Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/xCeuCdpHeZXyZn91vNpEgouKwNY.roa
File: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (raw, json)
Hash identifier: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=
Subject key identifier: C4:27:AE:09:DA:47:79:95:F2:66:7F:75:BC:DA:44:82:8B:8A:C0:D6
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019421B24FFAEB98D4E4D980422B341C39C3
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/xCeuCdpHeZXyZn91vNpEgouKwNY.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59754
IP address blocks: 185.73.76.0/22 maxlen: 22
185.73.76.0/23 maxlen: 23
185.73.76.0/24 maxlen: 24
185.73.77.0/24 maxlen: 24
185.73.78.0/23 maxlen: 23
185.73.78.0/24 maxlen: 24
185.73.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:fa:eb:98:d4:e4:d9:80:42:2b:34:1c:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c427ae09da477995f2667f75bcda44828b8ac0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:6a:2f:f8:75:ae:92:d3:47:99:35:98:44:
7a:9d:48:00:fc:2f:16:8e:12:54:e7:5e:c0:1c:b0:
f5:a8:e6:89:11:1b:2e:2f:02:a3:b3:2c:98:7d:5b:
51:9e:82:27:a4:1d:ae:57:e8:16:c6:eb:11:c6:13:
83:58:d1:65:9f:95:8e:86:09:91:f6:73:83:fe:a6:
7e:39:c9:24:d1:86:b6:c3:e4:77:02:ea:2f:bb:de:
5a:58:14:51:f5:63:72:ca:0c:6b:7b:70:95:07:db:
19:b1:a4:70:0d:2a:60:df:03:aa:f7:61:27:5a:43:
0a:1d:cb:54:c1:ad:32:41:dd:4a:b0:cb:0c:91:47:
37:af:0d:cc:e1:39:30:2a:37:18:83:06:9d:b0:d2:
af:d0:77:0d:aa:a2:ad:08:13:95:42:24:4e:43:b0:
0e:45:53:68:43:2e:7b:e5:8a:93:d1:0c:0b:03:f8:
54:76:38:96:16:e0:88:a9:d5:d0:83:80:0e:27:ec:
c1:8d:6b:c3:a5:73:9d:a5:9c:07:77:7c:4f:4f:12:
d4:9c:c2:0c:28:76:26:62:34:12:b4:b0:68:2c:d7:
43:1c:62:4d:2f:97:34:35:dc:c3:6d:90:7d:e0:bc:
4a:23:8c:ba:0f:b8:9d:d2:86:06:f9:90:6c:0a:d9:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:27:AE:09:DA:47:79:95:F2:66:7F:75:BC:DA:44:82:8B:8A:C0:D6
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/xCeuCdpHeZXyZn91vNpEgouKwNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.76.0/22
Signature Algorithm: sha256WithRSAEncryption
43:8d:f2:6f:e3:c4:db:92:59:a5:76:dc:e5:99:81:3a:4b:e2:
be:7a:32:0d:c7:00:5e:56:c5:cf:02:ee:9a:06:ed:ed:d4:1d:
a1:83:87:6b:dc:57:ca:fd:f4:85:87:aa:cd:db:5f:04:47:35:
2e:a0:81:e8:1e:05:45:25:0f:a1:e6:cb:40:6f:53:23:0b:5b:
44:ed:b3:ae:0c:70:ee:ee:84:e1:27:69:4b:83:00:30:11:4f:
5c:62:de:1c:ab:6e:ba:11:12:8c:d2:87:8e:3b:63:8f:04:76:
b7:4f:6c:3a:3c:fb:42:f6:0b:90:0a:c4:d2:21:51:80:f8:d0:
90:46:73:1d:87:a2:3f:29:aa:61:41:4f:4e:05:b2:ee:9d:3b:
bf:3a:f2:cd:3b:50:1a:7a:28:76:f2:2f:9f:c3:56:f2:09:c8:
0d:5b:8a:d2:15:b6:81:6d:c6:b7:03:9e:88:a2:60:8f:db:14:
2f:aa:aa:0d:68:e9:bd:61:fa:24:aa:fa:a3:94:a8:07:3f:e3:
26:12:34:42:9d:98:91:ba:4f:2d:21:0d:5d:0f:14:80:7e:cc:
9f:cc:3e:c1:65:e9:ea:ad:07:c3:0f:80:02:66:ae:ce:34:36:
b5:d8:df:3a:6b:5b:c6:3e:5a:d4:d9:00:88:ff:8e:10:6c:62:
a9:53:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net