Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/xmBAusztWb_TZlBZ7hokvOHYZTU.roa
File: xmBAusztWb_TZlBZ7hokvOHYZTU.roa (raw, json)
Hash identifier: mcpxA0KrBwcuqcPQhek9lBJMus2ZVtE5ZLXKrCX+OUQ=
Subject key identifier: C6:60:40:BA:CC:ED:59:BF:D3:66:50:59:EE:1A:24:BC:E1:D8:65:35
Certificate issuer: /CN=09ed2bca014c2c44e90b844de89426223c390cf6
Certificate serial: 075A2D
Authority key identifier: 09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/xmBAusztWb_TZlBZ7hokvOHYZTU.roa
Signing time: Sat 01 Jan 2022 01:53:27 +0000
ROA not before: Sat 01 Jan 2022 01:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.161.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481837 (0x75a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ed2bca014c2c44e90b844de89426223c390cf6
Validity
Not Before: Jan 1 01:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c66040bacced59bfd3665059ee1a24bce1d86535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:3c:fc:64:5d:f6:75:63:54:72:18:a9:ac:
22:7d:b5:7f:51:37:5f:7a:8b:87:d8:96:b3:63:77:
0a:a2:f3:a5:22:9e:92:57:f4:df:69:83:41:43:fe:
e4:b5:e5:28:2e:be:53:8e:d2:a9:00:32:c6:68:0c:
44:17:3e:d4:d9:10:66:7a:2a:ee:3d:e8:c6:29:9b:
99:65:3b:4b:fd:14:64:ae:f8:a6:e2:75:e3:03:15:
16:35:6a:c6:fd:ae:2a:b6:cb:7e:30:71:08:f6:43:
b2:6e:c7:a2:44:78:47:db:cd:f8:b3:f7:1c:1b:90:
3c:13:fe:8e:87:da:fe:ec:4c:d8:28:ab:52:e0:d9:
38:b8:14:cd:42:6f:4a:97:c2:be:a2:d5:6f:4a:ba:
f9:5f:34:2d:38:55:02:85:ac:48:e8:48:d7:1f:7d:
9a:99:51:12:7c:5f:8e:67:25:d6:1c:c6:45:36:ac:
f3:21:dd:41:2a:94:58:9c:fb:5b:36:f5:65:e8:97:
96:cb:63:32:23:59:31:de:9f:c4:82:67:5e:fb:d0:
3c:5e:e7:34:c4:f8:54:e3:78:50:bd:06:aa:f7:e0:
37:4c:4a:93:c6:40:53:f0:06:72:d4:8a:8d:f8:ee:
36:8c:1a:ab:9f:ff:0b:20:59:51:6d:0e:86:fc:df:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:40:BA:CC:ED:59:BF:D3:66:50:59:EE:1A:24:BC:E1:D8:65:35
X509v3 Authority Key Identifier:
keyid:09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/xmBAusztWb_TZlBZ7hokvOHYZTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:13:fe:a9:22:c2:09:87:5a:a3:ea:9f:57:8b:e3:97:e7:87:
ec:ef:2a:28:55:88:39:fb:ce:80:7c:cc:5b:f4:ef:12:9f:68:
2f:c7:6d:c4:15:5e:d1:19:47:45:21:2b:68:86:64:77:9d:26:
49:1f:d0:bf:7c:1b:0d:65:bc:86:6a:20:a1:79:ae:69:58:61:
e6:ac:bc:29:21:17:6e:22:6c:16:b3:44:4f:67:18:88:c4:95:
ba:17:4e:cb:2f:7e:52:8e:24:1d:eb:e4:59:f5:ab:14:fd:58:
ad:a2:14:88:fe:5a:cd:94:c0:1a:62:be:c7:0a:dd:20:b7:33:
fe:1e:49:54:f9:00:98:36:12:46:e1:ac:86:14:de:95:a9:d0:
bc:dd:7f:8e:9b:88:b5:4a:29:51:72:5e:90:76:19:e9:88:e9:
a9:fb:ae:b7:59:f9:73:9f:39:bc:f9:04:fb:e9:c6:2a:3f:32:
f4:38:df:8a:89:82:32:ca:a2:e0:de:a3:6f:ec:95:57:03:60:
17:4f:e1:9f:21:57:13:28:17:ea:9e:e4:f8:99:87:06:2d:7a:
b6:c9:94:6b:21:97:46:6a:d7:a7:30:63:53:f1:b9:19:9a:04:
43:24:04:d4:0f:fe:da:23:27:f9:07:87:31:2f:f5:ea:68:63:
68:3d:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:01 2025 by rpki-client