Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/eZo07jBCKWD2FYiNfDITWNW5OaU.roa
File: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (raw, json)
Hash identifier: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=
Subject key identifier: 79:9A:34:EE:30:42:29:60:F6:15:88:8D:7C:32:13:58:D5:B9:39:A5
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 019422FB979FFA86138E84C1CD1701019376
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/eZo07jBCKWD2FYiNfDITWNW5OaU.roa
Signing time: Wed 01 Jan 2025 17:48:21 +0000
ROA not before: Wed 01 Jan 2025 17:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43667
IP address blocks: 77.91.192.0/21 maxlen: 24
94.198.128.0/21 maxlen: 24
185.32.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:97:9f:fa:86:13:8e:84:c1:cd:17:01:01:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Jan 1 17:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=799a34ee30422960f615888d7c321358d5b939a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:ba:d0:71:0e:ea:2e:29:42:f3:79:26:f6:
2c:66:db:09:24:e2:c7:83:d4:9a:25:1d:9a:af:0a:
10:7b:3e:d0:e1:e7:ee:71:8c:17:b5:42:f7:d0:51:
db:e0:74:d9:b5:ee:ed:2d:95:55:55:7f:2e:99:5a:
d8:ae:5c:46:6b:af:4a:c3:93:9d:ac:d8:9f:eb:1c:
fa:45:cf:65:0a:66:f0:15:42:1b:f7:d8:2f:06:ee:
c5:1e:76:7e:43:08:e7:d1:ca:4a:4c:02:6e:49:2e:
2f:57:a0:a3:3b:8b:7c:91:e0:01:13:8d:74:7d:6f:
40:ec:59:d3:06:4f:a8:61:96:39:a0:d5:38:a6:26:
be:45:04:56:29:81:b3:6a:26:3e:2d:a6:79:94:9c:
fd:1e:95:57:78:2b:cd:82:6c:f3:72:79:48:b5:4f:
44:46:7b:93:e4:65:13:51:cd:5e:0c:f6:a4:c2:47:
04:d0:83:85:3e:c1:77:c7:8c:bb:81:68:3d:39:61:
a3:c2:7b:a8:67:48:e3:19:ff:29:fc:aa:a7:db:7c:
b7:2f:92:ac:62:bd:d9:05:08:1e:f0:2c:af:b2:d7:
a9:dd:4e:fa:8c:41:cb:cf:9c:9c:fe:21:87:04:3c:
aa:c7:b5:f0:40:12:d8:d7:42:71:87:90:cf:b6:42:
22:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9A:34:EE:30:42:29:60:F6:15:88:8D:7C:32:13:58:D5:B9:39:A5
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/eZo07jBCKWD2FYiNfDITWNW5OaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.192.0/21
94.198.128.0/21
185.32.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:34:a3:b5:5c:0f:bd:2f:45:12:3e:d5:26:b1:0d:68:56:02:
ff:c7:e6:96:86:b1:a5:35:d5:68:ac:3a:b5:32:e5:6d:26:e8:
7f:86:8f:04:6c:d9:80:44:6c:b1:2e:d9:7c:82:0a:5c:1d:cc:
75:d4:56:84:ab:23:c7:23:47:77:35:80:15:bf:15:bf:8f:90:
f9:bb:2b:42:9e:ad:b1:5c:6e:88:a6:b4:65:c4:94:c9:55:5a:
a5:e5:de:2b:d0:ff:82:4c:46:0f:5c:0b:13:35:1a:bc:8e:e8:
26:4b:d4:e0:f4:4d:c6:e5:95:87:f8:cd:6c:4a:d8:b0:92:72:
e5:77:c9:97:d1:73:04:5c:c0:e2:f5:2c:d3:09:5b:03:23:76:
ea:77:fa:71:c7:ea:75:fa:e4:b8:4e:c2:ab:fc:81:e4:d1:2d:
18:5d:3f:8d:fb:e1:13:4f:b9:67:e9:22:f4:2a:7a:4d:23:61:
2c:41:05:78:61:94:5d:d0:b0:62:7c:08:bb:5b:1a:e1:54:fd:
b0:aa:72:0b:55:7c:2e:f9:24:5a:ed:78:03:5a:b4:09:14:5f:
6b:a8:0e:27:6a:96:f0:0d:6f:31:81:65:b7:0c:71:32:bd:a0:
e8:d9:c4:a4:f8:07:cd:1f:8f:44:2e:5d:fb:3f:ef:d1:e2:fd:
6d:50:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net