Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa
File: fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa (raw, json)
Hash identifier: BU70IeuzZkqToqE9mDUdKtq0A+ixKO/u5mFIegNEZGk=
Subject key identifier: 7D:1B:E1:F2:C5:F5:1E:2E:52:F0:CE:27:33:D4:8B:EF:AA:82:E2:9C
Certificate issuer: /CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Certificate serial: 019425FCC7ED950628DF5CF7DD8451C51FE4
Authority key identifier: D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42907
IP address blocks: 77.245.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c7:ed:95:06:28:df:5c:f7:dd:84:51:c5:1f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d6064186490d8cea2347ff7a3a82492d1f7977
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d1be1f2c5f51e2e52f0ce2733d48befaa82e29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:aa:d5:28:36:3a:32:3b:3d:fe:8a:d0:ae:
3e:67:9c:49:a0:ff:76:1d:ac:af:21:62:5e:01:26:
f0:d4:f8:a0:9f:36:af:59:f7:f5:43:45:76:bd:aa:
47:d5:e8:59:36:d9:2a:00:fb:3e:60:1e:d9:fc:71:
51:77:7e:e4:b1:72:1b:c9:d2:c4:d4:28:2b:65:28:
71:d3:09:7f:8e:9b:9c:51:f9:cf:7a:de:99:eb:44:
37:48:14:7b:60:3d:6e:88:d4:14:46:cf:f4:94:77:
67:6e:e5:2c:b4:a2:1d:5a:bb:1b:51:ba:33:87:4f:
b1:52:f9:82:7a:3c:3a:3d:fe:b2:27:66:65:d3:3c:
b0:87:67:a6:30:38:fd:02:11:d8:9a:27:94:5e:83:
e5:a3:ee:01:c7:5f:74:bb:56:6f:b0:84:31:82:16:
b1:9a:4c:60:57:58:36:75:32:a0:6d:dd:ff:ca:43:
9a:64:c9:fa:6d:86:6c:fd:71:ff:09:db:39:ce:f2:
75:b0:c1:18:ab:da:ac:35:90:b8:77:e7:c4:c9:46:
3d:e5:7b:16:6c:2f:98:4a:7f:12:a8:a6:ea:87:2c:
42:ae:54:11:80:ee:0d:8b:67:0e:3f:55:13:cd:a8:
c3:5a:5f:eb:3a:8c:16:7f:67:d6:61:17:c8:89:45:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:E1:F2:C5:F5:1E:2E:52:F0:CE:27:33:D4:8B:EF:AA:82:E2:9C
X509v3 Authority Key Identifier:
keyid:D8:D6:06:41:86:49:0D:8C:EA:23:47:FF:7A:3A:82:49:2D:1F:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NYGQYZJDYzqI0f_ejqCSS0feXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/fRvh8sX1Hi5S8M4nM9SL76qC4pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7abdef-91ab-46fb-82e2-56085c9e522e/1/2NYGQYZJDYzqI0f_ejqCSS0feXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.224.0/20
Signature Algorithm: sha256WithRSAEncryption
76:9c:cd:a8:a0:e1:d2:00:dc:b0:48:d2:10:29:b7:78:e0:84:
8d:72:81:bf:df:59:42:c2:dd:fa:99:fb:6b:7f:9f:d3:ac:12:
0d:1f:31:4c:4a:e7:81:1e:66:0f:53:fa:8d:0e:91:68:35:0f:
57:68:9c:2a:f8:ea:96:a8:68:1e:bf:58:0b:43:ae:88:f9:ac:
b7:6c:f1:61:bc:69:83:91:44:3f:90:09:a1:10:8c:3a:87:58:
de:9e:0c:e4:b6:7f:b5:5e:50:0f:91:8d:09:c0:14:91:0f:c4:
e8:d0:24:7b:62:ce:5f:61:0a:75:a4:16:6e:ce:36:ce:5d:20:
cf:f4:bc:6e:12:a7:8d:81:b0:2a:6d:57:d3:70:5d:a9:70:69:
b0:c9:59:37:32:b3:bd:4c:cd:3b:3d:7e:38:79:40:11:70:05:
3a:71:f1:29:a3:84:dd:4c:fa:3a:e9:f7:77:0e:0d:35:56:ac:
99:5e:83:c6:62:c1:bc:bc:78:c3:56:1d:61:1d:e2:f8:27:bf:
90:cf:80:bd:5f:dc:e5:93:ef:38:03:a1:c4:3d:c9:b4:62:0b:
b2:39:5a:17:3b:d7:02:66:62:1f:5b:41:1e:43:02:2c:4b:74:
65:dc:dc:96:9e:43:39:f1:f4:e1:96:fb:f6:7b:ed:2d:bd:c9:
5e:bc:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net