Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mEEWlcL66O1D2m6UzXsYcjPwHpM.roa
File: mEEWlcL66O1D2m6UzXsYcjPwHpM.roa (raw, json)
Hash identifier: OlSkOPCbGhpW88wg888nDOtrJj0r6KHmiNy+klmxw10=
Subject key identifier: 98:41:16:95:C2:FA:E8:ED:43:DA:6E:94:CD:7B:18:72:33:F0:1E:93
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019427B68092DB1E2B8CB77C50E7D92778C3
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mEEWlcL66O1D2m6UzXsYcjPwHpM.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200441
IP address blocks: 185.76.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:80:92:db:1e:2b:8c:b7:7c:50:e7:d9:27:78:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98411695c2fae8ed43da6e94cd7b187233f01e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:0f:34:f3:61:89:54:d5:fc:06:e5:e1:bb:
7d:69:32:e3:c9:60:4e:d3:f6:e8:a8:6c:e7:6b:05:
5e:5f:f1:65:7a:f2:42:fe:b5:39:46:d3:15:07:47:
ae:a4:c5:b9:70:d2:67:3e:5c:39:93:e7:b5:19:7a:
71:40:ea:f1:77:df:d8:d0:d4:c7:4a:9e:b5:ea:8d:
ba:df:77:4f:95:6b:9d:f6:7a:29:2e:e8:2a:8d:72:
45:a9:21:40:97:54:d7:81:bb:ba:fd:f4:9f:53:0b:
77:e5:90:99:a5:4c:57:94:eb:24:9a:14:87:4e:da:
d9:c4:43:f2:80:3d:3a:ce:c4:60:54:e5:92:bc:23:
3d:fb:19:af:39:9b:24:87:16:62:7c:d8:b6:d6:a1:
50:3a:47:23:dc:af:07:ac:9d:20:87:00:c0:c2:a5:
85:b6:09:ae:32:9f:c1:4e:d3:68:d3:45:77:2a:f8:
d9:a3:7b:0f:81:c4:67:7d:a2:1d:44:7f:07:13:c6:
7e:75:e4:f5:d4:7c:51:48:a7:e2:b8:bc:d1:20:b0:
42:13:77:62:56:21:cd:bf:09:46:d9:1e:39:37:14:
22:5a:27:11:ab:09:c1:5a:cf:43:6c:ab:5b:da:41:
fc:85:88:9c:48:e7:9d:11:e5:0b:de:97:25:89:f4:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:16:95:C2:FA:E8:ED:43:DA:6E:94:CD:7B:18:72:33:F0:1E:93
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/mEEWlcL66O1D2m6UzXsYcjPwHpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:34:05:0a:39:47:f3:21:de:21:45:bc:67:98:cb:3a:46:da:
0a:3b:83:f9:4a:f4:86:ad:de:11:3d:c0:6d:33:80:ea:58:87:
97:52:e2:37:1c:15:97:da:55:f1:1d:3c:ee:0a:b7:f7:51:be:
91:67:c6:75:1c:0c:b4:80:c2:c9:d7:7c:94:dd:a9:07:65:26:
cf:23:5f:45:ed:5c:9d:b0:94:76:b4:f1:fb:97:10:18:b0:23:
e9:33:43:ed:6c:d6:29:42:3b:d2:ff:51:05:98:8b:2a:f0:46:
dd:40:3b:50:e1:ec:ef:fc:f4:17:1c:92:45:79:81:db:51:7f:
c1:36:27:29:c8:d6:8e:4b:08:70:aa:02:b9:0d:e8:2b:2f:b1:
c4:31:fb:c7:7d:2b:5e:49:a1:b4:b6:55:c5:d8:cb:dd:01:d4:
80:39:28:ba:12:ab:b0:91:85:74:8a:91:ff:72:c8:03:6d:33:
09:80:3d:67:4f:7c:fd:fa:cf:02:a4:01:1e:7b:22:e4:ea:32:
8e:62:c1:ec:ab:21:16:40:d7:ef:f0:ba:3d:28:a1:e8:80:9e:
d6:91:00:56:6d:15:93:32:86:b9:c9:38:fc:2b:9f:06:2c:57:
31:ce:55:e8:58:ed:0e:d7:4b:bc:bd:6c:d2:3d:33:41:87:3f:
81:09:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:30 2025 by rpki-client