Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/MAs6M9WXQ2jwFVtRgfvahcdFchM.roa
File: MAs6M9WXQ2jwFVtRgfvahcdFchM.roa (raw, json)
Hash identifier: 3nIuTn8G+xlSIVUl5W7Q4Dah/YXRu37V5NcqWT5zDZw=
Subject key identifier: 30:0B:3A:33:D5:97:43:68:F0:15:5B:51:81:FB:DA:85:C7:45:72:13
Certificate issuer: /CN=09ed2bca014c2c44e90b844de89426223c390cf6
Certificate serial: 018571150B6CEC3D8D4C329C4310701F9D05
Authority key identifier: 09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/MAs6M9WXQ2jwFVtRgfvahcdFchM.roa
Signing time: Mon 02 Jan 2023 06:04:42 +0000
ROA not before: Mon 02 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 185.161.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:0b:6c:ec:3d:8d:4c:32:9c:43:10:70:1f:9d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ed2bca014c2c44e90b844de89426223c390cf6
Validity
Not Before: Jan 2 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=300b3a33d5974368f0155b5181fbda85c7457213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:ce:eb:a9:9c:6b:0c:3a:25:b2:e5:88:e7:
5f:c8:4e:4b:fe:63:af:72:b9:71:fd:50:7b:86:de:
38:94:b3:80:47:af:12:7d:f5:1e:03:29:c4:86:19:
50:71:9f:95:86:de:39:70:a9:d8:aa:dd:6e:c4:a5:
1f:2e:f4:77:3f:1a:80:d4:fa:10:a5:24:8b:5a:cf:
18:8a:cf:0d:c4:25:4e:28:c3:f9:ec:fb:3d:a3:8d:
7a:48:a4:dd:8c:64:79:7d:6f:33:fd:a2:5f:54:25:
d3:13:b6:5c:c4:be:49:6f:06:0a:27:8c:4f:78:b2:
38:2e:b8:a9:ee:45:9b:40:3e:bf:a4:52:fd:ed:47:
b3:af:65:84:e9:ff:38:bd:dd:31:e7:74:b6:44:1c:
75:17:61:b9:87:b7:4c:78:a7:ce:82:d5:ad:e8:c5:
03:ba:bc:bc:3a:5f:6a:e0:87:8b:a8:32:a4:eb:0f:
27:27:1a:10:73:af:c8:9b:60:07:6b:64:c2:1e:a0:
e5:b0:53:c4:e8:53:bb:93:8f:96:b1:20:44:2f:e9:
b9:c5:9f:9e:e9:01:bc:ef:9a:8b:52:20:9b:74:b8:
71:c4:61:9b:a4:06:35:fa:cc:90:d7:39:f6:bf:bb:
b6:19:9f:9f:ba:e4:95:fe:dc:78:e3:d0:b9:8f:2f:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:3A:33:D5:97:43:68:F0:15:5B:51:81:FB:DA:85:C7:45:72:13
X509v3 Authority Key Identifier:
keyid:09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/MAs6M9WXQ2jwFVtRgfvahcdFchM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.76.0/24
Signature Algorithm: sha256WithRSAEncryption
01:95:2f:e6:0b:e7:4c:14:1e:37:53:07:20:4a:eb:4d:0c:3a:
9b:40:30:b4:fa:bd:15:f8:af:14:eb:f2:a3:e8:67:dc:7a:d8:
23:fc:b6:9b:11:56:92:99:b3:88:fa:7b:4b:e3:a3:99:dd:48:
1e:2e:9d:f9:41:ba:8d:3d:af:87:0b:b3:df:8d:8e:dc:10:67:
81:c2:c1:61:9b:a0:da:dd:6e:63:48:ee:00:0f:b4:f1:c1:3c:
91:ec:47:8a:e7:18:c7:f8:2b:84:8a:1b:99:13:e6:4f:09:b5:
09:20:68:05:60:71:a5:28:90:d2:2f:49:99:3e:73:9f:fa:8c:
2a:48:4b:7e:33:53:82:bb:7f:2e:2a:3b:11:d6:19:c9:ea:62:
1f:de:31:e3:37:2c:33:46:a1:1d:85:0a:54:82:e9:7c:ad:36:
88:07:95:57:11:c3:c3:6f:f7:cd:b2:ab:de:b9:84:3a:00:55:
fc:78:8c:dc:fc:5c:74:9b:dc:af:cf:b9:b5:bb:26:71:6a:5a:
49:ff:97:62:e8:56:00:94:1b:24:2a:40:d4:3a:09:e6:35:75:
f8:24:24:be:a3:28:85:90:17:10:af:b6:f3:42:28:39:71:77:
aa:ba:6b:ff:0b:db:af:96:56:4f:1b:41:56:d2:aa:d9:d2:a9:
ee:f7:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:16:50 2025 by rpki-client