Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/cwmMu4XWVSEViMSEtTr-J2QN5-I.roa
File: cwmMu4XWVSEViMSEtTr-J2QN5-I.roa (raw, json)
Hash identifier: R+jszjQ3lAWlnUrrXNQiOQUqodYLFhJW08rg5xzHOrM=
Subject key identifier: 73:09:8C:BB:85:D6:55:21:15:88:C4:84:B5:3A:FE:27:64:0D:E7:E2
Certificate issuer: /CN=0acf0a954639c83582974bd29c1992272b3683a3
Certificate serial: 0117666D
Authority key identifier: 0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/cwmMu4XWVSEViMSEtTr-J2QN5-I.roa
Signing time: Sat 01 Jan 2022 13:05:09 +0000
ROA not before: Sat 01 Jan 2022 13:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.202.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18310765 (0x117666d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf0a954639c83582974bd29c1992272b3683a3
Validity
Not Before: Jan 1 13:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73098cbb85d655211588c484b53afe27640de7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:7a:4e:da:dd:1a:f1:d7:3b:74:20:fb:17:
59:ed:98:7c:8f:fb:89:4d:03:75:72:30:c6:a2:80:
65:42:ce:f8:dd:cb:27:97:c6:f2:6b:d4:5d:71:a4:
de:e5:2e:a0:8e:d0:18:05:d3:a0:05:bf:17:2b:dc:
7d:85:4c:62:1d:e0:66:50:eb:90:5a:ae:50:ad:9a:
7a:28:4e:de:09:b8:94:c0:01:30:72:6e:a0:9d:b5:
a2:7b:9e:01:95:cd:5b:8e:74:0a:ae:c8:48:98:5f:
9e:98:b1:3f:ca:e2:ca:43:b0:fd:52:66:cd:c9:31:
75:e3:c5:1e:a8:12:7f:fa:f7:3d:41:0b:ad:90:97:
83:3b:36:76:1c:6d:88:15:0b:2d:f2:41:ab:09:24:
14:a4:9d:ff:16:89:75:27:29:a0:7a:48:cc:fd:29:
17:14:9a:0e:c3:fc:c5:42:50:d7:f8:cf:f6:02:79:
26:9e:b1:c9:4f:7e:e4:51:74:f4:c4:d2:a6:59:ed:
0e:fd:45:74:4d:26:ca:24:28:cb:51:5b:b3:31:ac:
3c:9f:23:72:d9:3f:47:35:f0:df:d4:e4:04:3e:10:
09:45:04:0b:9c:6c:51:47:41:87:53:f5:a1:45:52:
8f:77:6b:cb:ed:34:4d:bf:59:0d:5d:6b:ce:fa:d0:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:8C:BB:85:D6:55:21:15:88:C4:84:B5:3A:FE:27:64:0D:E7:E2
X509v3 Authority Key Identifier:
keyid:0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/cwmMu4XWVSEViMSEtTr-J2QN5-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.110.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d2:af:48:29:98:e0:a5:26:d1:ff:f0:19:a2:ef:f4:0d:36:
74:ce:5f:16:bd:da:1c:53:34:d0:ed:7a:3d:30:1a:14:bf:8c:
02:3b:34:f3:e6:d6:60:f8:e6:be:5a:5a:ad:52:6d:0c:d5:39:
79:e9:23:b7:db:f4:ed:a2:e7:1a:3b:49:fd:99:20:8f:e6:ec:
ed:f1:60:ee:6e:a4:cc:0f:6a:f9:cf:38:ac:c8:45:0a:0e:62:
21:d0:6c:a6:23:30:73:ca:2a:d1:e0:78:a2:70:14:d8:16:d4:
1c:9f:53:b9:76:83:12:81:ca:3e:dc:1f:04:40:b3:3d:2a:86:
e2:1c:b9:4a:7b:a2:89:80:1c:dd:c2:ef:04:81:bf:9c:88:55:
c5:fd:50:f8:00:23:3f:30:fa:e7:41:25:3b:9c:8d:de:41:4f:
5e:48:12:00:e9:16:b5:15:9c:6f:97:64:77:ea:c4:70:05:09:
0a:4d:43:6b:7e:4e:5f:4b:98:a2:28:ae:de:15:67:d9:8a:b1:
bf:98:24:1d:47:16:7e:9d:2f:bb:fa:3e:0e:ed:1d:86:37:f7:
d0:3d:22:32:26:bd:c3:d2:28:d8:9e:8a:99:a3:48:42:54:25:
72:42:20:19:3e:d5:f3:9d:dc:a3:6e:26:33:1e:f5:59:b1:98:
99:de:56:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:49:07 2025 by rpki-client