Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/8830yksUtOARQk3UFlh-4PNgBiA.roa
File: 8830yksUtOARQk3UFlh-4PNgBiA.roa (raw, json)
Hash identifier: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=
Subject key identifier: F3:CD:F4:CA:4B:14:B4:E0:11:42:4D:D4:16:58:7E:E0:F3:60:06:20
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 0194206823F2F7A0ABEF3FAF2202524868CF
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/8830yksUtOARQk3UFlh-4PNgBiA.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39115
IP address blocks: 77.247.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:23:f2:f7:a0:ab:ef:3f:af:22:02:52:48:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3cdf4ca4b14b4e011424dd416587ee0f3600620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:77:3b:b1:1b:c9:78:1f:88:fc:ed:a9:0e:66:
19:3d:8a:3e:5d:bb:ff:d4:90:8d:4f:27:ae:59:ea:
ac:54:25:06:a1:59:5f:fa:c0:84:a4:de:d6:5d:53:
b5:cc:f9:84:f5:19:b2:c6:f3:06:30:b6:f5:4e:4f:
ee:3a:63:2d:0c:24:3d:8b:ad:e7:10:0f:ae:7c:83:
e9:bc:8a:39:c0:18:db:e0:82:95:5f:9b:cc:45:79:
f9:ff:c7:86:f5:29:be:f7:a7:59:df:4e:b8:b5:c7:
0a:85:c7:bf:d4:17:1c:92:fb:77:29:e2:59:17:27:
fe:e1:49:2b:49:63:4a:aa:18:f4:59:2c:35:14:14:
33:23:2f:e2:78:24:3d:2c:3b:ab:68:75:99:ed:49:
24:56:73:b1:77:fd:44:f8:4c:6d:b4:85:bf:24:00:
e6:bd:88:26:4e:2d:65:b1:0a:e5:fb:6f:ee:71:04:
bc:d0:14:c7:bb:60:42:1d:27:41:96:bc:cc:6e:47:
ee:63:43:03:ff:19:f3:cd:2c:63:9e:f9:8c:3f:32:
1a:9b:9c:f5:62:c5:81:d0:da:93:6b:ac:0c:38:f0:
61:93:db:b6:8d:8b:57:f4:b7:fe:bc:b8:48:89:52:
1f:3b:62:af:1d:82:19:c6:61:f8:ea:eb:1c:0c:50:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:F4:CA:4B:14:B4:E0:11:42:4D:D4:16:58:7E:E0:F3:60:06:20
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/8830yksUtOARQk3UFlh-4PNgBiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7d:0d:72:93:fb:93:cc:aa:e6:83:bc:30:6b:a5:d5:4f:9e:
b3:f1:f1:62:64:87:61:10:c8:54:45:e5:39:67:cf:7b:0a:93:
5a:27:26:2e:98:95:15:1e:d4:55:11:47:bf:a7:1a:40:f2:46:
e5:77:47:6e:47:be:89:ad:59:43:0a:08:5a:26:0d:2b:b9:de:
60:82:3c:41:33:41:0d:4b:8c:09:2b:41:cf:00:68:7d:44:8b:
c4:29:d3:84:c2:6f:53:e4:4b:eb:3a:1c:22:26:11:a4:79:af:
55:ab:ca:fe:35:d3:3f:8c:22:bf:35:bf:e4:2e:fb:2b:9d:08:
db:54:f9:68:30:07:a7:f3:0b:6d:bb:d7:84:f1:9a:21:fe:ee:
c4:48:45:0f:d3:45:10:41:2d:98:9b:55:fa:d2:45:a4:37:6a:
d4:43:b8:89:ca:c6:a3:35:71:d1:05:de:c3:4d:30:49:04:b7:
09:40:5b:3b:4f:95:be:68:01:02:1c:38:ea:77:ff:fd:11:4d:
4c:30:9b:73:73:40:fd:0d:d3:24:2b:d6:24:ae:df:28:b6:5d:
a9:f7:85:c8:62:6c:a1:b0:4f:7e:25:04:59:f7:ca:a7:f2:2e:
dd:30:13:cc:84:69:bd:28:3c:82:23:bd:29:55:d0:43:b4:21:
20:1e:5b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net