Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/hnd60PCb7MPrkZCil3KA8PAN_Es.roa
File: hnd60PCb7MPrkZCil3KA8PAN_Es.roa (raw, json)
Hash identifier: tL22gGuXB6lbd7BTXfGRxTYYeMYRJxuhGpU4/ThPHe4=
Subject key identifier: 86:77:7A:D0:F0:9B:EC:C3:EB:91:90:A2:97:72:80:F0:F0:0D:FC:4B
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 01961087634BDCF00D7B57BE44D6A671B17B
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/hnd60PCb7MPrkZCil3KA8PAN_Es.roa
Signing time: Mon 07 Apr 2025 13:53:50 +0000
ROA not before: Mon 07 Apr 2025 13:53:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201642
IP address blocks: 77.111.64.0/22 maxlen: 22
185.143.237.0/24 maxlen: 24
194.164.0.0/23 maxlen: 23
2a14:3200:2a14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:87:63:4b:dc:f0:0d:7b:57:be:44:d6:a6:71:b1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Apr 7 13:53:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86777ad0f09becc3eb9190a2977280f0f00dfc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:78:ee:38:36:e6:4f:c3:c6:45:02:de:0a:
16:08:49:30:fb:74:17:1a:be:f6:00:e1:3f:1b:b2:
53:ee:04:c7:ab:d0:c5:10:3a:da:ef:15:2a:1d:4d:
06:9e:99:f1:fc:94:23:bd:fb:02:e1:28:dc:29:5d:
15:8f:2f:31:c5:b3:51:e0:50:ab:35:fd:55:44:bf:
66:e8:79:63:50:6a:c9:98:1a:df:cc:1f:bf:f2:86:
59:e9:04:c4:fa:1e:e4:6e:e0:45:e2:e4:7f:f5:78:
9c:ef:c0:28:44:8a:6c:53:de:1d:96:2f:59:f8:d4:
28:c2:cc:a6:16:df:8e:b7:34:35:fa:c5:34:74:f0:
46:aa:ae:7b:e4:43:91:65:82:48:ab:2f:38:7c:9c:
4f:2d:42:7a:ae:f2:a3:e0:f4:19:92:40:79:77:a9:
09:92:a2:19:0a:16:e2:1d:df:96:3c:21:09:bd:20:
fa:f3:41:bd:a1:fa:c0:5a:cb:3a:3e:4b:f1:b2:36:
e0:23:ac:89:f0:6a:03:15:b7:6a:de:a6:6d:b2:68:
7b:7d:4b:af:87:32:ce:f0:e2:bd:c9:7d:0d:8d:66:
5a:d7:32:69:99:10:6e:72:3d:5b:5f:fc:92:f7:52:
3f:ae:17:84:62:0b:34:db:80:2b:32:41:8b:da:0b:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:77:7A:D0:F0:9B:EC:C3:EB:91:90:A2:97:72:80:F0:F0:0D:FC:4B
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/hnd60PCb7MPrkZCil3KA8PAN_Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.64.0/22
185.143.237.0/24
194.164.0.0/23
IPv6:
2a14:3200:2a14::/48
Signature Algorithm: sha256WithRSAEncryption
c6:df:c6:9c:e8:fd:52:37:e5:8d:6c:18:23:01:a7:5b:ef:33:
a2:4a:12:7f:d9:7f:8d:ed:5e:9a:17:dc:64:81:2e:83:26:69:
57:e1:69:2a:7d:ae:47:38:7f:c0:ba:05:61:dd:10:83:c0:10:
a5:f6:fc:ab:1c:92:fd:c8:46:c7:42:86:48:c9:e4:d6:aa:ca:
ed:8c:8c:55:97:2d:40:2c:8f:e0:bb:08:f5:27:f8:67:92:34:
54:1c:09:74:99:38:7b:17:74:9d:bb:2f:08:b1:48:07:3c:d2:
b2:dc:6a:ca:31:6a:8c:cf:68:50:0a:06:00:37:4e:70:be:df:
ae:77:1b:ae:8c:9b:3f:9f:6a:c8:c4:d4:72:dc:0a:e0:02:ea:
3e:ef:da:f2:eb:3e:e8:28:26:d4:c8:56:13:1a:98:70:22:66:
86:da:ff:25:31:c8:15:30:01:27:8c:aa:57:8a:c4:af:3a:d7:
37:f4:c8:dd:6a:bb:ab:a2:70:94:54:ea:79:4e:35:cf:0e:6f:
89:38:0e:d4:9b:03:ec:27:07:fa:54:e4:fe:9e:c9:11:ce:ae:
99:13:ac:a4:39:6a:c2:63:84:de:60:b9:87:38:22:fb:25:69:
5a:3d:66:15:dd:a1:84:02:b1:3f:89:b6:01:24:67:0c:ed:c6:
76:4a:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:51 2025 by rpki-client on console.sobornost.net