Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa
File: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (raw, json)
Hash identifier: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=
Subject key identifier: DA:53:A1:03:39:42:E4:AD:26:30:8F:1B:72:15:E2:FC:3F:51:DD:1C
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 0194D25A155147C15D76AA0E4E9BCAC956B9
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa
Signing time: Tue 04 Feb 2025 19:05:06 +0000
ROA not before: Tue 04 Feb 2025 19:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42868
IP address blocks: 77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:5a:15:51:47:c1:5d:76:aa:0e:4e:9b:ca:c9:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Feb 4 19:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da53a1033942e4ad26308f1b7215e2fc3f51dd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:52:50:bf:e5:41:69:2c:56:f5:e4:01:d1:
f0:e2:86:6e:54:17:f2:41:89:ab:ce:f6:12:a9:d1:
1e:c6:f1:be:e6:9a:f8:77:e3:3a:8a:fd:fc:0a:fb:
57:e1:1d:9e:a7:32:9d:e8:57:28:1d:6d:6d:df:76:
78:78:16:eb:cb:d3:6f:9e:b3:b3:13:33:ae:6c:16:
1b:59:4a:fc:1b:2f:56:5d:55:45:05:70:34:09:65:
51:94:ab:c6:dd:85:05:95:cf:7d:25:66:9e:55:b1:
e0:c7:9b:e0:ba:56:12:22:22:db:b5:5c:7d:d0:55:
5f:26:ba:19:de:75:98:c3:15:12:f7:70:07:ac:a2:
f0:9a:3e:e1:d0:f8:28:e5:91:70:d8:e1:0a:44:0b:
76:83:f2:73:49:22:6e:2f:13:d5:1e:e9:a5:74:b9:
ff:24:c0:2f:c3:0d:4f:5a:63:37:33:79:64:79:65:
14:ad:1f:63:b4:e3:b4:d2:87:18:79:74:4e:38:dc:
eb:f1:51:a2:23:12:03:a2:df:57:83:2d:6a:d7:9b:
3c:d2:d8:b0:0d:cf:f7:64:94:90:4f:8f:fe:a7:70:
57:db:03:f4:a8:65:a8:68:69:0b:f3:c2:d8:a9:55:
ad:db:af:22:5a:6a:10:ce:e5:29:e9:4d:cf:10:9e:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:A1:03:39:42:E4:AD:26:30:8F:1B:72:15:E2:FC:3F:51:DD:1C
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0-77.245.156.255
77.245.158.0/23
185.87.252.0/23
Signature Algorithm: sha256WithRSAEncryption
18:26:19:05:f8:54:3a:d4:28:75:f4:df:29:c8:26:d7:2c:96:
60:81:ed:2a:c3:39:c6:62:69:74:54:3a:60:2e:7b:27:a1:b2:
cb:c7:09:c4:fc:8a:65:f0:01:81:2a:c1:70:74:7c:2e:b3:08:
b2:e6:8b:20:94:93:29:44:54:8b:b3:aa:de:2d:e5:84:4a:34:
fa:99:63:51:4b:f2:2c:e3:cd:78:14:29:be:fc:b8:6b:e6:04:
71:9b:61:45:02:d1:92:27:fe:28:9d:5c:68:60:e3:0a:a6:be:
0d:f7:b3:a0:8a:b2:1b:82:0e:57:2e:c7:4e:98:41:bd:07:bd:
92:dd:73:06:10:93:d1:f1:32:a1:02:b9:6c:af:b7:d9:12:55:
27:41:f3:6f:f4:e0:0b:05:28:23:fb:96:d3:e4:e1:a6:7e:92:
0c:df:32:a2:f9:09:6d:4c:35:77:1a:34:e7:a0:c4:21:af:fb:
9f:ce:bc:16:73:3d:a2:50:b9:f7:6a:5c:68:05:30:69:e5:e0:
c6:3f:43:c0:1c:78:cc:a3:28:5d:f8:f1:21:d6:a0:ac:26:dc:
b3:fc:6d:bb:e3:c1:d9:24:d2:a2:14:26:86:31:ab:a8:13:51:
96:24:1a:cd:40:a1:a1:2a:b3:2a:36:92:b1:d6:87:04:e5:19:
da:cd:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net