Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/LYJ8y-uR0-OH5tKXM-_3VgidBqg.roa
File: LYJ8y-uR0-OH5tKXM-_3VgidBqg.roa (raw, json)
Hash identifier: ed9b0yvHE0xPwnwZheOVj7s3dk6ocpBCZAYzS7WNLFw=
Subject key identifier: 2D:82:7C:CB:EB:91:D3:E3:87:E6:D2:97:33:EF:F7:56:08:9D:06:A8
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 3E0199
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/LYJ8y-uR0-OH5tKXM-_3VgidBqg.roa
Signing time: Sat 01 Jan 2022 00:53:25 +0000
ROA not before: Sat 01 Jan 2022 00:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4063641 (0x3e0199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Jan 1 00:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d827ccbeb91d3e387e6d29733eff756089d06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:fb:68:d0:08:93:3c:9c:df:f8:95:4a:1e:
bb:8c:b8:7f:17:82:a3:b5:64:d8:2f:d8:04:a6:db:
fc:7b:63:5b:cc:6a:ab:c2:58:d4:7c:38:c6:8f:3b:
ac:b7:8c:52:0b:8a:53:d9:a2:53:f7:38:21:7d:25:
69:47:14:63:06:63:05:91:a4:c0:f9:05:a2:c9:cd:
5e:85:13:4d:b1:2e:97:73:cb:ac:d4:d6:80:59:95:
b8:6a:04:4e:3a:f4:74:13:ac:3b:f4:c0:8f:59:b1:
55:34:bc:2a:03:85:83:ff:49:0f:6c:b0:1b:ec:88:
cb:d5:c0:b2:a4:32:e6:7a:26:bd:b6:a2:7b:1a:80:
9e:de:0d:e9:c8:a5:2c:75:3a:cb:f4:a8:e8:c8:9c:
7a:dd:6e:e5:6c:a4:fc:73:45:75:e1:bd:b1:3a:70:
84:e9:ae:18:5a:2e:5e:75:4b:14:2b:66:03:bc:ac:
5b:8b:2c:07:59:dd:e3:af:e1:54:ee:c7:37:82:c3:
51:1f:8d:c4:fc:2d:e3:5c:ff:71:82:71:6b:8b:9a:
5b:e0:3c:d8:9c:82:43:1c:ec:20:e7:8b:19:d1:21:
ba:80:1e:ad:16:e2:fb:90:9b:ae:b0:84:1e:74:45:
9a:e2:df:a4:58:4d:10:b5:56:67:fa:7a:18:bf:bc:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:82:7C:CB:EB:91:D3:E3:87:E6:D2:97:33:EF:F7:56:08:9D:06:A8
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/LYJ8y-uR0-OH5tKXM-_3VgidBqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a5:04:a5:7a:60:4f:63:0c:50:4e:61:d1:95:4c:cf:a4:d2:
e3:88:83:6e:24:89:a4:f0:19:40:7d:7d:4a:f0:89:62:1b:02:
42:0f:6d:04:da:92:18:ac:88:3c:bb:00:77:fd:95:13:b0:43:
d1:33:c5:c9:14:e5:b9:d2:a7:35:59:d3:cf:40:ff:0b:90:4c:
2e:e0:b1:a5:9d:b5:69:bd:4e:66:3c:47:3a:ee:46:ea:a7:71:
c8:01:aa:57:79:68:4b:d4:c8:e2:52:09:6f:03:42:3a:f5:5d:
fc:8e:cd:3e:3b:13:71:6c:62:03:20:19:9a:c8:45:f3:f9:5c:
f5:90:6a:2e:b9:57:36:a5:e4:82:a0:3a:e9:70:cd:5a:80:c9:
05:5e:28:f6:fe:25:bb:e7:e5:db:02:cb:eb:bd:35:fc:61:bf:
a6:cd:c4:55:d9:e5:52:55:f9:66:7c:5f:b6:df:5b:1b:36:ad:
f4:cb:4e:4f:c7:77:90:3a:fb:dd:b6:0d:55:e5:95:f7:b4:95:
63:e0:35:22:c0:f4:7f:e7:8a:37:1f:1c:ea:be:16:8e:fc:4d:
0b:c0:86:e3:5b:b1:d7:bc:7e:07:12:db:9b:f5:6c:b5:a3:67:
fe:ce:4d:6a:21:94:7f:dc:49:ff:00:ee:e6:98:de:e9:d9:fc:
fe:fa:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:39 2025 by rpki-client