Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/vrVKH3dSd4hboDIbUx7510jbcRI.roa
File: vrVKH3dSd4hboDIbUx7510jbcRI.roa (raw, json)
Hash identifier: vAx6oojXIHxS5HdRbvObwNfBvYUu7RkOKiqETcdFbuA=
Subject key identifier: BE:B5:4A:1F:77:52:77:88:5B:A0:32:1B:53:1E:F9:D7:48:DB:71:12
Certificate issuer: /CN=7356b179573c757e455d5047962de30176854055
Certificate serial: 0185704BDEDEBD4F70FCF6857914DAD6A737
Authority key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/vrVKH3dSd4hboDIbUx7510jbcRI.roa
Signing time: Mon 02 Jan 2023 02:24:58 +0000
ROA not before: Mon 02 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 185.164.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:de:de:bd:4f:70:fc:f6:85:79:14:da:d6:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7356b179573c757e455d5047962de30176854055
Validity
Not Before: Jan 2 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beb54a1f775277885ba0321b531ef9d748db7112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:f3:4c:9d:65:fa:f8:cb:27:f5:db:cf:f5:
00:8f:c0:d4:3b:07:e0:69:6e:80:38:14:7a:d2:33:
cc:56:fe:b6:3a:eb:2f:31:04:bd:d9:bf:76:16:43:
e8:2f:21:38:5f:08:01:fd:a8:b3:a2:f9:06:4f:26:
75:09:6c:8a:02:56:be:b7:1b:5f:4c:fd:ef:e4:3e:
d4:87:ac:17:6c:49:ad:4d:d1:91:7e:2d:cf:e6:83:
2a:70:3c:95:ac:9b:75:47:2f:fd:a8:6a:a4:da:79:
4b:be:00:58:04:e0:87:74:fd:af:f2:c8:a7:70:ab:
42:cd:69:06:8b:81:cf:61:ac:32:a9:3b:f6:98:f3:
35:da:4b:a4:d5:8a:59:ed:c5:d2:5c:60:83:60:3a:
d5:31:9b:4d:36:11:40:20:25:18:f2:79:26:bc:de:
de:5c:ff:80:7b:b8:f4:d2:a4:cc:a3:c6:90:10:57:
b3:08:9c:18:e7:dc:03:f1:db:f9:70:aa:74:61:36:
69:70:bf:16:ae:f2:8f:d6:ae:5d:50:86:7f:42:7e:
2d:41:0a:ed:8f:a7:37:cd:8c:5c:81:e6:da:bb:fc:
c9:8d:44:f7:19:10:64:13:be:19:39:47:ae:99:f1:
c2:c4:99:a4:c9:27:0a:37:57:6a:85:7a:83:a1:af:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:4A:1F:77:52:77:88:5B:A0:32:1B:53:1E:F9:D7:48:DB:71:12
X509v3 Authority Key Identifier:
keyid:73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/vrVKH3dSd4hboDIbUx7510jbcRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fe:39:84:3a:53:a1:05:55:ed:9e:c4:1b:66:ec:71:4a:24:
c1:59:9a:ce:a1:d3:1e:70:6d:85:74:44:6d:48:ee:77:7a:6c:
4f:1a:67:5d:e6:62:ea:eb:4f:a1:f6:e0:a9:f8:d6:be:58:b5:
9b:08:d1:04:67:69:04:1e:0a:50:a0:c5:f1:64:5c:e1:84:a8:
f1:cd:3e:26:3c:a1:bf:4d:b9:da:54:07:e5:bc:31:0e:de:93:
ec:42:3e:c8:43:e5:f9:24:a4:53:c6:b3:6b:b7:6a:1f:86:23:
82:19:9c:ff:1a:22:6b:c2:16:0e:34:ba:38:90:ce:d7:df:3c:
76:90:f9:11:a7:77:58:bf:a1:d3:ac:70:7f:a6:3f:bb:95:d5:
ac:b6:2a:e8:f4:bb:c0:bb:d4:a6:b3:06:96:dd:4e:59:c1:67:
43:c1:64:dd:40:ff:25:a4:1a:f4:b5:46:ce:8b:7a:0f:fa:96:
6b:cc:f1:24:0f:6d:33:f7:52:05:dd:52:f9:35:54:ae:a5:dc:
10:60:2c:d8:a4:b0:a5:b6:6f:5f:35:9f:69:18:df:ba:cd:98:
06:0f:e6:fb:ef:54:66:16:bc:5a:fd:65:55:3e:47:9a:d2:10:
a3:9f:18:fe:3b:e7:95:86:5b:71:ae:ab:6b:c2:41:6d:30:34:
bb:d6:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:11 2025 by rpki-client