Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/76lm6SfviDaVdkh8SLpKd3TaoCs.roa
File: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (raw, json)
Hash identifier: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=
Subject key identifier: EF:A9:66:E9:27:EF:88:36:95:76:48:7C:48:BA:4A:77:74:DA:A0:2B
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019421443C7E1B377E1D43CF6B8E9C460DBC
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/76lm6SfviDaVdkh8SLpKd3TaoCs.roa
Signing time: Wed 01 Jan 2025 09:48:27 +0000
ROA not before: Wed 01 Jan 2025 09:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 185.16.132.0/22 maxlen: 22
185.77.160.0/24 maxlen: 24
185.77.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:3c:7e:1b:37:7e:1d:43:cf:6b:8e:9c:46:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jan 1 09:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa966e927ef88369576487c48ba4a7774daa02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:7b:8b:1b:c5:fc:36:af:24:06:86:12:b2:
88:22:4a:a4:a7:53:8a:e8:70:e7:89:06:af:ea:0b:
a3:15:82:77:7f:05:e5:49:50:6b:d7:e8:2e:a1:4d:
c3:f1:3f:6e:b6:b8:5b:ab:b6:f5:5b:cd:7e:e6:b0:
ad:31:6e:4a:b0:50:23:c6:a6:8b:ce:9a:91:7b:63:
7f:42:a2:d3:16:e1:1a:ea:5d:00:41:87:64:86:ef:
06:62:ef:2a:32:e2:f4:fa:7b:20:a0:31:f6:ab:17:
cf:e5:ca:5c:7b:cc:d3:07:4f:77:f5:e8:49:64:77:
4d:48:51:15:86:8c:6a:71:c9:23:5f:ed:87:49:60:
e6:45:5a:ba:92:51:b8:d2:68:79:a4:a5:65:4a:bb:
d7:b4:53:43:57:f3:2c:0c:f4:14:2a:64:f6:c9:32:
23:92:ad:09:1d:a2:6a:6a:03:f3:a2:55:95:40:1f:
35:9c:0d:9c:71:5a:79:70:fc:82:26:bf:de:b7:91:
0f:a0:9e:46:7d:be:66:77:09:fb:13:4c:18:13:f3:
a0:e2:18:d5:96:2f:01:7e:94:ec:e2:8b:4c:8b:58:
66:5f:f3:a0:88:58:be:c9:8b:7c:ea:34:29:30:5b:
07:a5:13:c2:31:f9:ee:ac:81:8f:58:17:b5:5e:7f:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:66:E9:27:EF:88:36:95:76:48:7C:48:BA:4A:77:74:DA:A0:2B
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/76lm6SfviDaVdkh8SLpKd3TaoCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.132.0/22
185.77.160.0/24
185.77.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:82:7c:72:61:97:1b:9e:1e:d1:02:0a:54:48:d2:3f:9e:5f:
51:46:7a:9e:93:76:2e:32:4c:65:97:48:72:fc:f8:45:36:0d:
57:02:d6:fd:d0:5b:6a:9b:f0:b5:90:75:92:15:0c:e3:da:31:
da:91:e2:4c:43:1e:02:2b:9d:6f:dc:c7:7b:20:02:42:90:d9:
c4:d5:45:07:e8:66:74:71:d6:4d:bf:17:19:07:4b:32:1e:0d:
7b:55:c0:11:ca:52:45:cf:1e:eb:76:c7:8b:a6:33:85:a5:10:
d5:50:07:0b:93:9f:3b:0c:b4:5d:8b:9f:d7:0e:1f:25:3b:55:
d2:5d:e2:a7:43:ed:3b:cc:e4:ec:11:6f:50:7f:ae:0e:e9:22:
54:9c:0e:01:ee:e2:96:fe:62:a7:db:25:09:04:af:db:c4:38:
ee:58:2a:af:aa:cc:6b:70:25:49:77:8d:65:17:78:18:1d:e9:
21:c7:36:d2:df:6e:d1:67:21:4d:e4:7a:30:e9:47:ad:e9:10:
c4:9c:c5:b1:0b:41:18:8c:b3:dd:c4:44:41:86:52:22:9a:21:
d3:ad:45:16:44:bc:33:a8:be:b5:55:a7:91:ac:2b:0d:a6:e5:
a6:b4:93:b1:a0:11:0b:6e:3c:cd:39:74:4f:37:32:79:8f:99:
79:a9:e8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net