Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/hKBNs-9E-RRnGnBCg2fdyg9bqRI.roa
File: hKBNs-9E-RRnGnBCg2fdyg9bqRI.roa (raw, json)
Hash identifier: cALkD8CF+9owsYwkwXsea6Lg5+eNT8mVg6LDUZE6dNE=
Subject key identifier: 84:A0:4D:B3:EF:44:F9:14:67:1A:70:42:83:67:DD:CA:0F:5B:A9:12
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 0185704BDE2FE11F664A1A69B3B9E694FF2E
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/hKBNs-9E-RRnGnBCg2fdyg9bqRI.roa
Signing time: Mon 02 Jan 2023 02:24:58 +0000
ROA not before: Mon 02 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:de:2f:e1:1f:66:4a:1a:69:b3:b9:e6:94:ff:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Jan 2 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84a04db3ef44f914671a70428367ddca0f5ba912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:30:41:4b:ed:dc:c6:ab:c3:07:95:ef:37:
b9:d1:e4:ae:8f:98:09:41:0d:2b:58:10:6f:44:37:
bb:bf:16:51:a1:dd:05:b6:00:19:71:64:aa:47:9e:
ba:2a:58:0f:94:4f:77:05:46:5e:a2:e1:f2:b9:67:
6e:68:ab:8d:58:10:78:da:e6:20:e0:cd:d1:9b:9d:
43:07:16:98:76:69:02:d3:52:9a:18:58:43:1f:6a:
03:ce:7e:0e:0d:9e:ea:c0:8d:79:d3:99:65:8e:33:
23:24:aa:cf:41:cb:d0:b6:7b:69:7e:70:8c:5a:1a:
0e:71:27:ab:a9:0f:c8:c2:e4:1c:83:b7:61:a9:bf:
b1:35:60:23:f7:a0:8f:7f:bc:21:ed:ec:c3:91:56:
18:91:e7:27:c9:08:0f:ba:ee:8b:de:75:ff:a8:ed:
06:10:f7:36:d7:0a:7a:2a:53:af:16:97:85:b1:28:
c8:83:24:f2:0c:cf:ef:a2:54:c3:c0:fb:30:78:3d:
ad:90:79:d1:93:9d:4a:0a:45:c6:f1:f4:0b:cd:b0:
b5:b5:ae:7c:3b:7c:ec:32:67:55:a8:97:4b:d8:4e:
7a:27:af:3d:fa:00:9d:fa:02:46:6f:f2:cd:84:15:
63:f6:c4:a1:ec:06:51:2a:b4:5e:71:02:26:12:af:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A0:4D:B3:EF:44:F9:14:67:1A:70:42:83:67:DD:CA:0F:5B:A9:12
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/hKBNs-9E-RRnGnBCg2fdyg9bqRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:56:4b:df:7f:4b:d2:50:0b:36:3b:7f:2d:30:ca:5a:82:73:
e8:1f:7f:87:41:b2:56:4c:4f:da:70:01:3e:98:25:fc:71:b6:
27:8e:1b:77:21:72:f6:d6:76:0d:16:c1:46:f4:48:6f:bc:87:
bc:90:cc:87:4a:c1:d3:26:bf:1d:4d:77:a9:83:f7:63:2d:38:
4e:c3:f9:a0:8e:af:55:07:df:70:49:a5:39:5c:f4:d5:53:98:
80:12:50:e2:08:89:20:c1:0b:7e:5d:b7:5b:00:7a:04:18:ff:
1a:99:88:5b:75:8f:b2:2d:b9:50:a9:c5:f6:47:e9:08:ad:85:
74:a2:f0:7a:f3:95:d6:0e:91:57:09:dd:ac:16:ca:b3:ad:2d:
3a:ef:16:45:10:07:bd:7b:71:91:78:91:97:2a:6c:80:9c:d9:
89:c3:17:96:08:27:99:73:81:40:69:d5:ca:25:1b:df:89:8a:
77:e4:c7:1d:26:d8:fb:cc:ce:d1:c4:37:f7:14:ec:38:9d:9f:
f2:c0:0f:cb:80:3e:a8:c8:27:0c:a8:21:4c:ce:9a:57:61:a0:
1f:b2:58:6a:5c:cc:5e:d7:82:0b:e4:18:66:37:36:c4:6f:eb:
62:ad:3a:b3:05:2a:42:4e:c6:bc:82:e6:d7:8b:1a:b5:de:0a:
75:ec:a8:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwS94v4R9mShpps7nmlP8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNTZiMTc5NTczYzc1N2U0NTVkNTA0Nzk2MmRlMzAxNzY4
NTQwNTUwHhcNMjMwMTAyMDIyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGEwNGRiM2VmNDRmOTE0NjcxYTcwNDI4MzY3ZGRjYTBmNWJhOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh0wQUvt3MarwweV7ze50eSuj5gJ
QQ0rWBBvRDe7vxZRod0FtgAZcWSqR566KlgPlE93BUZeouHyuWduaKuNWBB42uYg
4M3Rm51DBxaYdmkC01KaGFhDH2oDzn4ODZ7qwI1505lljjMjJKrPQcvQtntpfnCM
WhoOcSerqQ/IwuQcg7dhqb+xNWAj96CPf7wh7ezDkVYYkecnyQgPuu6L3nX/qO0G
EPc21wp6KlOvFpeFsSjIgyTyDM/volTDwPsweD2tkHnRk51KCkXG8fQLzbC1ta58
O3zsMmdVqJdL2E56J689+gCd+gJGb/LNhBVj9sSh7AZRKrRecQImEq8L2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISgTbPvRPkUZxpwQoNn3coPW6kSMB8GA1UdIwQY
MBaAFHNWsXlXPHV+RV1QR5Yt4wF2hUBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzFheGVWYzhkWDVGWFZCSGxpM2pBWGFGUUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzgwYjYtMTBhNC00NzMwLWIzYmMt
YWI4MGE5OGEwMzM1LzEvaEtCTnMtOUUtUlJuR25CQ2cyZmR5ZzlicVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kNzgwYjYtMTBhNC00NzMwLWIzYmMtYWI4MGE5OGEwMzM1
LzEvYzFheGVWYzhkWDVGWFZCSGxpM2pBWGFGUUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaSvMA0G
CSqGSIb3DQEBCwUAA4IBAQDCVkvff0vSUAs2O38tMMpagnPoH3+HQbJWTE/acAE+
mCX8cbYnjht3IXL21nYNFsFG9EhvvIe8kMyHSsHTJr8dTXepg/djLThOw/mgjq9V
B99wSaU5XPTVU5iAElDiCIkgwQt+XbdbAHoEGP8amYhbdY+yLblQqcX2R+kIrYV0
ovB685XWDpFXCd2sFsqzrS067xZFEAe9e3GReJGXKmyAnNmJwxeWCCeZc4FAadXK
JRvfiYp35McdJtj7zM7RxDf3FOw4nZ/ywA/LgD6oyCcMqCFMzppXYaAfslhqXMxe
14IL5BhmNzbEb+tirTqzBSpCTsa8gubXixq13gp17KiD
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:43 2025 by rpki-client