:f6:e7:
73:12:b8:79:ee:6f:cb:c9:a2:90:7f:a9:1b:b5:fa:39:38:3f:
9f:c1:a7:37:3c:c0:75:74:ba:98:8f:b9:2e:c0:9c:35:35:9e:
15:7e:80:b9:99:e7:1d:58:4a:b7:7a:aa:6d:93:67:13:77:dc:
42:4a:02:ec:ca:4d:42:9c:1f:70:e8:9c:84:cc:51:77:f1:e1:
33:dc:c6:99:cb:16:45:44:83:af:c2:95:6f:e1:f1:eb:94:e8:
56:9b:96:3f:12:0b:bc:f2:f9:4a:e6:88:59:17:ae:ec:c7:c4:
68:2d:a7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:24 2025 by rpki-client