Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa
File: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (raw, json)
Hash identifier: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=
Subject key identifier: C0:74:2A:B0:FF:B0:0D:D9:6B:1B:C1:C4:F8:86:E4:FF:A9:F6:A2:C3
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194266BA91DC7A7B998C2035585F0AB7AE7
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.76.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:1d:c7:a7:b9:98:c2:03:55:85:f0:ab:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0742ab0ffb00dd96b1bc1c4f886e4ffa9f6a2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:e4:aa:bd:9b:09:3f:8a:02:a7:d2:42:1a:
39:41:11:e5:32:db:0e:71:4f:34:26:31:80:43:87:
e7:38:dd:db:05:2a:18:6b:30:4c:6d:79:71:a0:8f:
3a:93:d1:fc:7b:f0:f8:88:0d:8b:75:7a:cf:d1:16:
54:ae:c0:97:3e:cc:bb:38:7a:85:9f:3d:c6:eb:f5:
17:2e:9d:68:27:48:d2:01:6b:c7:4c:19:88:2e:26:
d5:05:85:09:31:72:bf:23:ee:fc:38:30:49:3e:db:
9b:2a:a7:b2:48:b5:e5:0d:5f:81:db:f2:a3:fb:11:
3b:93:63:5d:7c:68:6a:9a:0c:2d:05:9d:19:e2:db:
d1:b5:16:be:d3:ef:d4:97:33:60:3a:61:85:8f:dc:
79:d5:13:ad:4d:8a:d6:21:b5:b2:d8:1f:99:f9:08:
60:ed:8b:35:48:e8:0b:40:64:a5:c1:03:0b:23:79:
f4:7f:60:a6:d2:87:02:ca:98:c1:94:e0:4e:05:42:
3c:77:56:49:a7:cc:60:06:ce:ba:c1:70:4b:c0:b9:
c6:8f:71:33:1b:1c:cc:eb:9b:60:97:bc:41:da:6a:
05:b1:41:7c:82:cd:b4:cb:9a:0c:21:a8:95:d6:1e:
61:53:9a:ee:a1:78:6b:b6:00:f6:2f:e4:59:c8:31:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:2A:B0:FF:B0:0D:D9:6B:1B:C1:C4:F8:86:E4:FF:A9:F6:A2:C3
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:72:36:31:02:ef:57:f3:07:71:6b:fc:eb:ed:27:f6:5e:93:
18:f0:04:2c:c2:9b:44:ff:5d:fd:0c:03:db:90:35:e6:fb:d4:
64:72:0e:5b:0e:15:7d:5b:57:6f:09:92:85:c4:cb:cc:18:ea:
a1:1e:48:86:ff:9d:f6:58:d2:31:83:65:7a:62:de:87:53:1a:
0a:89:80:26:b5:15:d0:ff:d8:be:3c:5b:ee:93:38:7c:b3:55:
a1:5d:78:47:fd:ca:f9:14:5f:22:21:72:d5:22:2d:f3:cd:a9:
c2:9e:be:d1:1b:01:1a:6e:a9:b8:e6:85:8f:4b:dd:15:4f:0d:
9b:f2:7e:58:7b:70:2c:11:65:f0:5f:09:1d:3e:f0:ad:dd:11:
16:fe:2a:44:ee:da:da:3d:f7:7e:e3:a7:82:17:d9:61:6b:85:
79:f3:19:43:ff:36:95:e9:75:aa:d1:97:2a:96:ec:2d:5e:a1:
c2:4d:6e:d6:85:18:8e:21:02:a2:9e:ec:ed:3c:1e:6e:e1:fc:
81:1b:79:d8:07:a8:a0:af:a8:c5:af:76:28:f9:ba:5a:ec:ef:
aa:c7:8c:9d:07:f8:e3:24:8b:c6:b8:72:ed:df:62:ca:b9:f0:
37:73:c2:7c:2e:1a:af:7a:60:ef:80:c6:e8:fe:3d:f8:cd:47:
40:3b:fc:71
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQma6kdx6e5mMIDVYXwq3rnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1
MGQ4MTMwHhcNMjUwMTAyMDk0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDc0MmFiMGZmYjAwZGQ5NmIxYmMxYzRmODg2ZTRmZmE5ZjZhMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWrkqr2bCT+KAqfSQho5QRHlMtsO
cU80JjGAQ4fnON3bBSoYazBMbXlxoI86k9H8e/D4iA2LdXrP0RZUrsCXPsy7OHqF
nz3G6/UXLp1oJ0jSAWvHTBmILibVBYUJMXK/I+78ODBJPtubKqeySLXlDV+B2/Kj
+xE7k2NdfGhqmgwtBZ0Z4tvRtRa+0+/UlzNgOmGFj9x51ROtTYrWIbWy2B+Z+Qhg
7Ys1SOgLQGSlwQMLI3n0f2Cm0ocCypjBlOBOBUI8d1ZJp8xgBs66wXBLwLnGj3Ez
GxzM65tgl7xB2moFsUF8gs20y5oMIaiV1h5hU5ruoXhrtgD2L+RZyDF/5wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMB0KrD/sA3ZaxvBxPiG5P+p9qLDMB8GA1UdIwQY
MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0
LTJmYmIyMDhhZDE4Mi8xL3dIUXFzUC13RGRsckc4SEUtSWJrXzZuMm9zTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4
Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5TCUw
DQYJKoZIhvcNAQELBQADggEBACpyNjEC71fzB3Fr/OvtJ/ZekxjwBCzCm0T/Xf0M
A9uQNeb71GRyDlsOFX1bV28JkoXEy8wY6qEeSIb/nfZY0jGDZXpi3odTGgqJgCa1
FdD/2L48W+6TOHyzVaFdeEf9yvkUXyIhctUiLfPNqcKevtEbARpuqbjmhY9L3RVP
DZvyflh7cCwRZfBfCR0+8K3dERb+KkTu2to9937jp4IX2WFrhXnzGUP/NpXpdarR
lyqW7C1eocJNbtaFGI4hAqKe7O08Hm7h/IEbedgHqKCvqMWvdij5ulrs76rHjJ0H
+OMki8a4cu3fYsq58DdzwnwuGq96YO+Axuj+PfjNR0A7/HE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:09 2025 by rpki-client