Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/8OwNTqQjhKxqVEqerJlBMRO_IMI.roa
File: 8OwNTqQjhKxqVEqerJlBMRO_IMI.roa (raw, json)
Hash identifier: 85dMx1/QFr0fMgOLQYDWqzQ9Auf5YLC2vW/cG+c7WKo=
Subject key identifier: F0:EC:0D:4E:A4:23:84:AC:6A:54:4A:9E:AC:99:41:31:13:BF:20:C2
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 01837B1BE516F7A9F24ABD3B06D59106F0CD
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/8OwNTqQjhKxqVEqerJlBMRO_IMI.roa
Signing time: Mon 26 Sep 2022 18:42:49 +0000
ROA not before: Mon 26 Sep 2022 18:42:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.127.164.0/23 maxlen: 24
185.127.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7b:1b:e5:16:f7:a9:f2:4a:bd:3b:06:d5:91:06:f0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Sep 26 18:42:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0ec0d4ea42384ac6a544a9eac99413113bf20c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:ab:b6:e7:45:d3:e0:13:1e:67:a8:7b:06:
ab:c7:8d:fc:8a:5f:c4:0c:77:7d:34:55:8a:03:de:
4c:c8:ee:eb:46:1f:e8:7a:e2:04:47:2a:2c:8b:22:
2b:67:79:1a:0e:c9:d8:5c:2c:0e:90:9c:92:03:d6:
ae:ab:2a:1e:2a:0b:2f:f2:62:91:3b:d7:22:03:a9:
a6:39:b4:8c:1e:88:9b:05:cf:7c:bb:d7:54:84:8b:
5b:f7:2d:ae:49:56:cd:13:dc:74:b4:76:98:87:b3:
04:52:fa:ae:77:4a:fa:e1:1c:45:fa:a6:2d:8c:2e:
83:99:ca:4c:61:8c:5f:b6:90:9b:2f:12:2c:7d:6f:
96:e1:e3:ef:31:17:0e:dd:1e:94:7d:16:64:3d:37:
a9:cb:d6:76:ed:f7:1e:fe:70:3a:96:8e:af:b1:14:
bf:37:07:b9:dc:bd:f7:4c:74:a4:37:e3:20:25:88:
c8:cd:e3:02:1f:f2:e2:33:f2:8e:0e:5b:bd:6e:e0:
24:a7:93:8d:4b:e9:37:44:cd:63:83:da:a7:73:a6:
80:3d:31:c8:3e:50:ab:c6:de:07:9b:3a:61:6d:ff:
0b:45:9a:11:65:9a:fb:1e:44:ec:9f:54:61:0e:26:
d6:c5:93:4d:77:2c:20:a1:69:2b:ab:99:dc:e1:8b:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EC:0D:4E:A4:23:84:AC:6A:54:4A:9E:AC:99:41:31:13:BF:20:C2
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/8OwNTqQjhKxqVEqerJlBMRO_IMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e7:76:96:06:b4:6a:d2:68:23:87:63:fb:56:81:61:ce:5f:
e2:8d:c8:c3:06:92:f2:17:1a:8a:6e:6c:51:01:01:f1:04:0b:
9c:cb:3f:a6:6d:ec:4c:13:a3:8e:97:e3:f3:70:66:57:ec:3a:
78:33:36:eb:de:b9:74:d7:4b:0c:a5:a8:47:bc:7d:4e:0a:d6:
aa:6c:5d:ca:20:eb:03:46:b3:e8:4d:9d:57:08:72:b6:c7:20:
17:44:45:0d:54:cc:8c:39:a8:e8:cb:eb:d3:b4:5a:1c:91:65:
60:27:78:73:7d:52:8a:0a:9a:37:25:c7:c5:24:ce:d5:ab:15:
17:c6:58:94:2b:e7:50:2f:7d:92:1d:74:15:3b:20:1c:0b:67:
0b:a4:03:43:a9:e9:7a:4e:f2:ee:ac:82:71:cc:32:6f:7a:85:
c0:05:32:1a:ca:05:72:3d:4d:29:2f:7f:11:9c:7a:f2:8b:e7:
e5:98:5d:6f:94:f0:ff:6e:6b:95:0f:33:b9:03:aa:fd:0a:4a:
cc:02:3b:ac:21:67:de:3c:64:b9:1e:51:f5:32:ee:e1:6e:34:
1f:b3:be:b0:66:9d:aa:88:2e:19:95:c3:a2:f9:e9:55:1f:18:
41:48:db:d4:96:c1:f8:e9:ef:8a:8c:cc:96:d9:94:c2:81:22:
17:51:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:07:24 2025 by rpki-client