Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iXrcWEu1R1jwEMI0efxs7cafLtc.roa
File: iXrcWEu1R1jwEMI0efxs7cafLtc.roa (raw, json)
Hash identifier: dyHHTR6tHopjP3evC07OExswSf7VbegxjcuuAnFiNbI=
Subject key identifier: 89:7A:DC:58:4B:B5:47:58:F0:10:C2:34:79:FC:6C:ED:C6:9F:2E:D7
Certificate issuer: /CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Certificate serial: 0185734CC58B7493E5D2E4A38A7E2C8B8AA3
Authority key identifier: 7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iXrcWEu1R1jwEMI0efxs7cafLtc.roa
Signing time: Mon 02 Jan 2023 16:24:49 +0000
ROA not before: Mon 02 Jan 2023 16:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62164
IP address blocks: 80.76.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:c5:8b:74:93:e5:d2:e4:a3:8a:7e:2c:8b:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a83b3271c02df32db3c51fc40a9538368834f0b
Validity
Not Before: Jan 2 16:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=897adc584bb54758f010c23479fc6cedc69f2ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:66:ca:2f:45:18:a2:73:83:53:1f:02:95:
ac:c2:d5:ac:da:c6:20:f7:b3:8f:0d:ee:ba:d3:1e:
07:5d:ba:8f:a0:4a:08:7e:f7:d8:d2:a7:4c:36:f7:
b7:ea:fd:1a:8f:78:88:e9:85:f4:62:3b:eb:82:01:
e2:b4:c4:53:c3:54:23:ef:2b:08:66:31:ba:54:fc:
67:96:b2:28:0c:c6:24:bd:7a:0c:93:41:93:95:10:
8d:07:3b:6a:5d:5a:ac:ac:cb:7a:eb:5d:bb:3f:98:
64:63:47:f3:20:e4:38:37:e6:47:a4:8e:dc:aa:58:
63:6b:f6:73:f4:ad:0f:6f:38:de:57:d8:7b:79:b3:
63:d3:07:a0:0b:74:ea:c1:19:43:b9:71:11:a6:03:
54:1a:ce:7e:a2:ed:ab:65:35:a0:d6:e3:f4:87:66:
fc:70:93:18:69:4f:84:d4:e8:c9:0b:a8:68:89:f7:
4c:30:53:47:e4:26:ab:e9:ea:a3:4f:e4:f2:f8:eb:
f1:6b:ef:ae:67:82:8d:4b:3c:b7:8d:a1:82:43:f2:
53:a7:b7:41:8a:43:34:2a:b8:d4:9d:fa:ea:0f:dc:
05:a3:96:38:77:e5:40:5c:0b:27:81:49:9e:e9:9f:
65:81:99:de:8b:c3:c5:12:3a:94:1d:c5:59:be:34:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:DC:58:4B:B5:47:58:F0:10:C2:34:79:FC:6C:ED:C6:9F:2E:D7
X509v3 Authority Key Identifier:
keyid:7A:83:B3:27:1C:02:DF:32:DB:3C:51:FC:40:A9:53:83:68:83:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoOzJxwC3zLbPFH8QKlTg2iDTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/iXrcWEu1R1jwEMI0efxs7cafLtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cb0032-855f-4422-b813-8366df0f4438/1/eoOzJxwC3zLbPFH8QKlTg2iDTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b8:b5:7d:dc:97:f3:ef:83:0b:c7:a1:0e:11:99:38:7a:00:
74:ac:24:03:56:f9:e2:bd:a5:da:63:6b:64:67:8f:94:1d:fe:
97:08:d1:2e:00:bf:9c:fd:e7:8c:44:43:ac:7c:56:3e:a7:3a:
4f:e4:5f:cd:11:e8:87:57:49:d8:cd:dd:64:10:e9:5f:b5:c8:
c0:71:26:d8:e3:b8:33:6d:71:f9:0c:e4:0c:02:01:6c:8a:b6:
e8:c2:43:06:d4:f9:1e:2f:73:57:d3:b1:cb:30:af:a4:77:0c:
7a:dc:51:45:ae:f1:71:87:c4:23:f6:4d:ae:7c:44:14:8d:87:
39:ed:50:ef:76:ab:ff:2f:31:ee:75:b5:d4:07:1d:ca:a6:94:
a2:a3:9b:7f:b4:84:77:21:b5:03:d3:a3:4d:5f:07:52:c8:f3:
50:99:8d:46:95:3b:ac:ad:d5:cf:c9:8a:52:b0:4d:3b:be:f1:
ab:02:12:d4:73:14:00:be:cb:ef:f9:8b:80:51:11:0b:2c:59:
e1:c8:c7:8e:38:74:6f:ff:5d:06:b2:31:3f:41:21:01:03:5f:
ec:fe:9d:16:38:23:8e:46:0c:f4:88:24:05:e8:01:7b:b9:c5:
62:f1:19:fe:24:0c:91:87:82:eb:5a:54:f8:13:09:23:9b:5d:
2c:8b:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:09 2025 by rpki-client