Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/wIDK4t3MGwbsV-m11LLGdrEAs_g.roa
File: wIDK4t3MGwbsV-m11LLGdrEAs_g.roa (raw, json)
Hash identifier: 8ZkWCeqIU3cxSTD4DusmkSHO82HHC7AQOAvqT6WvXwk=
Subject key identifier: C0:80:CA:E2:DD:CC:1B:06:EC:57:E9:B5:D4:B2:C6:76:B1:00:B3:F8
Certificate issuer: /CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Certificate serial: 097CF766
Authority key identifier: 85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/wIDK4t3MGwbsV-m11LLGdrEAs_g.roa
Signing time: Sat 01 Jan 2022 13:07:18 +0000
ROA not before: Sat 01 Jan 2022 13:07:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200441
IP address blocks: 185.76.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159184742 (0x97cf766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852ece9c9a324d45c35f9559f329d8869dab53ba
Validity
Not Before: Jan 1 13:07:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c080cae2ddcc1b06ec57e9b5d4b2c676b100b3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:6c:31:19:17:19:f4:da:ad:76:5e:c1:fb:
de:e6:28:31:e8:6a:16:6b:e6:b7:ad:95:47:af:b2:
7a:4e:9b:05:bf:58:cc:0d:86:a0:79:59:ea:de:be:
56:01:36:51:2e:57:17:1e:a9:17:f8:fb:48:6d:c3:
c3:28:71:6d:e9:0d:15:3d:c3:76:b2:46:5f:7c:fb:
e3:aa:a8:17:e1:82:9b:cb:9b:58:86:3f:c3:f9:f1:
33:88:b2:fa:5c:93:c7:47:35:70:af:32:50:7d:86:
05:eb:85:46:11:71:85:de:bd:4c:eb:8c:53:7b:ac:
37:ae:70:d1:c1:b4:b6:cd:a5:13:e8:38:ad:99:72:
c0:c1:ae:e4:9f:57:94:8f:8d:4b:b0:34:cf:26:41:
4c:9c:03:14:51:06:86:39:0e:4a:28:87:87:9e:14:
1a:07:70:7e:5b:0c:49:19:14:0f:20:9f:91:93:04:
2e:eb:e3:3b:97:9f:95:c2:86:e4:43:8a:b3:55:89:
67:45:a9:36:ab:51:10:db:43:48:a2:c0:3e:0b:9b:
8c:3a:ca:81:dd:00:b7:f8:16:9d:96:79:56:04:6a:
44:36:d0:e2:5d:38:56:9e:b1:4a:f9:07:76:7b:b1:
19:e9:61:7e:37:40:9a:bd:2b:54:fd:d8:75:d3:36:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:CA:E2:DD:CC:1B:06:EC:57:E9:B5:D4:B2:C6:76:B1:00:B3:F8
X509v3 Authority Key Identifier:
keyid:85:2E:CE:9C:9A:32:4D:45:C3:5F:95:59:F3:29:D8:86:9D:AB:53:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/wIDK4t3MGwbsV-m11LLGdrEAs_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d3cce6-b47b-4d06-a30f-eb2411d212ab/1/hS7OnJoyTUXDX5VZ8ynYhp2rU7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.81.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7c:94:1b:9e:a0:cc:71:a8:d3:7b:8e:4c:ca:c9:5a:d4:4f:
18:12:f2:b2:97:42:08:12:c5:a6:90:13:eb:cb:24:da:a5:a3:
a0:a5:a8:bf:44:de:3a:ce:7b:32:c6:01:23:cd:fd:95:c2:fb:
bc:24:5b:9c:de:c4:69:bc:f8:b5:56:ef:4b:91:b3:4c:3a:5c:
fd:b1:a1:4b:19:07:e2:6c:41:94:ea:55:f9:d5:c3:e3:4d:4c:
fa:82:76:b8:a6:0c:87:ba:ae:6c:c2:53:05:8f:3c:2b:d0:3c:
b4:c7:02:2b:1d:6a:e7:0e:f1:73:93:df:c8:23:86:65:5f:85:
c0:1b:60:fa:25:86:3f:34:1b:59:49:9a:c5:f9:12:0a:be:4c:
0f:1f:70:67:db:38:b9:16:fb:7b:20:2e:06:4f:31:87:51:ef:
45:a1:e3:27:97:26:8e:e8:0f:86:95:bb:6f:34:1b:df:ae:8a:
59:41:62:7e:f0:b6:b9:02:46:15:e5:f0:e1:59:07:d3:4e:da:
1c:1c:e1:bc:16:80:dd:33:1e:ef:85:b1:52:f3:d6:aa:3b:3a:
e3:3c:e5:b9:e4:32:71:5f:f2:55:5e:93:13:4e:04:7d:3c:83:
15:39:4c:17:80:96:1f:d3:e3:82:d7:b9:bc:10:bf:37:49:f7:
b6:23:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:06 2025 by rpki-client