Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa
File: 8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa (raw, json)
Hash identifier: 62aQx/AwBMCJ8pFWHg2Z3I0/UbL8gX53YDgRIUnI4jA=
Subject key identifier: F2:B5:CC:44:35:0E:DC:1D:97:C1:1F:18:47:83:DA:3E:3F:50:91:39
Certificate issuer: /CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Certificate serial: 019423D7C01A9D9745BA1FCA3AE1CD2D7EB6
Authority key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa
Signing time: Wed 01 Jan 2025 21:48:49 +0000
ROA not before: Wed 01 Jan 2025 21:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201393
IP address blocks: 185.76.112.0/22 maxlen: 22
185.76.112.0/24 maxlen: 24
185.76.113.0/24 maxlen: 24
185.76.114.0/24 maxlen: 24
185.76.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c0:1a:9d:97:45:ba:1f:ca:3a:e1:cd:2d:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585
Validity
Not Before: Jan 1 21:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b5cc44350edc1d97c11f184783da3e3f509139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:6c:9b:af:39:b1:71:e2:e7:d3:86:25:4f:
10:3f:fe:b5:c2:7a:db:a2:48:e1:44:7d:62:30:d5:
60:f8:d8:b3:84:8a:b9:53:c5:f5:6f:86:01:8c:f6:
27:31:2a:88:21:22:8d:2b:30:3a:0f:b7:ae:63:df:
c7:0c:d5:55:1b:f4:f8:f4:56:10:09:b4:39:e5:8b:
84:79:fa:6d:fb:2c:b4:a0:87:69:ca:99:5c:e1:67:
97:3d:6c:7e:c6:c2:d1:fc:35:eb:e1:3a:0b:23:60:
8b:8a:c4:e4:9f:81:8a:a5:1d:12:f6:ab:5f:c9:5b:
f5:c6:d4:26:d5:75:ee:c4:26:c1:39:b4:60:6c:fe:
b3:61:ac:77:6b:7c:d4:30:2b:b9:70:54:5a:cc:13:
c0:90:f9:38:c7:bc:d1:d9:c4:dc:d9:bd:e1:db:6e:
37:79:40:c2:c0:47:65:71:53:84:cf:e6:8c:a5:70:
13:e9:2b:17:58:b7:13:c4:3c:6f:3d:52:b5:3d:3d:
eb:6a:df:99:65:19:5c:d7:27:30:dc:d7:79:3d:a3:
ab:31:9e:26:28:d8:41:0e:c8:67:6c:86:8f:b9:56:
bd:b4:e5:ed:26:c0:87:ab:02:ca:32:4c:3d:df:b0:
9a:31:2f:7e:44:d0:5b:de:a0:ae:21:5e:79:16:a5:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B5:CC:44:35:0E:DC:1D:97:C1:1F:18:47:83:DA:3E:3F:50:91:39
X509v3 Authority Key Identifier:
keyid:E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/8rXMRDUO3B2XwR8YR4PaPj9QkTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.112.0/22
Signature Algorithm: sha256WithRSAEncryption
91:b9:83:2d:f5:b7:2f:43:36:f5:0e:2a:12:67:2f:76:db:8e:
f4:1e:20:e2:6b:67:aa:39:29:05:85:5a:36:11:10:3a:27:0d:
eb:eb:19:96:54:f3:4b:4a:f8:9f:ce:db:42:0f:31:66:ac:02:
13:3b:c6:ee:27:a7:cf:69:7c:7f:fa:f5:ad:6d:20:3e:68:f5:
75:65:11:10:f5:a6:69:af:0d:52:41:22:39:e8:74:e6:d7:60:
92:be:ef:3e:56:ea:9e:9b:66:e6:15:bc:b0:80:a6:ba:d9:69:
ed:19:b6:36:a4:e1:13:2b:04:6d:e3:80:b8:01:83:14:99:a0:
a6:6d:66:7c:cf:92:71:21:d2:90:1d:8d:ff:9e:98:a7:af:7e:
19:f4:8f:af:bd:35:3d:c6:86:9a:04:ab:e9:fb:97:e1:1a:0e:
58:7a:56:76:e7:f4:44:c8:a4:99:63:d3:19:1b:e8:d5:e4:3d:
3c:15:ee:ec:96:18:97:98:2b:96:79:a9:82:24:12:a2:f7:12:
a2:08:2b:62:96:e0:bf:04:8a:22:01:80:de:cc:71:0c:f4:37:
e2:21:02:44:9e:83:28:3b:6e:35:6e:88:b0:62:0d:69:aa:54:
b8:5e:db:f3:48:3b:ed:fd:fa:68:e5:66:03:c2:b6:1a:af:01:
da:cf:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:09 2025 by rpki-client