Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/02e5b3XQpzePV00K_dOmLuiMXTI.roa
File: 02e5b3XQpzePV00K_dOmLuiMXTI.roa (raw, json)
Hash identifier: ThZXJcJ8S66daH4LKpI2pO7P7ZE2MDznAFsJtvLv8Mw=
Subject key identifier: D3:67:B9:6F:75:D0:A7:37:8F:57:4D:0A:FD:D3:A6:2E:E8:8C:5D:32
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 018438BA14F6296795B62D643A987256C7A0
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/02e5b3XQpzePV00K_dOmLuiMXTI.roa
Signing time: Wed 02 Nov 2022 14:23:49 +0000
ROA not before: Wed 02 Nov 2022 14:23:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:ba:14:f6:29:67:95:b6:2d:64:3a:98:72:56:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Nov 2 14:23:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d367b96f75d0a7378f574d0afdd3a62ee88c5d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:8f:52:c0:22:00:6a:b0:c6:5a:1e:47:f6:
ac:54:6c:6b:57:54:95:02:27:15:89:ad:d6:bf:ef:
0a:f7:40:0f:2e:c0:7a:d8:13:b7:59:44:d3:f7:b8:
7e:ff:ab:c6:5c:f2:e6:25:cd:c8:9c:5e:05:8a:d4:
9f:85:da:55:53:12:00:ad:b5:eb:f2:bf:4f:80:96:
5d:f2:17:7f:5f:d1:4a:68:f0:1f:47:d9:f4:4d:c8:
e4:22:e3:df:a7:e3:25:15:df:73:4e:d8:e1:6e:4a:
85:1d:3c:32:9f:85:f6:12:6e:8e:bc:8d:5d:03:66:
19:0c:7b:8c:11:76:c6:6c:0a:28:80:c6:25:f3:ca:
00:32:40:85:e0:be:f7:c5:88:d2:dc:f6:eb:15:26:
8f:db:74:45:7c:18:29:62:ca:66:e1:f5:36:12:d8:
86:d2:fe:5d:33:49:2b:cd:86:3c:58:d2:86:d7:3a:
2d:a8:84:a7:3c:f9:a1:d5:34:36:70:e0:d8:15:94:
6a:2d:4b:b1:f1:52:d4:d4:05:43:67:f1:9e:2c:41:
2e:49:78:a0:49:3e:2a:74:4d:15:c5:5a:b5:57:16:
2f:80:14:d2:08:35:1e:00:3e:2a:b9:a5:8e:53:dc:
c2:4b:9f:37:ad:83:0a:10:64:7f:6b:64:2f:6a:b7:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:B9:6F:75:D0:A7:37:8F:57:4D:0A:FD:D3:A6:2E:E8:8C:5D:32
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/02e5b3XQpzePV00K_dOmLuiMXTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:11:88:f9:cf:06:ae:f1:8f:9b:d0:bf:af:01:dc:a3:43:fb:
7e:54:3f:48:e3:a9:30:02:b0:15:5b:02:3c:32:d6:f6:50:ff:
aa:1e:1a:31:21:df:d8:03:2e:43:0e:ba:1f:41:39:2b:48:7c:
d5:8a:97:c0:f9:d6:87:d4:54:e4:09:b3:86:eb:7e:2d:05:01:
c9:de:4b:c9:83:21:93:f7:63:d1:4a:70:52:70:d1:16:62:5d:
5d:0a:c1:38:9d:d5:1b:78:61:12:80:e5:2d:98:59:cd:13:ba:
aa:53:ca:ea:56:44:e4:a8:7d:e1:31:58:94:2e:72:6a:8d:8f:
68:fc:fb:56:af:93:35:78:a5:48:20:c5:6c:b4:30:ac:7b:44:
c0:9c:a1:a2:14:72:51:6d:17:32:22:85:91:22:f2:9a:fd:b1:
0f:b5:64:21:2c:ba:14:a4:05:5b:22:74:b8:fe:a2:c0:57:3b:
01:90:88:ce:8a:70:db:98:69:74:93:53:76:c3:0e:d3:94:dd:
26:39:d0:60:97:af:f2:76:5c:ff:2e:26:8d:53:05:79:4b:ea:
88:0f:0f:c9:ad:34:56:69:08:49:e7:1a:ba:e2:6b:e2:53:f3:
53:c3:f2:28:24:46:12:18:0b:39:3a:a9:41:5b:dc:c7:6f:f0:
c8:6f:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:09 2025 by rpki-client