Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/jop9I76IYZwBELNaT-ZQAcQ49rU.roa
File: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (raw, json)
Hash identifier: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=
Subject key identifier: 8E:8A:7D:23:BE:88:61:9C:01:10:B3:5A:4F:E6:50:01:C4:38:F6:B5
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019427B3B7889D82D52101C8801BFA6F1C47
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/jop9I76IYZwBELNaT-ZQAcQ49rU.roa
Signing time: Thu 02 Jan 2025 15:47:56 +0000
ROA not before: Thu 02 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198622
IP address blocks: 185.167.164.0/22 maxlen: 24
2a0b:7e00::/36 maxlen: 48
2a0b:7e00:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:b7:88:9d:82:d5:21:01:c8:80:1b:fa:6f:1c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jan 2 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8a7d23be88619c0110b35a4fe65001c438f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:c3:36:77:34:21:da:b0:c1:9e:06:1f:f6:
75:5f:33:15:6a:fc:e3:8d:97:6a:21:ef:74:9a:ba:
76:9c:8f:e7:67:fa:dd:2b:21:16:52:8f:05:e4:71:
93:67:31:9d:ee:d4:c9:c6:00:b1:8b:80:e6:3c:cc:
9a:3f:59:e7:99:13:9a:f9:b4:ad:93:51:df:b9:b4:
73:0a:d1:97:c8:41:ac:0c:ed:ae:9c:95:62:be:87:
21:38:96:f2:1e:bf:38:ec:1e:c8:59:56:7c:02:3c:
57:3f:c6:fb:f6:a8:3e:4c:f5:26:c6:f7:a1:79:48:
16:bf:3f:5b:ca:51:78:e9:7e:0f:73:11:80:44:d8:
0c:8f:9f:1b:b8:ad:83:4e:7c:4f:e0:ec:cd:62:3f:
04:bf:4e:0c:9b:29:01:39:6c:68:0c:3c:42:f9:56:
8b:09:d9:9c:ab:57:5f:6b:24:37:8a:d0:63:f3:c8:
dc:2d:fe:cc:d7:6e:76:5b:9c:3f:00:b5:3c:75:19:
ea:d7:58:e4:95:9a:ce:cc:40:38:b3:bd:ea:42:6d:
d2:b3:de:4b:d7:fc:cd:8f:54:94:96:ae:73:2a:3a:
60:cb:0e:9b:04:61:df:76:34:80:9a:88:eb:1f:4d:
b2:b5:ea:a3:b1:2e:1f:70:ec:a2:a6:ae:41:b1:7f:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:7D:23:BE:88:61:9C:01:10:B3:5A:4F:E6:50:01:C4:38:F6:B5
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/jop9I76IYZwBELNaT-ZQAcQ49rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.164.0/22
IPv6:
2a0b:7e00::/35
Signature Algorithm: sha256WithRSAEncryption
5d:92:0c:79:dc:c8:3e:b8:33:55:27:b3:2e:11:fb:b6:7c:31:
2b:0d:d8:cb:24:2e:52:d5:07:72:d9:96:8f:31:38:07:cc:40:
5a:1d:f7:cf:0d:ea:65:49:53:07:8f:2d:5b:9c:78:9e:68:dc:
f9:d2:ed:6a:59:3b:64:8c:34:75:77:61:c7:82:f8:a6:1f:a0:
46:14:e1:7b:34:c1:92:41:45:33:d6:27:ec:01:d4:10:3d:9b:
9d:bf:2a:00:f9:25:b0:46:c7:8f:a0:df:a3:4f:24:26:8d:9c:
54:47:a2:10:89:17:f2:64:66:a5:46:53:07:c0:40:da:b4:fc:
2e:97:f5:ec:f2:ca:fa:0b:e0:8e:df:4d:86:14:37:a2:fd:18:
4f:3b:08:cb:41:95:d6:43:6f:ed:b6:d1:16:b0:0f:9c:90:f0:
08:ec:55:69:4a:bb:a7:a3:a3:b5:6d:08:a1:fc:65:1f:e8:23:
9a:f1:33:f7:58:7b:44:f7:67:4f:04:3e:d2:2f:a5:92:e2:de:
6d:78:3e:f7:07:67:e9:04:5f:4f:37:d9:1a:ff:77:0b:c8:38:
c7:0d:1d:dc:80:28:cd:ac:a4:02:96:93:cb:b9:6f:ff:4b:1b:
76:82:17:1f:52:12:28:6e:0d:f4:ea:27:8d:34:ed:cc:52:be:
c1:24:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:38:52 2025 by rpki-client