Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/JMkLxoa9gyb522lPudXUln-VtH8.roa
File: JMkLxoa9gyb522lPudXUln-VtH8.roa (raw, json)
Hash identifier: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=
Subject key identifier: 24:C9:0B:C6:86:BD:83:26:F9:DB:69:4F:B9:D5:D4:96:7F:95:B4:7F
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 019426D9DD14565187D4256194155070F3AF
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/JMkLxoa9gyb522lPudXUln-VtH8.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28747
IP address blocks: 77.241.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dd:14:56:51:87:d4:25:61:94:15:50:70:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c90bc686bd8326f9db694fb9d5d4967f95b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:a8:67:f0:5b:f2:51:88:f6:e0:53:49:3b:
92:03:41:1c:4d:c5:76:c6:ab:27:93:49:77:2c:50:
b9:19:54:ce:97:b1:aa:78:82:2e:5f:15:bd:2d:22:
1b:22:48:56:f6:0b:b7:fa:57:f3:78:60:31:df:dd:
b4:3e:4d:96:af:91:5d:e9:9d:cb:30:62:d6:a8:c2:
6c:45:fb:95:46:f1:29:33:5e:52:68:1a:fe:3e:3f:
fa:9b:00:72:68:04:9b:e8:f3:7d:1d:b8:a2:bd:d0:
11:69:39:ab:e2:9e:3c:22:45:eb:7d:89:67:80:13:
e5:be:a7:9c:35:e6:5e:bf:0d:cb:4d:c2:bb:72:f2:
fd:23:f0:c7:2f:7f:3e:1f:58:5f:ed:c4:91:89:dd:
d4:91:88:23:1d:9a:ec:fa:85:e4:5b:7e:ed:3c:aa:
df:64:60:fe:a0:78:31:ae:86:d9:3a:f0:1f:04:1c:
d3:ac:d2:f5:26:86:ad:3e:cb:74:1e:6f:94:5a:18:
d9:9f:67:3e:b3:dd:f9:28:1e:6d:3c:a8:1d:fa:b0:
ae:03:20:d3:44:b8:6b:b4:3e:23:00:1c:e4:a8:88:
ad:28:a0:46:52:84:9f:82:8d:6d:cb:48:74:fe:24:
f0:db:2f:38:e0:fa:2c:7e:b1:0a:7d:10:11:b6:4a:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C9:0B:C6:86:BD:83:26:F9:DB:69:4F:B9:D5:D4:96:7F:95:B4:7F
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/JMkLxoa9gyb522lPudXUln-VtH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.95.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cd:96:be:10:98:ea:c6:cc:1a:f4:aa:7e:4b:93:6e:58:fb:
e8:40:92:01:02:52:ac:66:84:29:46:ab:ea:d5:35:8c:ba:14:
f8:3d:e3:e4:91:4b:6f:cf:c3:05:80:d1:c0:1c:b1:61:25:e4:
db:82:9b:1e:4d:54:cc:96:bd:0a:c0:48:5a:2e:aa:a5:8b:f8:
74:3c:7b:28:0c:32:b0:2d:60:05:46:d4:3f:83:e3:c5:bb:af:
c9:39:5d:ca:eb:8a:3e:27:4d:b2:56:2e:7a:2d:89:6b:53:39:
30:84:71:60:0a:d2:45:31:56:00:da:fa:55:a1:c2:c0:f2:b3:
dc:9e:b3:8d:fd:ab:1e:18:79:15:0d:f3:ee:a8:3b:71:0a:6f:
21:23:e0:c1:65:b2:66:4b:da:33:14:ae:87:46:ad:b9:97:dd:
24:59:b5:d4:2f:1c:37:f4:25:c3:00:8c:e1:81:4e:c0:41:f5:
36:e8:00:e6:8e:29:06:e1:6a:0b:6b:0e:fc:8d:ec:90:7c:8c:
1b:f3:55:bd:42:c9:4e:87:62:07:4c:65:bb:c1:66:a5:c8:9e:
00:b6:d8:2c:1c:df:43:77:0b:4a:a7:b0:fd:61:15:51:3b:bd:
93:94:94:3a:95:15:4f:b5:75:02:96:1f:db:41:da:90:27:0c:
66:ef:ea:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2d0UVlGH1CVhlBVQcPOvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjUwMTAyMTE0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGM5MGJjNjg2YmQ4MzI2ZjlkYjY5NGZiOWQ1ZDQ5NjdmOTViNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6eoZ/Bb8lGI9uBTSTuSA0EcTcV2
xqsnk0l3LFC5GVTOl7GqeIIuXxW9LSIbIkhW9gu3+lfzeGAx3920Pk2Wr5Fd6Z3L
MGLWqMJsRfuVRvEpM15SaBr+Pj/6mwByaASb6PN9HbiivdARaTmr4p48IkXrfYln
gBPlvqecNeZevw3LTcK7cvL9I/DHL38+H1hf7cSRid3UkYgjHZrs+oXkW37tPKrf
ZGD+oHgxrobZOvAfBBzTrNL1JoatPst0Hm+UWhjZn2c+s935KB5tPKgd+rCuAyDT
RLhrtD4jABzkqIitKKBGUoSfgo1ty0h0/iTw2y844PosfrEKfRARtkrm2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTJC8aGvYMm+dtpT7nV1JZ/lbR/MB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvSk1rTHhvYTlneWI1MjJsUHVkWFVsbi1WdEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfFfMA0G
CSqGSIb3DQEBCwUAA4IBAQBZzZa+EJjqxswa9Kp+S5NuWPvoQJIBAlKsZoQpRqvq
1TWMuhT4PePkkUtvz8MFgNHAHLFhJeTbgpseTVTMlr0KwEhaLqqli/h0PHsoDDKw
LWAFRtQ/g+PFu6/JOV3K64o+J02yVi56LYlrUzkwhHFgCtJFMVYA2vpVocLA8rPc
nrON/aseGHkVDfPuqDtxCm8hI+DBZbJmS9ozFK6HRq25l90kWbXULxw39CXDAIzh
gU7AQfU26ADmjikG4WoLaw78jeyQfIwb81W9QslOh2IHTGW7wWalyJ4AttgsHN9D
dwtKp7D9YRVRO72TlJQ6lRVPtXUClh/bQdqQJwxm7+rO
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net