Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/bQxYH3ZrHmcfhrsAnb7y7BvMQss.roa
File: bQxYH3ZrHmcfhrsAnb7y7BvMQss.roa (raw, json)
Hash identifier: FZo/OpK8QG5oks63KoKpPdzCkKdoXSIXZIu8AFewf0w=
Subject key identifier: 6D:0C:58:1F:76:6B:1E:67:1F:86:BB:00:9D:BE:F2:EC:1B:CC:42:CB
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 0182EDF0EB6326D0B9B4DCF8BB2191813429
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/bQxYH3ZrHmcfhrsAnb7y7BvMQss.roa
Signing time: Tue 30 Aug 2022 08:49:25 +0000
ROA not before: Tue 30 Aug 2022 08:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:f0:eb:63:26:d0:b9:b4:dc:f8:bb:21:91:81:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Aug 30 08:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d0c581f766b1e671f86bb009dbef2ec1bcc42cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:ce:cc:b1:f5:b5:f5:5e:2f:ed:32:de:c4:
a8:a4:37:4b:2e:93:e2:2d:45:da:12:bd:9d:c5:a9:
c5:e4:bc:01:56:d3:bb:ed:aa:67:51:24:b8:3a:01:
17:67:38:9f:4a:75:74:5b:89:d5:2c:cc:91:f5:0f:
3e:10:e3:03:c4:06:7a:bc:de:ca:30:37:e4:15:d2:
fd:06:87:97:3e:09:7f:86:14:ec:17:8e:4a:7b:03:
07:4d:bd:24:99:7f:06:7e:34:c8:9e:42:1c:93:6d:
ff:e7:2f:d5:71:11:c4:80:ee:86:74:6b:06:b6:c7:
9f:da:78:03:99:01:0a:e0:96:7e:8c:f4:56:1b:92:
c7:52:23:04:24:af:d6:f9:4e:a2:b5:45:3d:bc:85:
95:63:1c:0c:92:d7:6c:03:f6:7f:94:37:51:6e:9d:
ca:55:a7:8b:d7:9a:1d:9e:e7:d0:c3:1e:ed:dc:54:
08:3f:1d:eb:f9:3d:fa:7a:4d:2b:15:d2:24:03:91:
c4:bc:38:ea:1f:dc:ee:37:3b:a9:81:88:e2:28:09:
29:db:bc:37:91:d4:00:10:98:48:7b:77:0e:7b:5b:
25:c3:a3:5c:e7:04:75:7d:27:c3:bc:04:f2:b5:78:
57:df:dc:09:c1:61:75:a2:c1:84:7f:fa:0e:27:34:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0C:58:1F:76:6B:1E:67:1F:86:BB:00:9D:BE:F2:EC:1B:CC:42:CB
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/bQxYH3ZrHmcfhrsAnb7y7BvMQss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:34:16:1d:b4:f7:32:41:ee:02:ba:26:41:9d:77:10:47:65:
cb:e1:ad:e7:71:71:34:26:6a:9a:0b:d8:de:55:42:fe:49:ac:
e3:c6:77:49:71:cd:d7:32:90:ad:ce:ef:d5:8f:1c:a1:93:b4:
d3:c5:a1:0b:65:c4:7a:09:3e:5d:92:05:f0:0e:37:0a:99:6e:
37:e9:f3:c7:a8:bb:0f:09:60:c9:f4:99:2e:43:cf:2c:d7:20:
bf:66:18:60:12:d4:a8:78:a0:b9:91:94:71:47:72:27:f7:eb:
5f:5c:04:65:c3:30:bd:e0:ca:9b:4c:b5:f8:99:01:f0:35:88:
02:d8:6e:89:8b:d6:bd:92:db:3b:68:d6:15:65:2a:91:c9:fd:
7f:0d:f6:2d:c8:d4:83:82:f1:62:5e:e2:52:6a:7d:2f:03:a6:
c3:9e:f9:0b:f5:33:d8:04:4e:13:c2:80:76:88:ae:7e:20:5e:
98:4c:78:3e:32:a1:33:f3:d6:0c:9c:d4:4e:11:89:a0:ac:6c:
fb:8b:2a:5b:08:03:39:1f:24:3e:04:51:06:66:54:7f:72:b3:
5c:6a:3a:89:cc:9c:f6:1e:ad:41:2f:1a:a9:58:37:38:e2:d4:
cc:a6:0a:f8:a0:30:b1:a3:7b:95:fa:1c:89:67:59:aa:4a:5e:
f2:94:38:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:50 2025 by rpki-client