Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/7vqhq4mI5Gbj6hl3d0arvkgBn5M.roa
File: 7vqhq4mI5Gbj6hl3d0arvkgBn5M.roa (raw, json)
Hash identifier: ga0+sUJG5Ldm7n5cbpmUNHNYgfi2aUIUE9l5wXaYHQs=
Subject key identifier: EE:FA:A1:AB:89:88:E4:66:E3:EA:19:77:77:46:AB:BE:48:01:9F:93
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01936DD7F5F841F4000C437C766AA44DD8DF
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/7vqhq4mI5Gbj6hl3d0arvkgBn5M.roa
Signing time: Wed 27 Nov 2024 13:38:09 +0000
ROA not before: Wed 27 Nov 2024 13:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 77.95.201.0/24 maxlen: 24
77.95.203.0/24 maxlen: 24
109.71.240.0/24 maxlen: 24
109.71.241.0/24 maxlen: 24
109.71.243.0/24 maxlen: 24
109.71.244.0/24 maxlen: 24
109.71.245.0/24 maxlen: 24
109.71.246.0/24 maxlen: 24
109.71.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:d7:f5:f8:41:f4:00:0c:43:7c:76:6a:a4:4d:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Nov 27 13:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eefaa1ab8988e466e3ea19777746abbe48019f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:05:11:e4:c7:b5:e9:4a:21:2e:cc:84:75:
7c:72:53:57:f9:c5:64:0d:b1:12:17:02:2b:12:62:
8d:62:02:b2:be:60:11:7e:ed:fc:c0:d2:00:54:00:
10:27:0b:ba:83:fe:75:0c:7b:34:b0:99:8d:9d:01:
65:53:f5:e4:df:da:95:c3:1b:cf:39:fb:e6:41:b4:
4a:8f:01:92:4d:51:7c:00:6c:8e:e5:ed:1e:37:77:
b8:82:bf:53:66:da:1a:06:f9:f4:de:73:84:e5:eb:
bf:ac:a5:b7:2e:47:82:e8:56:36:f7:8a:3c:3f:30:
a7:96:86:ee:b4:f0:61:19:f0:67:48:23:0a:79:64:
19:79:46:cd:fb:f2:d1:86:64:9c:15:56:5d:e4:c4:
1b:47:a1:e1:af:3e:cb:46:c0:64:9d:ac:7f:ee:e5:
cd:da:16:54:bd:34:6d:76:2a:10:ca:7f:9c:c0:e0:
46:63:80:76:7c:ea:8e:8a:7d:37:d0:29:33:c4:17:
99:c4:fc:69:39:98:32:88:23:b8:9e:82:bf:0d:4e:
c6:2b:a0:bc:57:1c:58:60:30:b4:4f:f0:5f:f7:69:
d0:0f:32:f6:86:bb:18:98:22:28:f0:55:62:39:1d:
0e:e0:64:03:16:d7:2b:02:72:01:cc:c9:2f:b6:fc:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:A1:AB:89:88:E4:66:E3:EA:19:77:77:46:AB:BE:48:01:9F:93
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/7vqhq4mI5Gbj6hl3d0arvkgBn5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.201.0/24
77.95.203.0/24
109.71.240.0/23
109.71.243.0-109.71.247.255
Signature Algorithm: sha256WithRSAEncryption
60:31:47:46:98:70:21:fc:10:c6:62:f9:8e:c4:cc:e9:24:4b:
d4:a1:5f:87:ac:31:96:f3:87:02:66:11:8a:1c:dd:f6:0e:c8:
eb:a0:b3:fe:a4:72:de:6c:f5:cd:4f:a9:c6:81:ac:7b:b7:81:
53:d4:28:93:7e:8c:64:f4:0d:f9:f8:ac:d4:e9:01:17:0d:0d:
3d:0c:1b:47:2b:d4:82:9b:1a:1b:ae:98:39:49:5d:56:18:95:
dd:3a:f8:00:8c:25:42:5f:a4:97:7c:b9:e4:54:55:6d:ad:b1:
e1:ba:35:27:0e:a0:64:d0:8e:fb:a0:d5:0a:34:5a:6b:88:03:
37:55:e3:56:99:19:82:5b:b6:d7:0d:e3:d6:b5:ec:05:3c:02:
b6:41:a3:bb:40:06:aa:16:f3:a9:93:35:04:8e:4d:02:8f:0a:
1e:d0:cf:77:59:59:3b:32:1e:7a:5c:cc:09:f9:e6:cb:83:4d:
d6:38:36:44:8b:98:d7:65:76:9f:85:da:58:55:cf:06:8a:f9:
44:b3:a3:f0:4e:e8:0b:3b:08:e6:c3:e0:de:3c:11:e5:39:6a:
46:7a:ba:5d:67:87:f9:33:06:62:cf:19:c0:c0:72:04:ca:09:
bd:bd:34:90:bf:9c:28:e9:1c:72:6c:d6:21:f5:d3:43:73:36:
b0:cf:70:82
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZNt1/X4QfQADEN8dmqkTdjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw
YWNjNDEwHhcNMjQxMTI3MTMzODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWZhYTFhYjg5ODhlNDY2ZTNlYTE5Nzc3NzQ2YWJiZTQ4MDE5ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5oFEeTHtelKIS7MhHV8clNX+cVk
DbESFwIrEmKNYgKyvmARfu38wNIAVAAQJwu6g/51DHs0sJmNnQFlU/Xk39qVwxvP
OfvmQbRKjwGSTVF8AGyO5e0eN3e4gr9TZtoaBvn03nOE5eu/rKW3LkeC6FY294o8
PzCnlobutPBhGfBnSCMKeWQZeUbN+/LRhmScFVZd5MQbR6Hhrz7LRsBknax/7uXN
2hZUvTRtdioQyn+cwOBGY4B2fOqOin030CkzxBeZxPxpOZgyiCO4noK/DU7GK6C8
VxxYYDC0T/Bf92nQDzL2hrsYmCIo8FViOR0O4GQDFtcrAnIBzMkvtvzCQQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFO76oauJiORm4+oZd3dGq75IAZ+TMB8GA1UdIwQY
MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt
M2JlOTk1ZDJiYmRhLzEvN3ZxaHE0bUk1R2JqNmhsM2QwYXJ2a2dCbjVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh
LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQATV/JAwQA
TV/LAwQBbUfwMAwDBABtR/MDBANtR/AwDQYJKoZIhvcNAQELBQADggEBAGAxR0aY
cCH8EMZi+Y7EzOkkS9ShX4esMZbzhwJmEYoc3fYOyOugs/6kct5s9c1PqcaBrHu3
gVPUKJN+jGT0Dfn4rNTpARcNDT0MG0cr1IKbGhuumDlJXVYYld06+ACMJUJfpJd8
ueRUVW2tseG6NScOoGTQjvug1Qo0WmuIAzdV41aZGYJbttcN49a17AU8ArZBo7tA
BqoW86mTNQSOTQKPCh7Qz3dZWTsyHnpczAn55suDTdY4NkSLmNdldp+F2lhVzwaK
+USzo/BO6As7CObD4N48EeU5akZ6ul1nh/kzBmLPGcDAcgTKCb29NJC/nCjpHHJs
1iH100NzNrDPcII=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:40 2024 by rpki-client on console.sobornost.net